From b5f332c61b2912b4f048d5d2a38557dedfe7b5fb Mon Sep 17 00:00:00 2001 From: Kaarle Ritvanen Date: Wed, 18 Oct 2017 16:25:11 +0300 Subject: test: split to 4 cases --- test.sh | 20 +- test/mandatory/address.lua | 40 - test/mandatory/filter-limit.lua | 84 - test/mandatory/filter.json | 10 - test/mandatory/no-track.json | 17 - test/optional/address.lua | 40 + test/optional/filter-limit.lua | 84 + test/optional/filter.json | 10 + test/optional/no-track.json | 17 + test/output/address/dump | 4528 +++ test/output/address/ipset-awall-masquerade | 2 + test/output/address/rules-save | 1654 + test/output/address/rules6-save | 189 + test/output/dump | 43304 ---------------------- test/output/filter-limit/dump | 39284 ++++++++++++++++++++ test/output/filter-limit/ipset-awall-masquerade | 2 + test/output/filter-limit/rules-save | 9641 +++++ test/output/filter-limit/rules6-save | 9601 +++++ test/output/filter/dump | 896 + test/output/filter/ipset-awall-masquerade | 2 + test/output/filter/rules-save | 185 + test/output/filter/rules6-save | 145 + test/output/ipset-awall-masquerade | 2 - test/output/no-track/dump | 882 + test/output/no-track/ipset-awall-masquerade | 2 + test/output/no-track/rules-save | 195 + test/output/no-track/rules6-save | 125 + test/output/rules-save | 11216 ------ test/output/rules6-save | 9721 ----- 29 files changed, 67502 insertions(+), 64396 deletions(-) delete mode 100644 test/mandatory/address.lua delete mode 100644 test/mandatory/filter-limit.lua delete mode 100644 test/mandatory/filter.json delete mode 100644 test/mandatory/no-track.json create mode 100644 test/optional/address.lua create mode 100644 test/optional/filter-limit.lua create mode 100644 test/optional/filter.json create mode 100644 test/optional/no-track.json create mode 100644 test/output/address/dump create mode 100644 test/output/address/ipset-awall-masquerade create mode 100644 test/output/address/rules-save create mode 100644 test/output/address/rules6-save delete mode 100644 test/output/dump create mode 100644 test/output/filter-limit/dump create mode 100644 test/output/filter-limit/ipset-awall-masquerade create mode 100644 test/output/filter-limit/rules-save create mode 100644 test/output/filter-limit/rules6-save create mode 100644 test/output/filter/dump create mode 100644 test/output/filter/ipset-awall-masquerade create mode 100644 test/output/filter/rules-save create mode 100644 test/output/filter/rules6-save delete mode 100644 test/output/ipset-awall-masquerade create mode 100644 test/output/no-track/dump create mode 100644 test/output/no-track/ipset-awall-masquerade create mode 100644 test/output/no-track/rules-save create mode 100644 test/output/no-track/rules6-save delete mode 100644 test/output/rules-save delete mode 100644 test/output/rules6-save diff --git a/test.sh b/test.sh index 41d867a..ad3b418 100755 --- a/test.sh +++ b/test.sh @@ -9,13 +9,29 @@ cd "$(dirname "$0")" export LUA_PATH="./?.lua;;" LUA=lua${LUA_VERSION} +AWALL="$LUA ./awall-cli" for cls in mandatory optional private; do eval "export AWALL_PATH_$(echo $cls | tr a-z A-Z)=test/$cls" mkdir -p test/$cls for script in test/$cls/*.lua; do - [ -f "$script" ] && $LUA "$script" > "${script%.lua}.json" + [ -f $script ] && $LUA $script > ${script%.lua}.json done done -exec $LUA ./awall-cli ${1:-diff} -o test/output +POLICIES=$(ls test/optional/*.json | sed -E 's:^.*/([^/]+).json$:\1:') + +for pol in $POLICIES; do + $AWALL disable $pol 2>/dev/null +done + +RC=0 +for pol in $POLICIES; do + dir=test/output/$pol + mkdir -p $dir + + $AWALL enable $pol + $AWALL ${1:-diff} -o $dir || RC=1 + $AWALL disable $pol +done +exit $RC diff --git a/test/mandatory/address.lua b/test/mandatory/address.lua deleted file mode 100644 index 8063154..0000000 --- a/test/mandatory/address.lua +++ /dev/null @@ -1,40 +0,0 @@ ---[[ -Address match test cases for Alpine Wall -Copyright (C) 2012-2017 Kaarle Ritvanen -See LICENSE file for license details -]]-- - - -util = require('awall.util') -json = require('cjson') - -res = {} - -saddr = '10.0.0.1' -daddr = '172.16.0.0/16' - -for _, izone in ipairs{false, 'A', 'B', {'B', 'C'}} do - for _, ozone in ipairs{false, 'B'} do - for _, src in ipairs{false, saddr, {saddr, '10.0.0.2'}} do - for _, dest in ipairs{false, daddr, {daddr, '172.16.2.0/16'}} do - for _, log in ipairs{false, true} do - for _, action in ipairs{false, 'pass'} do - table.insert( - res, - { - ['in']=izone or nil, - out=ozone or nil, - src=src or nil, - dest=dest or nil, - log=log or nil, - action=action or nil - } - ) - end - end - end - end - end -end - -print(json.encode{filter=res}) diff --git a/test/mandatory/filter-limit.lua b/test/mandatory/filter-limit.lua deleted file mode 100644 index a0bfc0b..0000000 --- a/test/mandatory/filter-limit.lua +++ /dev/null @@ -1,84 +0,0 @@ ---[[ -Filter limit test cases for Alpine Wall -Copyright (C) 2012-2017 Kaarle Ritvanen -See LICENSE file for license details -]]-- - - -util = require('awall.util') -json = require('cjson') - -res = {} - -function add(limit_type, filter) - - for _, high_rate in ipairs{false, true} do - - local function add_limit(limit) - for _, log in ipairs{false, true, 'none'} do - for _, action in ipairs{false, 'pass'} do - if not (high_rate and log and action) then - table.insert( - res, - util.update( - { - [limit_type..'-limit']=util.copy(limit), - log=log or nil, - action=action or nil - }, - filter or {} - ) - ) - end - end - end - end - - local count = high_rate and 150 or nil - add_limit(count or 1) - - for _, interval in ipairs{false, 5} do - for _, log in ipairs{true, false, 'none'} do - local limit = {count=count, interval=interval or nil} - if log ~= true then limit.log = log end - - add_limit(limit) - - if not high_rate then - for _, name in ipairs{'A', 'C'} do - limit.name = name - - for _, addr in ipairs{false, 'dest'} do - limit.addr = addr or nil - - limit.update = nil - add_limit(limit) - - limit.update = false - add_limit(limit) - end - end - end - end - end - end -end - -add('conn', {out='B'}) -add('conn', {['in']='_fw', out='B'}) -add('flow') -add('flow', {['in']='A', out='_fw', ['no-track']=true}) - -for _, name in ipairs{'A', 'B', 'C', 'D'} do - table.insert(res, {['update-limit']=name}) -end - -for _, measure in ipairs{'conn', 'flow'} do - for _, addr in ipairs{'src', 'dest'} do - table.insert( - res, {['update-limit']={name='A', measure=measure, addr=addr}} - ) - end -end - -print(json.encode{filter=res}) diff --git a/test/mandatory/filter.json b/test/mandatory/filter.json deleted file mode 100644 index 3918b9b..0000000 --- a/test/mandatory/filter.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "filter": [ - {}, - { "action": "accept" }, - { "action": "drop" }, - { "action": "pass" }, - { "action": "reject" }, - { "action": "tarpit" } - ] -} diff --git a/test/mandatory/no-track.json b/test/mandatory/no-track.json deleted file mode 100644 index 4c0cd2e..0000000 --- a/test/mandatory/no-track.json +++ /dev/null @@ -1,17 +0,0 @@ -{ - "filter": [ - { "in": "_fw", "service": "http", "no-track": true }, - { - "src": "172.16.0.0/16", - "dest": "172.17.0.0/16", - "service": "radius", - "no-track": true - }, - { - "dest": "172.18.0.0/16", - "service": "ssh", - "no-track": true - }, - { "out": "_fw", "service": "ipsec", "no-track": true } - ] -} diff --git a/test/optional/address.lua b/test/optional/address.lua new file mode 100644 index 0000000..8063154 --- /dev/null +++ b/test/optional/address.lua @@ -0,0 +1,40 @@ +--[[ +Address match test cases for Alpine Wall +Copyright (C) 2012-2017 Kaarle Ritvanen +See LICENSE file for license details +]]-- + + +util = require('awall.util') +json = require('cjson') + +res = {} + +saddr = '10.0.0.1' +daddr = '172.16.0.0/16' + +for _, izone in ipairs{false, 'A', 'B', {'B', 'C'}} do + for _, ozone in ipairs{false, 'B'} do + for _, src in ipairs{false, saddr, {saddr, '10.0.0.2'}} do + for _, dest in ipairs{false, daddr, {daddr, '172.16.2.0/16'}} do + for _, log in ipairs{false, true} do + for _, action in ipairs{false, 'pass'} do + table.insert( + res, + { + ['in']=izone or nil, + out=ozone or nil, + src=src or nil, + dest=dest or nil, + log=log or nil, + action=action or nil + } + ) + end + end + end + end + end +end + +print(json.encode{filter=res}) diff --git a/test/optional/filter-limit.lua b/test/optional/filter-limit.lua new file mode 100644 index 0000000..a0bfc0b --- /dev/null +++ b/test/optional/filter-limit.lua @@ -0,0 +1,84 @@ +--[[ +Filter limit test cases for Alpine Wall +Copyright (C) 2012-2017 Kaarle Ritvanen +See LICENSE file for license details +]]-- + + +util = require('awall.util') +json = require('cjson') + +res = {} + +function add(limit_type, filter) + + for _, high_rate in ipairs{false, true} do + + local function add_limit(limit) + for _, log in ipairs{false, true, 'none'} do + for _, action in ipairs{false, 'pass'} do + if not (high_rate and log and action) then + table.insert( + res, + util.update( + { + [limit_type..'-limit']=util.copy(limit), + log=log or nil, + action=action or nil + }, + filter or {} + ) + ) + end + end + end + end + + local count = high_rate and 150 or nil + add_limit(count or 1) + + for _, interval in ipairs{false, 5} do + for _, log in ipairs{true, false, 'none'} do + local limit = {count=count, interval=interval or nil} + if log ~= true then limit.log = log end + + add_limit(limit) + + if not high_rate then + for _, name in ipairs{'A', 'C'} do + limit.name = name + + for _, addr in ipairs{false, 'dest'} do + limit.addr = addr or nil + + limit.update = nil + add_limit(limit) + + limit.update = false + add_limit(limit) + end + end + end + end + end + end +end + +add('conn', {out='B'}) +add('conn', {['in']='_fw', out='B'}) +add('flow') +add('flow', {['in']='A', out='_fw', ['no-track']=true}) + +for _, name in ipairs{'A', 'B', 'C', 'D'} do + table.insert(res, {['update-limit']=name}) +end + +for _, measure in ipairs{'conn', 'flow'} do + for _, addr in ipairs{'src', 'dest'} do + table.insert( + res, {['update-limit']={name='A', measure=measure, addr=addr}} + ) + end +end + +print(json.encode{filter=res}) diff --git a/test/optional/filter.json b/test/optional/filter.json new file mode 100644 index 0000000..3918b9b --- /dev/null +++ b/test/optional/filter.json @@ -0,0 +1,10 @@ +{ + "filter": [ + {}, + { "action": "accept" }, + { "action": "drop" }, + { "action": "pass" }, + { "action": "reject" }, + { "action": "tarpit" } + ] +} diff --git a/test/optional/no-track.json b/test/optional/no-track.json new file mode 100644 index 0000000..4c0cd2e --- /dev/null +++ b/test/optional/no-track.json @@ -0,0 +1,17 @@ +{ + "filter": [ + { "in": "_fw", "service": "http", "no-track": true }, + { + "src": "172.16.0.0/16", + "dest": "172.17.0.0/16", + "service": "radius", + "no-track": true + }, + { + "dest": "172.18.0.0/16", + "service": "ssh", + "no-track": true + }, + { "out": "_fw", "service": "ipsec", "no-track": true } + ] +} diff --git a/test/output/address/dump b/test/output/address/dump new file mode 100644 index 0000000..176956c --- /dev/null +++ b/test/output/address/dump @@ -0,0 +1,4528 @@ +Dnat 1 {"in":["_fw","A"]} +(zone) + inet/nat/OUTPUT -j REDIRECT + inet/nat/PREROUTING -i eth0 -j REDIRECT + +Dnat 2 {"in":"B"} +(zone) + inet/nat/PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT + + +Filter 1 {} +(address) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 2 {"action":"pass"} +(address) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 3 {"log":true} +(address) + inet/filter/FORWARD -j logaccept-0 + inet6/filter/FORWARD -j logaccept-0 + inet/filter/INPUT -j logaccept-0 + inet6/filter/INPUT -j logaccept-0 + inet/filter/OUTPUT -j logaccept-0 + inet6/filter/OUTPUT -j logaccept-0 + inet/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-0 -j ACCEPT + inet6/filter/logaccept-0 -j ACCEPT + +Filter 4 {"action":"pass","log":true} +(address) + inet/filter/FORWARD -j logpass-0 + inet6/filter/FORWARD -j logpass-0 + inet/filter/INPUT -j logpass-0 + inet6/filter/INPUT -j logpass-0 + inet/filter/OUTPUT -j logpass-0 + inet6/filter/OUTPUT -j logpass-0 + inet/filter/logpass-0 -m limit --limit 1/second -j LOG + inet6/filter/logpass-0 -m limit --limit 1/second -j LOG + +Filter 5 {"dest":"172.16.0.0\/16"} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -d 172.16.0.0/16 -j ACCEPT + +Filter 6 {"action":"pass","dest":"172.16.0.0\/16"} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 + inet/filter/INPUT -d 172.16.0.0/16 + inet/filter/OUTPUT -d 172.16.0.0/16 + +Filter 7 {"dest":"172.16.0.0\/16","log":true} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j logaccept-1 + inet/filter/INPUT -d 172.16.0.0/16 -j logaccept-1 + inet/filter/OUTPUT -d 172.16.0.0/16 -j logaccept-1 + inet/filter/logaccept-1 -m limit --limit 1/second -j LOG + inet/filter/logaccept-1 -j ACCEPT + +Filter 8 {"action":"pass","dest":"172.16.0.0\/16","log":true} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j logpass-1 + inet/filter/INPUT -d 172.16.0.0/16 -j logpass-1 + inet/filter/OUTPUT -d 172.16.0.0/16 -j logpass-1 + inet/filter/logpass-1 -m limit --limit 1/second -j LOG + +Filter 9 {"dest":["172.16.0.0\/16","172.16.2.0\/16"]} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -d 172.16.2.0/16 -j ACCEPT + inet/filter/OUTPUT -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -d 172.16.2.0/16 -j ACCEPT + +Filter 10 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"]} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 + inet/filter/INPUT -d 172.16.0.0/16 + inet/filter/FORWARD -d 172.16.2.0/16 + inet/filter/INPUT -d 172.16.2.0/16 + inet/filter/OUTPUT -d 172.16.0.0/16 + inet/filter/OUTPUT -d 172.16.2.0/16 + +Filter 11 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j logaccept-2 + inet/filter/INPUT -d 172.16.0.0/16 -j logaccept-2 + inet/filter/FORWARD -d 172.16.2.0/16 -j logaccept-2 + inet/filter/INPUT -d 172.16.2.0/16 -j logaccept-2 + inet/filter/OUTPUT -d 172.16.0.0/16 -j logaccept-2 + inet/filter/OUTPUT -d 172.16.2.0/16 -j logaccept-2 + inet/filter/logaccept-2 -m limit --limit 1/second -j LOG + inet/filter/logaccept-2 -j ACCEPT + +Filter 12 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j logpass-2 + inet/filter/INPUT -d 172.16.0.0/16 -j logpass-2 + inet/filter/FORWARD -d 172.16.2.0/16 -j logpass-2 + inet/filter/INPUT -d 172.16.2.0/16 -j logpass-2 + inet/filter/OUTPUT -d 172.16.0.0/16 -j logpass-2 + inet/filter/OUTPUT -d 172.16.2.0/16 -j logpass-2 + inet/filter/logpass-2 -m limit --limit 1/second -j LOG + +Filter 13 {"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -j ACCEPT + +Filter 14 {"action":"pass","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 + inet/filter/INPUT -s 10.0.0.1 + inet/filter/OUTPUT -s 10.0.0.1 + +Filter 15 {"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j logaccept-3 + inet/filter/INPUT -s 10.0.0.1 -j logaccept-3 + inet/filter/OUTPUT -s 10.0.0.1 -j logaccept-3 + inet/filter/logaccept-3 -m limit --limit 1/second -j LOG + inet/filter/logaccept-3 -j ACCEPT + +Filter 16 {"action":"pass","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j logpass-3 + inet/filter/INPUT -s 10.0.0.1 -j logpass-3 + inet/filter/OUTPUT -s 10.0.0.1 -j logpass-3 + inet/filter/logpass-3 -m limit --limit 1/second -j LOG + +Filter 17 {"dest":"172.16.0.0\/16","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 18 {"action":"pass","dest":"172.16.0.0\/16","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 19 {"dest":"172.16.0.0\/16","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 + inet/filter/logaccept-4 -m limit --limit 1/second -j LOG + inet/filter/logaccept-4 -j ACCEPT + +Filter 20 {"action":"pass","dest":"172.16.0.0\/16","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 + inet/filter/logpass-4 -m limit --limit 1/second -j LOG + +Filter 21 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 22 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 23 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 + inet/filter/logaccept-5 -m limit --limit 1/second -j LOG + inet/filter/logaccept-5 -j ACCEPT + +Filter 24 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 + inet/filter/logpass-5 -m limit --limit 1/second -j LOG + +Filter 25 {"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.2 -j ACCEPT + inet/filter/INPUT -s 10.0.0.2 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.2 -j ACCEPT + +Filter 26 {"action":"pass","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 + inet/filter/INPUT -s 10.0.0.1 + inet/filter/FORWARD -s 10.0.0.2 + inet/filter/INPUT -s 10.0.0.2 + inet/filter/OUTPUT -s 10.0.0.1 + inet/filter/OUTPUT -s 10.0.0.2 + +Filter 27 {"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j logaccept-6 + inet/filter/INPUT -s 10.0.0.1 -j logaccept-6 + inet/filter/FORWARD -s 10.0.0.2 -j logaccept-6 + inet/filter/INPUT -s 10.0.0.2 -j logaccept-6 + inet/filter/OUTPUT -s 10.0.0.1 -j logaccept-6 + inet/filter/OUTPUT -s 10.0.0.2 -j logaccept-6 + inet/filter/logaccept-6 -m limit --limit 1/second -j LOG + inet/filter/logaccept-6 -j ACCEPT + +Filter 28 {"action":"pass","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j logpass-6 + inet/filter/INPUT -s 10.0.0.1 -j logpass-6 + inet/filter/FORWARD -s 10.0.0.2 -j logpass-6 + inet/filter/INPUT -s 10.0.0.2 -j logpass-6 + inet/filter/OUTPUT -s 10.0.0.1 -j logpass-6 + inet/filter/OUTPUT -s 10.0.0.2 -j logpass-6 + inet/filter/logpass-6 -m limit --limit 1/second -j LOG + +Filter 29 {"dest":"172.16.0.0\/16","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 30 {"action":"pass","dest":"172.16.0.0\/16","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 31 {"dest":"172.16.0.0\/16","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/logaccept-7 -m limit --limit 1/second -j LOG + inet/filter/logaccept-7 -j ACCEPT + +Filter 32 {"action":"pass","dest":"172.16.0.0\/16","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 + inet/filter/logpass-7 -m limit --limit 1/second -j LOG + +Filter 33 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 34 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 35 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/logaccept-8 -m limit --limit 1/second -j LOG + inet/filter/logaccept-8 -j ACCEPT + +Filter 36 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 + inet/filter/logpass-8 -m limit --limit 1/second -j LOG + +Filter 37 {"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT + +Filter 38 {"action":"pass","out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 + inet6/filter/FORWARD -o eth1 -d fc00::/7 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 + +Filter 39 {"log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j logaccept-9 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 + inet/filter/logaccept-9 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-9 -m limit --limit 1/second -j LOG + inet/filter/logaccept-9 -j ACCEPT + inet6/filter/logaccept-9 -j ACCEPT + +Filter 40 {"action":"pass","log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j logpass-9 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j logpass-9 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j logpass-9 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j logpass-9 + inet/filter/logpass-9 -m limit --limit 1/second -j LOG + inet6/filter/logpass-9 -m limit --limit 1/second -j LOG + +Filter 41 {"dest":"172.16.0.0\/16","out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 + inet/filter/address-0 -d 172.16.0.0/16 -j ACCEPT + +Filter 42 {"action":"pass","dest":"172.16.0.0\/16","out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 + inet/filter/address-1 -d 172.16.0.0/16 + +Filter 43 {"dest":"172.16.0.0\/16","log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 + inet/filter/address-2 -d 172.16.0.0/16 -j logaccept-10 + inet/filter/logaccept-10 -m limit --limit 1/second -j LOG + inet/filter/logaccept-10 -j ACCEPT + +Filter 44 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 + inet/filter/address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 45 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 + inet/filter/address-4 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-4 -d 172.16.2.0/16 -j ACCEPT + +Filter 46 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 + inet/filter/address-5 -d 172.16.0.0/16 + inet/filter/address-5 -d 172.16.2.0/16 + +Filter 47 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 + inet/filter/address-6 -d 172.16.0.0/16 -j logaccept-11 + inet/filter/address-6 -d 172.16.2.0/16 -j logaccept-11 + inet/filter/logaccept-11 -m limit --limit 1/second -j LOG + inet/filter/logaccept-11 -j ACCEPT + +Filter 48 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 + inet/filter/address-7 -d 172.16.0.0/16 -j logpass-10 + inet/filter/address-7 -d 172.16.2.0/16 -j logpass-10 + inet/filter/logpass-10 -m limit --limit 1/second -j LOG + +Filter 49 {"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + +Filter 50 {"action":"pass","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + +Filter 51 {"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 + inet/filter/logaccept-12 -m limit --limit 1/second -j LOG + inet/filter/logaccept-12 -j ACCEPT + +Filter 52 {"action":"pass","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 + inet/filter/logpass-11 -m limit --limit 1/second -j LOG + +Filter 53 {"dest":"172.16.0.0\/16","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 + inet/filter/address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 54 {"action":"pass","dest":"172.16.0.0\/16","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 + inet/filter/address-9 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 55 {"dest":"172.16.0.0\/16","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 + inet/filter/address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 + inet/filter/logaccept-13 -m limit --limit 1/second -j LOG + inet/filter/logaccept-13 -j ACCEPT + +Filter 56 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 + inet/filter/address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 57 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 + inet/filter/address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 58 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 + inet/filter/address-13 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-13 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 59 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 + inet/filter/address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 + inet/filter/address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 + inet/filter/logaccept-14 -m limit --limit 1/second -j LOG + inet/filter/logaccept-14 -j ACCEPT + +Filter 60 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 + inet/filter/address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 + inet/filter/address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-12 + inet/filter/logpass-12 -m limit --limit 1/second -j LOG + +Filter 61 {"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT + +Filter 62 {"action":"pass","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 + +Filter 63 {"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 + inet/filter/logaccept-15 -m limit --limit 1/second -j LOG + inet/filter/logaccept-15 -j ACCEPT + +Filter 64 {"action":"pass","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 + inet/filter/logpass-13 -m limit --limit 1/second -j LOG + +Filter 65 {"dest":"172.16.0.0\/16","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 + inet/filter/address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 66 {"action":"pass","dest":"172.16.0.0\/16","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 + inet/filter/address-17 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-17 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 67 {"dest":"172.16.0.0\/16","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 + inet/filter/address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 + inet/filter/address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 + inet/filter/logaccept-16 -m limit --limit 1/second -j LOG + inet/filter/logaccept-16 -j ACCEPT + +Filter 68 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 + inet/filter/address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-14 + inet/filter/address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-14 + inet/filter/logpass-14 -m limit --limit 1/second -j LOG + +Filter 69 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 + inet/filter/address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 70 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 + inet/filter/address-21 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-21 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-21 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-21 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 71 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 + inet/filter/address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 + inet/filter/address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 + inet/filter/address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 + inet/filter/address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 + inet/filter/logaccept-17 -m limit --limit 1/second -j LOG + inet/filter/logaccept-17 -j ACCEPT + +Filter 72 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 + inet/filter/address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 + inet/filter/address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 + inet/filter/address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-15 + inet/filter/address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-15 + inet/filter/logpass-15 -m limit --limit 1/second -j LOG + +Filter 73 {"in":"A"} +(address) + inet/filter/FORWARD -i eth0 -j ACCEPT + inet6/filter/FORWARD -i eth0 -j ACCEPT + inet/filter/INPUT -i eth0 -j ACCEPT + inet6/filter/INPUT -i eth0 -j ACCEPT + +Filter 74 {"action":"pass","in":"A"} +(address) + inet/filter/FORWARD -i eth0 + inet6/filter/FORWARD -i eth0 + inet/filter/INPUT -i eth0 + inet6/filter/INPUT -i eth0 + +Filter 75 {"in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -j logaccept-18 + inet6/filter/FORWARD -i eth0 -j logaccept-18 + inet/filter/INPUT -i eth0 -j logaccept-18 + inet6/filter/INPUT -i eth0 -j logaccept-18 + inet/filter/logaccept-18 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-18 -m limit --limit 1/second -j LOG + inet/filter/logaccept-18 -j ACCEPT + inet6/filter/logaccept-18 -j ACCEPT + +Filter 76 {"action":"pass","in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -j logpass-16 + inet6/filter/FORWARD -i eth0 -j logpass-16 + inet/filter/INPUT -i eth0 -j logpass-16 + inet6/filter/INPUT -i eth0 -j logpass-16 + inet/filter/logpass-16 -m limit --limit 1/second -j LOG + inet6/filter/logpass-16 -m limit --limit 1/second -j LOG + +Filter 77 {"dest":"172.16.0.0\/16","in":"A"} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT + +Filter 78 {"action":"pass","dest":"172.16.0.0\/16","in":"A"} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 + +Filter 79 {"dest":"172.16.0.0\/16","in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 + inet/filter/logaccept-19 -m limit --limit 1/second -j LOG + inet/filter/logaccept-19 -j ACCEPT + +Filter 80 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-17 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logpass-17 + inet/filter/logpass-17 -m limit --limit 1/second -j LOG + +Filter 81 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A"} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT + +Filter 82 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A"} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 + inet/filter/INPUT -i eth0 -d 172.16.2.0/16 + +Filter 83 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 + inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 + inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 + inet/filter/logaccept-20 -m limit --limit 1/second -j LOG + inet/filter/logaccept-20 -j ACCEPT + +Filter 84 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-18 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logpass-18 + inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-18 + inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j logpass-18 + inet/filter/logpass-18 -m limit --limit 1/second -j LOG + +Filter 85 {"in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j ACCEPT + +Filter 86 {"action":"pass","in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 + inet/filter/INPUT -i eth0 -s 10.0.0.1 + +Filter 87 {"in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 + inet/filter/logaccept-21 -m limit --limit 1/second -j LOG + inet/filter/logaccept-21 -j ACCEPT + +Filter 88 {"action":"pass","in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logpass-19 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logpass-19 + inet/filter/logpass-19 -m limit --limit 1/second -j LOG + +Filter 89 {"dest":"172.16.0.0\/16","in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 90 {"action":"pass","dest":"172.16.0.0\/16","in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 91 {"dest":"172.16.0.0\/16","in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 + inet/filter/logaccept-22 -m limit --limit 1/second -j LOG + inet/filter/logaccept-22 -j ACCEPT + +Filter 92 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 + inet/filter/logpass-20 -m limit --limit 1/second -j LOG + +Filter 93 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 94 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 95 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 + inet/filter/logaccept-23 -m limit --limit 1/second -j LOG + inet/filter/logaccept-23 -j ACCEPT + +Filter 96 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 + inet/filter/logpass-21 -m limit --limit 1/second -j LOG + +Filter 97 {"in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.2 -j ACCEPT + +Filter 98 {"action":"pass","in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 + inet/filter/INPUT -i eth0 -s 10.0.0.1 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 + inet/filter/INPUT -i eth0 -s 10.0.0.2 + +Filter 99 {"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 + inet/filter/logaccept-24 -m limit --limit 1/second -j LOG + inet/filter/logaccept-24 -j ACCEPT + +Filter 100 {"action":"pass","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logpass-22 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logpass-22 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j logpass-22 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -j logpass-22 + inet/filter/logpass-22 -m limit --limit 1/second -j LOG + +Filter 101 {"dest":"172.16.0.0\/16","in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 102 {"action":"pass","dest":"172.16.0.0\/16","in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 103 {"dest":"172.16.0.0\/16","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 + inet/filter/logaccept-25 -m limit --limit 1/second -j LOG + inet/filter/logaccept-25 -j ACCEPT + +Filter 104 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 + inet/filter/logpass-23 -m limit --limit 1/second -j LOG + +Filter 105 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 106 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 107 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 + inet/filter/logaccept-26 -m limit --limit 1/second -j LOG + inet/filter/logaccept-26 -j ACCEPT + +Filter 108 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 + inet/filter/logpass-24 -m limit --limit 1/second -j LOG + +Filter 109 {"in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT + +Filter 110 {"action":"pass","in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 + +Filter 111 {"in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 + inet/filter/logaccept-27 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-27 -m limit --limit 1/second -j LOG + inet/filter/logaccept-27 -j ACCEPT + inet6/filter/logaccept-27 -j ACCEPT + +Filter 112 {"action":"pass","in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG + +Filter 113 {"dest":"172.16.0.0\/16","in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 + inet/filter/address-24 -d 172.16.0.0/16 -j ACCEPT + +Filter 114 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 + inet/filter/address-25 -d 172.16.0.0/16 + +Filter 115 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 + inet/filter/address-26 -d 172.16.0.0/16 -j logaccept-28 + inet/filter/logaccept-28 -m limit --limit 1/second -j LOG + inet/filter/logaccept-28 -j ACCEPT + +Filter 116 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 + inet/filter/address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 117 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 + inet/filter/address-28 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-28 -d 172.16.2.0/16 -j ACCEPT + +Filter 118 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 + inet/filter/address-29 -d 172.16.0.0/16 + inet/filter/address-29 -d 172.16.2.0/16 + +Filter 119 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 + inet/filter/address-30 -d 172.16.0.0/16 -j logaccept-29 + inet/filter/address-30 -d 172.16.2.0/16 -j logaccept-29 + inet/filter/logaccept-29 -m limit --limit 1/second -j LOG + inet/filter/logaccept-29 -j ACCEPT + +Filter 120 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 + inet/filter/address-31 -d 172.16.0.0/16 -j logpass-25 + inet/filter/address-31 -d 172.16.2.0/16 -j logpass-25 + inet/filter/logpass-25 -m limit --limit 1/second -j LOG + +Filter 121 {"in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + +Filter 122 {"action":"pass","in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + +Filter 123 {"in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 + inet/filter/logaccept-30 -m limit --limit 1/second -j LOG + inet/filter/logaccept-30 -j ACCEPT + +Filter 124 {"action":"pass","in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG + +Filter 125 {"dest":"172.16.0.0\/16","in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 + inet/filter/address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 126 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 + inet/filter/address-33 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 127 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 + inet/filter/address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 + inet/filter/logaccept-31 -m limit --limit 1/second -j LOG + inet/filter/logaccept-31 -j ACCEPT + +Filter 128 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 + inet/filter/address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 129 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 + inet/filter/address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 130 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 + inet/filter/address-37 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-37 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 131 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 + inet/filter/address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 + inet/filter/address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 + inet/filter/logaccept-32 -m limit --limit 1/second -j LOG + inet/filter/logaccept-32 -j ACCEPT + +Filter 132 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 + inet/filter/address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-26 + inet/filter/address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-26 + inet/filter/logpass-26 -m limit --limit 1/second -j LOG + +Filter 133 {"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT + +Filter 134 {"action":"pass","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 + +Filter 135 {"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 + inet/filter/logaccept-33 -m limit --limit 1/second -j LOG + inet/filter/logaccept-33 -j ACCEPT + +Filter 136 {"action":"pass","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-27 + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-27 + inet/filter/logpass-27 -m limit --limit 1/second -j LOG + +Filter 137 {"dest":"172.16.0.0\/16","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 + inet/filter/address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 138 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 + inet/filter/address-41 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-41 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 139 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 + inet/filter/address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 + inet/filter/address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 + inet/filter/logaccept-34 -m limit --limit 1/second -j LOG + inet/filter/logaccept-34 -j ACCEPT + +Filter 140 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 + inet/filter/address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 + inet/filter/address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 + inet/filter/logpass-28 -m limit --limit 1/second -j LOG + +Filter 141 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 + inet/filter/address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 142 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 + inet/filter/address-45 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-45 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-45 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-45 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 143 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 + inet/filter/address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 + inet/filter/address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 + inet/filter/address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 + inet/filter/address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 + inet/filter/logaccept-35 -m limit --limit 1/second -j LOG + inet/filter/logaccept-35 -j ACCEPT + +Filter 144 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 + inet/filter/address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-29 + inet/filter/address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-29 + inet/filter/address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-29 + inet/filter/address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-29 + inet/filter/logpass-29 -m limit --limit 1/second -j LOG + +Filter 145 {"in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j ACCEPT + inet6/filter/INPUT -i eth1 -s fc00::/7 -j ACCEPT + +Filter 146 {"action":"pass","in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 + inet6/filter/FORWARD -i eth1 -s fc00::/7 + inet6/filter/INPUT -i eth1 -s fc00::/7 + +Filter 147 {"in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logaccept-36 + inet6/filter/INPUT -i eth1 -s fc00::/7 -j logaccept-36 + inet/filter/logaccept-36 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-36 -m limit --limit 1/second -j LOG + inet/filter/logaccept-36 -j ACCEPT + inet6/filter/logaccept-36 -j ACCEPT + +Filter 148 {"action":"pass","in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-30 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logpass-30 + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logpass-30 + inet6/filter/INPUT -i eth1 -s fc00::/7 -j logpass-30 + inet/filter/logpass-30 -m limit --limit 1/second -j LOG + inet6/filter/logpass-30 -m limit --limit 1/second -j LOG + +Filter 149 {"dest":"172.16.0.0\/16","in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + +Filter 150 {"action":"pass","dest":"172.16.0.0\/16","in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + +Filter 151 {"dest":"172.16.0.0\/16","in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 + inet/filter/logaccept-37 -m limit --limit 1/second -j LOG + inet/filter/logaccept-37 -j ACCEPT + +Filter 152 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 + inet/filter/logpass-31 -m limit --limit 1/second -j LOG + +Filter 153 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT + +Filter 154 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 + +Filter 155 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 + inet/filter/logaccept-38 -m limit --limit 1/second -j LOG + inet/filter/logaccept-38 -j ACCEPT + +Filter 156 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 + inet/filter/logpass-32 -m limit --limit 1/second -j LOG + +Filter 157 {"in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-48 + inet/filter/address-48 -s 10.0.0.1 -j ACCEPT + +Filter 158 {"action":"pass","in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-49 + inet/filter/address-49 -s 10.0.0.1 + +Filter 159 {"in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-50 + inet/filter/address-50 -s 10.0.0.1 -j logaccept-39 + inet/filter/logaccept-39 -m limit --limit 1/second -j LOG + inet/filter/logaccept-39 -j ACCEPT + +Filter 160 {"action":"pass","in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-51 + inet/filter/address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG + +Filter 161 {"dest":"172.16.0.0\/16","in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-52 + inet/filter/address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 162 {"action":"pass","dest":"172.16.0.0\/16","in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-53 + inet/filter/address-53 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 163 {"dest":"172.16.0.0\/16","in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-54 + inet/filter/address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 + inet/filter/logaccept-40 -m limit --limit 1/second -j LOG + inet/filter/logaccept-40 -j ACCEPT + +Filter 164 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-55 + inet/filter/address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 165 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-56 + inet/filter/address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 166 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-57 + inet/filter/address-57 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-57 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 167 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-58 + inet/filter/address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 + inet/filter/address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 + inet/filter/logaccept-41 -m limit --limit 1/second -j LOG + inet/filter/logaccept-41 -j ACCEPT + +Filter 168 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-59 + inet/filter/address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-33 + inet/filter/address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-33 + inet/filter/logpass-33 -m limit --limit 1/second -j LOG + +Filter 169 {"in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-60 + inet/filter/address-60 -s 10.0.0.1 -j ACCEPT + inet/filter/address-60 -s 10.0.0.2 -j ACCEPT + +Filter 170 {"action":"pass","in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-61 + inet/filter/address-61 -s 10.0.0.1 + inet/filter/address-61 -s 10.0.0.2 + +Filter 171 {"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-62 + inet/filter/address-62 -s 10.0.0.1 -j logaccept-42 + inet/filter/address-62 -s 10.0.0.2 -j logaccept-42 + inet/filter/logaccept-42 -m limit --limit 1/second -j LOG + inet/filter/logaccept-42 -j ACCEPT + +Filter 172 {"action":"pass","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-63 + inet/filter/address-63 -s 10.0.0.1 -j logpass-34 + inet/filter/address-63 -s 10.0.0.2 -j logpass-34 + inet/filter/logpass-34 -m limit --limit 1/second -j LOG + +Filter 173 {"dest":"172.16.0.0\/16","in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-64 + inet/filter/address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 174 {"action":"pass","dest":"172.16.0.0\/16","in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-65 + inet/filter/address-65 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-65 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 175 {"dest":"172.16.0.0\/16","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-66 + inet/filter/address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 + inet/filter/address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 + inet/filter/logaccept-43 -m limit --limit 1/second -j LOG + inet/filter/logaccept-43 -j ACCEPT + +Filter 176 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-67 + inet/filter/address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 + inet/filter/address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 + inet/filter/logpass-35 -m limit --limit 1/second -j LOG + +Filter 177 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-68 + inet/filter/address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 178 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-69 + inet/filter/address-69 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-69 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-69 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-69 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 179 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-70 + inet/filter/address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 + inet/filter/address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 + inet/filter/address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 + inet/filter/address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 + inet/filter/logaccept-44 -m limit --limit 1/second -j LOG + inet/filter/logaccept-44 -j ACCEPT + +Filter 180 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-71 + inet/filter/address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-36 + inet/filter/address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-36 + inet/filter/address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-36 + inet/filter/address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-36 + inet/filter/logpass-36 -m limit --limit 1/second -j LOG + +Filter 181 {"in":"B","out":"B"} +(address) + +Filter 182 {"action":"pass","in":"B","out":"B"} +(address) + +Filter 183 {"in":"B","log":true,"out":"B"} +(address) + +Filter 184 {"action":"pass","in":"B","log":true,"out":"B"} +(address) + +Filter 185 {"dest":"172.16.0.0\/16","in":"B","out":"B"} +(address) + +Filter 186 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B"} +(address) + +Filter 187 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B"} +(address) + +Filter 188 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B"} +(address) + +Filter 189 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B"} +(address) + +Filter 190 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B"} +(address) + +Filter 191 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B"} +(address) + +Filter 192 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B"} +(address) + +Filter 193 {"in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 194 {"action":"pass","in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 195 {"in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 196 {"action":"pass","in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 197 {"dest":"172.16.0.0\/16","in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 198 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 199 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 200 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 201 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 202 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 203 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 204 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 205 {"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 206 {"action":"pass","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 207 {"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 208 {"action":"pass","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 209 {"dest":"172.16.0.0\/16","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 210 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 211 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 212 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 213 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 214 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 215 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 216 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 217 {"in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j ACCEPT + inet6/filter/INPUT -i eth1 -s fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT + +Filter 218 {"action":"pass","in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 + inet6/filter/FORWARD -i eth1 -s fc00::/7 + inet6/filter/INPUT -i eth1 -s fc00::/7 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 + +Filter 219 {"in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logaccept-45 + inet6/filter/INPUT -i eth1 -s fc00::/7 -j logaccept-45 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 + inet/filter/logaccept-45 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-45 -m limit --limit 1/second -j LOG + inet/filter/logaccept-45 -j ACCEPT + inet6/filter/logaccept-45 -j ACCEPT + +Filter 220 {"action":"pass","in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-37 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logpass-37 + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logpass-37 + inet6/filter/INPUT -i eth1 -s fc00::/7 -j logpass-37 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-37 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j logpass-37 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-37 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j logpass-37 + inet/filter/logpass-37 -m limit --limit 1/second -j LOG + inet6/filter/logpass-37 -m limit --limit 1/second -j LOG + +Filter 221 {"dest":"172.16.0.0\/16","in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + +Filter 222 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 + +Filter 223 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/logaccept-46 -m limit --limit 1/second -j LOG + inet/filter/logaccept-46 -j ACCEPT + +Filter 224 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 + inet/filter/logpass-38 -m limit --limit 1/second -j LOG + +Filter 225 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT + +Filter 226 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 + +Filter 227 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/logaccept-47 -m limit --limit 1/second -j LOG + inet/filter/logaccept-47 -j ACCEPT + +Filter 228 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 + inet/filter/logpass-39 -m limit --limit 1/second -j LOG + +Filter 229 {"in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-72 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-72 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-72 + inet/filter/address-72 -s 10.0.0.1 -j ACCEPT + +Filter 230 {"action":"pass","in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-73 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-73 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-73 + inet/filter/address-73 -s 10.0.0.1 + +Filter 231 {"in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-74 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-74 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-74 + inet/filter/address-74 -s 10.0.0.1 -j logaccept-48 + inet/filter/logaccept-48 -m limit --limit 1/second -j LOG + inet/filter/logaccept-48 -j ACCEPT + +Filter 232 {"action":"pass","in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-75 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-75 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-75 + inet/filter/address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG + +Filter 233 {"dest":"172.16.0.0\/16","in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-76 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-76 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-76 + inet/filter/address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 234 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-77 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-77 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-77 + inet/filter/address-77 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 235 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-78 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-78 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-78 + inet/filter/address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 + inet/filter/logaccept-49 -m limit --limit 1/second -j LOG + inet/filter/logaccept-49 -j ACCEPT + +Filter 236 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-79 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-79 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-79 + inet/filter/address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 237 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-80 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-80 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-80 + inet/filter/address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 238 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-81 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-81 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-81 + inet/filter/address-81 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-81 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 239 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-82 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-82 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-82 + inet/filter/address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 + inet/filter/address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 + inet/filter/logaccept-50 -m limit --limit 1/second -j LOG + inet/filter/logaccept-50 -j ACCEPT + +Filter 240 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-83 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-83 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-83 + inet/filter/address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 + inet/filter/address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-40 + inet/filter/logpass-40 -m limit --limit 1/second -j LOG + +Filter 241 {"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-84 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-84 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-84 + inet/filter/address-84 -s 10.0.0.1 -j ACCEPT + inet/filter/address-84 -s 10.0.0.2 -j ACCEPT + +Filter 242 {"action":"pass","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-85 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-85 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-85 + inet/filter/address-85 -s 10.0.0.1 + inet/filter/address-85 -s 10.0.0.2 + +Filter 243 {"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-86 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-86 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-86 + inet/filter/address-86 -s 10.0.0.1 -j logaccept-51 + inet/filter/address-86 -s 10.0.0.2 -j logaccept-51 + inet/filter/logaccept-51 -m limit --limit 1/second -j LOG + inet/filter/logaccept-51 -j ACCEPT + +Filter 244 {"action":"pass","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-87 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-87 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-87 + inet/filter/address-87 -s 10.0.0.1 -j logpass-41 + inet/filter/address-87 -s 10.0.0.2 -j logpass-41 + inet/filter/logpass-41 -m limit --limit 1/second -j LOG + +Filter 245 {"dest":"172.16.0.0\/16","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-88 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-88 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-88 + inet/filter/address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 246 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-89 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-89 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-89 + inet/filter/address-89 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-89 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 247 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-90 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-90 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-90 + inet/filter/address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 + inet/filter/address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 + inet/filter/logaccept-52 -m limit --limit 1/second -j LOG + inet/filter/logaccept-52 -j ACCEPT + +Filter 248 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-91 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-91 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-91 + inet/filter/address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-42 + inet/filter/address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-42 + inet/filter/logpass-42 -m limit --limit 1/second -j LOG + +Filter 249 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-92 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-92 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-92 + inet/filter/address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 250 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-93 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-93 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-93 + inet/filter/address-93 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-93 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-93 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-93 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 251 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-94 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-94 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-94 + inet/filter/address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 + inet/filter/address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 + inet/filter/address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 + inet/filter/address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 + inet/filter/logaccept-53 -m limit --limit 1/second -j LOG + inet/filter/logaccept-53 -j ACCEPT + +Filter 252 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-95 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-95 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-95 + inet/filter/address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-43 + inet/filter/address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-43 + inet/filter/address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-43 + inet/filter/address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-43 + inet/filter/logpass-43 -m limit --limit 1/second -j LOG + +Filter 253 {"in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + +Filter 254 {"action":"pass","in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 + +Filter 255 {"in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 + inet/filter/logaccept-54 -m limit --limit 1/second -j LOG + inet/filter/logaccept-54 -j ACCEPT + +Filter 256 {"action":"pass","in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 + inet/filter/logpass-44 -m limit --limit 1/second -j LOG + +Filter 257 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 + inet/filter/address-96 -d 172.16.0.0/16 -j ACCEPT + +Filter 258 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 + inet/filter/address-97 -d 172.16.0.0/16 + +Filter 259 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 + inet/filter/address-98 -d 172.16.0.0/16 -j logaccept-55 + inet/filter/logaccept-55 -m limit --limit 1/second -j LOG + inet/filter/logaccept-55 -j ACCEPT + +Filter 260 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 + inet/filter/address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 261 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 + inet/filter/address-100 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-100 -d 172.16.2.0/16 -j ACCEPT + +Filter 262 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 + inet/filter/address-101 -d 172.16.0.0/16 + inet/filter/address-101 -d 172.16.2.0/16 + +Filter 263 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 + inet/filter/address-102 -d 172.16.0.0/16 -j logaccept-56 + inet/filter/address-102 -d 172.16.2.0/16 -j logaccept-56 + inet/filter/logaccept-56 -m limit --limit 1/second -j LOG + inet/filter/logaccept-56 -j ACCEPT + +Filter 264 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 + inet/filter/address-103 -d 172.16.0.0/16 -j logpass-45 + inet/filter/address-103 -d 172.16.2.0/16 -j logpass-45 + inet/filter/logpass-45 -m limit --limit 1/second -j LOG + +Filter 265 {"in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 + inet/filter/address-104 -s 10.0.0.1 -j ACCEPT + +Filter 266 {"action":"pass","in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 + inet/filter/address-105 -s 10.0.0.1 + +Filter 267 {"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 + inet/filter/address-106 -s 10.0.0.1 -j logaccept-57 + inet/filter/logaccept-57 -m limit --limit 1/second -j LOG + inet/filter/logaccept-57 -j ACCEPT + +Filter 268 {"action":"pass","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 + inet/filter/address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG + +Filter 269 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 + inet/filter/address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 270 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 + inet/filter/address-109 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 271 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 + inet/filter/address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 + inet/filter/logaccept-58 -m limit --limit 1/second -j LOG + inet/filter/logaccept-58 -j ACCEPT + +Filter 272 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 + inet/filter/address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 273 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 + inet/filter/address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 274 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 + inet/filter/address-113 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-113 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 275 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 + inet/filter/address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 + inet/filter/address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 + inet/filter/logaccept-59 -m limit --limit 1/second -j LOG + inet/filter/logaccept-59 -j ACCEPT + +Filter 276 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 + inet/filter/address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-46 + inet/filter/address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-46 + inet/filter/logpass-46 -m limit --limit 1/second -j LOG + +Filter 277 {"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 + inet/filter/address-116 -s 10.0.0.1 -j ACCEPT + inet/filter/address-116 -s 10.0.0.2 -j ACCEPT + +Filter 278 {"action":"pass","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 + inet/filter/address-117 -s 10.0.0.1 + inet/filter/address-117 -s 10.0.0.2 + +Filter 279 {"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 + inet/filter/address-118 -s 10.0.0.1 -j logaccept-60 + inet/filter/address-118 -s 10.0.0.2 -j logaccept-60 + inet/filter/logaccept-60 -m limit --limit 1/second -j LOG + inet/filter/logaccept-60 -j ACCEPT + +Filter 280 {"action":"pass","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 + inet/filter/address-119 -s 10.0.0.1 -j logpass-47 + inet/filter/address-119 -s 10.0.0.2 -j logpass-47 + inet/filter/logpass-47 -m limit --limit 1/second -j LOG + +Filter 281 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 + inet/filter/address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 282 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 + inet/filter/address-121 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-121 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 283 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 + inet/filter/address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 + inet/filter/address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 + inet/filter/logaccept-61 -m limit --limit 1/second -j LOG + inet/filter/logaccept-61 -j ACCEPT + +Filter 284 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 + inet/filter/address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-48 + inet/filter/address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-48 + inet/filter/logpass-48 -m limit --limit 1/second -j LOG + +Filter 285 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 + inet/filter/address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 286 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 + inet/filter/address-125 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-125 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-125 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-125 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 287 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 + inet/filter/address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 + inet/filter/address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 + inet/filter/address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 + inet/filter/address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 + inet/filter/logaccept-62 -m limit --limit 1/second -j LOG + inet/filter/logaccept-62 -j ACCEPT + +Filter 288 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 + inet/filter/address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-49 + inet/filter/address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-49 + inet/filter/address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-49 + inet/filter/address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-49 + inet/filter/logpass-49 -m limit --limit 1/second -j LOG + +Filter 289 {} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 290 {"action":"drop"} +(log) + inet/filter/FORWARD -j logdrop-0 + inet6/filter/FORWARD -j logdrop-0 + inet/filter/INPUT -j logdrop-0 + inet6/filter/INPUT -j logdrop-0 + inet/filter/OUTPUT -j logdrop-0 + inet6/filter/OUTPUT -j logdrop-0 + inet/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet/filter/logdrop-0 -j DROP + inet6/filter/logdrop-0 -j DROP + +Filter 291 {"action":"pass"} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 292 {"log":false} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 293 {"action":"drop","log":false} +(log) + inet/filter/FORWARD -j DROP + inet6/filter/FORWARD -j DROP + inet/filter/INPUT -j DROP + inet6/filter/INPUT -j DROP + inet/filter/OUTPUT -j DROP + inet6/filter/OUTPUT -j DROP + +Filter 294 {"action":"pass","log":false} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 295 {"log":true} +(log) + inet/filter/FORWARD -j logaccept-63 + inet6/filter/FORWARD -j logaccept-63 + inet/filter/INPUT -j logaccept-63 + inet6/filter/INPUT -j logaccept-63 + inet/filter/OUTPUT -j logaccept-63 + inet6/filter/OUTPUT -j logaccept-63 + inet/filter/logaccept-63 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-63 -m limit --limit 1/second -j LOG + inet/filter/logaccept-63 -j ACCEPT + inet6/filter/logaccept-63 -j ACCEPT + +Filter 296 {"action":"drop","log":true} +(log) + inet/filter/FORWARD -j logdrop-1 + inet6/filter/FORWARD -j logdrop-1 + inet/filter/INPUT -j logdrop-1 + inet6/filter/INPUT -j logdrop-1 + inet/filter/OUTPUT -j logdrop-1 + inet6/filter/OUTPUT -j logdrop-1 + inet/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1 -j DROP + inet6/filter/logdrop-1 -j DROP + +Filter 297 {"action":"pass","log":true} +(log) + inet/filter/FORWARD -j logpass-50 + inet6/filter/FORWARD -j logpass-50 + inet/filter/INPUT -j logpass-50 + inet6/filter/INPUT -j logpass-50 + inet/filter/OUTPUT -j logpass-50 + inet6/filter/OUTPUT -j logpass-50 + inet/filter/logpass-50 -m limit --limit 1/second -j LOG + inet6/filter/logpass-50 -m limit --limit 1/second -j LOG + +Filter 298 {"log":"none"} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 299 {"action":"drop","log":"none"} +(log) + inet/filter/FORWARD -j DROP + inet6/filter/FORWARD -j DROP + inet/filter/INPUT -j DROP + inet6/filter/INPUT -j DROP + inet/filter/OUTPUT -j DROP + inet6/filter/OUTPUT -j DROP + +Filter 300 {"action":"pass","log":"none"} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 301 {"in":["_fw","A"]} +(zone) + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + inet/filter/FORWARD -i eth0 -j ACCEPT + inet6/filter/FORWARD -i eth0 -j ACCEPT + inet/filter/INPUT -i eth0 -j ACCEPT + inet6/filter/INPUT -i eth0 -j ACCEPT + +Filter 302 {"in":"B","out":"C"} +(zone) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + +Filter 303 {"out":["_fw","B"]} +(zone) + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT + +Filter 304 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +(zone) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT + + +Ipset awall-masquerade {"family":"inet","type":"hash:net"} +(masquerade) + + +Limit B true +(limit) + +Limit C 7 +(limit) + +Limit D {"inet":22,"inet6":58} +(limit) + + +Log _default {"limit":1} +(defaults) + +Log none {"mode":"none"} +(log) + + +Mark 1 {"in":["_fw","A"],"mark":0} +(zone) + inet/mangle/OUTPUT -j MARK --set-mark 0 + inet6/mangle/OUTPUT -j MARK --set-mark 0 + inet/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 + inet6/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 + +Mark 2 {"in":"B","mark":1,"out":"C"} +(zone) + inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 + inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 + +Mark 3 {"mark":2,"out":["_fw","B"]} +(zone) + inet/mangle/INPUT -j MARK --set-mark 2 + inet6/mangle/INPUT -j MARK --set-mark 2 + inet/mangle/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 + inet6/mangle/POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 + + +No-track 1 {"in":["_fw","A"]} +(zone) + inet/raw/OUTPUT -j CT --notrack + inet6/raw/OUTPUT -j CT --notrack + inet/raw/PREROUTING -i eth0 -j CT --notrack + inet6/raw/PREROUTING -i eth0 -j CT --notrack + +No-track 2 {"in":"B"} +(zone) + inet/raw/PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack + inet6/raw/PREROUTING -i eth1 -s fc00::/7 -j CT --notrack + +No-track 3 {"out":"_fw"} +(zone) + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack + + +Service babel {"port":6697,"proto":"tcp"} +(services) + +Service bacula-dir {"port":9101,"proto":"tcp"} +(services) + +Service bacula-fd {"port":9102,"proto":"tcp"} +(services) + +Service bacula-sd {"port":9103,"proto":"tcp"} +(services) + +Service bgp {"port":179,"proto":"tcp"} +(services) + +Service dhcp {"family":"inet","port":[67,68],"proto":"udp"} +(services) + +Service discard [{"port":9,"proto":"udp"},{"port":9,"proto":"tcp"}] +(services) + +Service dns [{"port":53,"proto":"udp"},{"port":53,"proto":"tcp"}] +(services) + +Service epmap [{"port":135,"proto":"tcp"},{"port":135,"proto":"udp"}] +(services) + +Service ftp {"ct-helper":"ftp","port":21,"proto":"tcp"} +(services) + +Service gre {"proto":"gre"} +(services) + +Service hp-pdl {"port":9100,"proto":"tcp"} +(services) + +Service http {"port":80,"proto":"tcp"} +(services) + +Service http-alt {"port":8080,"proto":"tcp"} +(services) + +Service https {"port":443,"proto":"tcp"} +(services) + +Service icmp {"proto":"icmp"} +(services) + +Service igmp {"proto":"igmp"} +(services) + +Service imap {"port":143,"proto":"tcp"} +(services) + +Service imaps {"port":993,"proto":"tcp"} +(services) + +Service ipsec [{"proto":"esp"},{"port":[500,4500],"proto":"udp"}] +(services) + +Service irc {"ct-helper":"irc","port":6667,"proto":"tcp"} +(services) + +Service kerberos [{"port":88,"proto":"tcp"},{"port":88,"proto":"udp"}] +(services) + +Service kpasswd [{"port":464,"proto":"tcp"},{"port":464,"proto":"udp"}] +(services) + +Service l2tp {"port":1701,"proto":"udp"} +(services) + +Service ldap [{"port":389,"proto":"tcp"},{"port":389,"proto":"udp"}] +(services) + +Service ldaps [{"port":636,"proto":"tcp"},{"port":636,"proto":"udp"}] +(services) + +Service microsoft-ds [{"port":445,"proto":"tcp"},{"port":445,"proto":"udp"}] +(services) + +Service ms-sql-m {"port":1434,"proto":"tcp"} +(services) + +Service ms-sql-s {"port":1433,"proto":"tcp"} +(services) + +Service msft-gc [{"port":3268,"proto":"tcp"},{"port":3268,"proto":"udp"}] +(services) + +Service msft-gc-ssl [{"port":3269,"proto":"tcp"},{"port":3269,"proto":"udp"}] +(services) + +Service netbios-ds [{"port":138,"proto":"tcp"},{"port":138,"proto":"udp"}] +(services) + +Service netbios-ns [{"family":"inet","port":137,"proto":"tcp"},{"ct-helper":"netbios-ns","family":"inet","port":137,"proto":"udp"}] +(services) + +Service netbios-ssn [{"port":139,"proto":"tcp"},{"port":139,"proto":"udp"}] +(services) + +Service ntp {"port":123,"proto":"udp"} +(services) + +Service ospf {"proto":"ospf"} +(services) + +Service pgsql {"port":5432,"proto":"tcp"} +(services) + +Service ping [{"proto":"icmp","reply-type":0,"type":8},{"proto":"icmpv6","reply-type":129,"type":128}] +(services) + +Service pop3 {"port":110,"proto":"tcp"} +(services) + +Service pop3s {"port":995,"proto":"tcp"} +(services) + +Service radius [{"port":1812,"proto":"udp"},{"port":1812,"proto":"tcp"}] +(services) + +Service radius-acct [{"port":1813,"proto":"udp"},{"port":1813,"proto":"tcp"}] +(services) + +Service rdp {"port":3389,"proto":"tcp"} +(services) + +Service rsync {"port":873,"proto":"tcp"} +(services) + +Service rtmp {"port":1935,"proto":"tcp"} +(services) + +Service rtsp {"port":554,"proto":"tcp"} +(services) + +Service sieve {"port":4190,"proto":"tcp"} +(services) + +Service sip [{"ct-helper":"sip","port":5060,"proto":"udp"},{"ct-helper":"sip","port":5060,"proto":"tcp"}] +(services) + +Service sip-tls [{"port":5061,"proto":"udp"},{"port":5061,"proto":"tcp"}] +(services) + +Service smtp {"port":25,"proto":"tcp"} +(services) + +Service snmp {"port":161,"proto":"udp"} +(services) + +Service snmp-trap {"port":162,"proto":"udp"} +(services) + +Service ssh {"port":22,"proto":"tcp"} +(services) + +Service submission {"port":587,"proto":"tcp"} +(services) + +Service syslog {"port":514,"proto":"udp"} +(services) + +Service telnet {"port":23,"proto":"tcp"} +(services) + +Service teredo {"port":3544,"proto":"udp"} +(services) + +Service tftp {"port":69,"proto":"udp"} +(services) + +Service vnc {"port":5900,"proto":"tcp"} +(services) + + +Snat 1 {"out":["_fw","B"]} +(zone) + inet/nat/INPUT -j MASQUERADE + inet/nat/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE + + +Variable awall_tproxy_mark 1 +(defaults) + + +Zone A {"iface":"eth0"} +(zone) + +Zone B {"addr":["10.0.0.0\/12","fc00::\/7"],"iface":"eth1"} +(zone) + +Zone C {"addr":"10.1.0.0\/12","iface":["eth2","eth3"]} +(zone) + +Zone D {"iface":["eth4","eth5"],"route-back":true} +(zone) + +Zone E {"ipsec":true} +(zone) + + +# ipset awall-masquerade +hash:net family inet + + +# rules-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:address-0 - [0:0] +:address-1 - [0:0] +:address-10 - [0:0] +:address-100 - [0:0] +:address-101 - [0:0] +:address-102 - [0:0] +:address-103 - [0:0] +:address-104 - [0:0] +:address-105 - [0:0] +:address-106 - [0:0] +:address-107 - [0:0] +:address-108 - [0:0] +:address-109 - [0:0] +:address-11 - [0:0] +:address-110 - [0:0] +:address-111 - [0:0] +:address-112 - [0:0] +:address-113 - [0:0] +:address-114 - [0:0] +:address-115 - [0:0] +:address-116 - [0:0] +:address-117 - [0:0] +:address-118 - [0:0] +:address-119 - [0:0] +:address-12 - [0:0] +:address-120 - [0:0] +:address-121 - [0:0] +:address-122 - [0:0] +:address-123 - [0:0] +:address-124 - [0:0] +:address-125 - [0:0] +:address-126 - [0:0] +:address-127 - [0:0] +:address-13 - [0:0] +:address-14 - [0:0] +:address-15 - [0:0] +:address-16 - [0:0] +:address-17 - [0:0] +:address-18 - [0:0] +:address-19 - [0:0] +:address-2 - [0:0] +:address-20 - [0:0] +:address-21 - [0:0] +:address-22 - [0:0] +:address-23 - [0:0] +:address-24 - [0:0] +:address-25 - [0:0] +:address-26 - [0:0] +:address-27 - [0:0] +:address-28 - [0:0] +:address-29 - [0:0] +:address-3 - [0:0] +:address-30 - [0:0] +:address-31 - [0:0] +:address-32 - [0:0] +:address-33 - [0:0] +:address-34 - [0:0] +:address-35 - [0:0] +:address-36 - [0:0] +:address-37 - [0:0] +:address-38 - [0:0] +:address-39 - [0:0] +:address-4 - [0:0] +:address-40 - [0:0] +:address-41 - [0:0] +:address-42 - [0:0] +:address-43 - [0:0] +:address-44 - [0:0] +:address-45 - [0:0] +:address-46 - [0:0] +:address-47 - [0:0] +:address-48 - [0:0] +:address-49 - [0:0] +:address-5 - [0:0] +:address-50 - [0:0] +:address-51 - [0:0] +:address-52 - [0:0] +:address-53 - [0:0] +:address-54 - [0:0] +:address-55 - [0:0] +:address-56 - [0:0] +:address-57 - [0:0] +:address-58 - [0:0] +:address-59 - [0:0] +:address-6 - [0:0] +:address-60 - [0:0] +:address-61 - [0:0] +:address-62 - [0:0] +:address-63 - [0:0] +:address-64 - [0:0] +:address-65 - [0:0] +:address-66 - [0:0] +:address-67 - [0:0] +:address-68 - [0:0] +:address-69 - [0:0] +:address-7 - [0:0] +:address-70 - [0:0] +:address-71 - [0:0] +:address-72 - [0:0] +:address-73 - [0:0] +:address-74 - [0:0] +:address-75 - [0:0] +:address-76 - [0:0] +:address-77 - [0:0] +:address-78 - [0:0] +:address-79 - [0:0] +:address-8 - [0:0] +:address-80 - [0:0] +:address-81 - [0:0] +:address-82 - [0:0] +:address-83 - [0:0] +:address-84 - [0:0] +:address-85 - [0:0] +:address-86 - [0:0] +:address-87 - [0:0] +:address-88 - [0:0] +:address-89 - [0:0] +:address-9 - [0:0] +:address-90 - [0:0] +:address-91 - [0:0] +:address-92 - [0:0] +:address-93 - [0:0] +:address-94 - [0:0] +:address-95 - [0:0] +:address-96 - [0:0] +:address-97 - [0:0] +:address-98 - [0:0] +:address-99 - [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logaccept-1 - [0:0] +:logaccept-10 - [0:0] +:logaccept-11 - [0:0] +:logaccept-12 - [0:0] +:logaccept-13 - [0:0] +:logaccept-14 - [0:0] +:logaccept-15 - [0:0] +:logaccept-16 - [0:0] +:logaccept-17 - [0:0] +:logaccept-18 - [0:0] +:logaccept-19 - [0:0] +:logaccept-2 - [0:0] +:logaccept-20 - [0:0] +:logaccept-21 - [0:0] +:logaccept-22 - [0:0] +:logaccept-23 - [0:0] +:logaccept-24 - [0:0] +:logaccept-25 - [0:0] +:logaccept-26 - [0:0] +:logaccept-27 - [0:0] +:logaccept-28 - [0:0] +:logaccept-29 - [0:0] +:logaccept-3 - [0:0] +:logaccept-30 - [0:0] +:logaccept-31 - [0:0] +:logaccept-32 - [0:0] +:logaccept-33 - [0:0] +:logaccept-34 - [0:0] +:logaccept-35 - [0:0] +:logaccept-36 - [0:0] +:logaccept-37 - [0:0] +:logaccept-38 - [0:0] +:logaccept-39 - [0:0] +:logaccept-4 - [0:0] +:logaccept-40 - [0:0] +:logaccept-41 - [0:0] +:logaccept-42 - [0:0] +:logaccept-43 - [0:0] +:logaccept-44 - [0:0] +:logaccept-45 - [0:0] +:logaccept-46 - [0:0] +:logaccept-47 - [0:0] +:logaccept-48 - [0:0] +:logaccept-49 - [0:0] +:logaccept-5 - [0:0] +:logaccept-50 - [0:0] +:logaccept-51 - [0:0] +:logaccept-52 - [0:0] +:logaccept-53 - [0:0] +:logaccept-54 - [0:0] +:logaccept-55 - [0:0] +:logaccept-56 - [0:0] +:logaccept-57 - [0:0] +:logaccept-58 - [0:0] +:logaccept-59 - [0:0] +:logaccept-6 - [0:0] +:logaccept-60 - [0:0] +:logaccept-61 - [0:0] +:logaccept-62 - [0:0] +:logaccept-63 - [0:0] +:logaccept-7 - [0:0] +:logaccept-8 - [0:0] +:logaccept-9 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-10 - [0:0] +:logpass-11 - [0:0] +:logpass-12 - [0:0] +:logpass-13 - [0:0] +:logpass-14 - [0:0] +:logpass-15 - [0:0] +:logpass-16 - [0:0] +:logpass-17 - [0:0] +:logpass-18 - [0:0] +:logpass-19 - [0:0] +:logpass-2 - [0:0] +:logpass-20 - [0:0] +:logpass-21 - [0:0] +:logpass-22 - [0:0] +:logpass-23 - [0:0] +:logpass-24 - [0:0] +:logpass-25 - [0:0] +:logpass-26 - [0:0] +:logpass-27 - [0:0] +:logpass-28 - [0:0] +:logpass-29 - [0:0] +:logpass-3 - [0:0] +:logpass-30 - [0:0] +:logpass-31 - [0:0] +:logpass-32 - [0:0] +:logpass-33 - [0:0] +:logpass-34 - [0:0] +:logpass-35 - [0:0] +:logpass-36 - [0:0] +:logpass-37 - [0:0] +:logpass-38 - [0:0] +:logpass-39 - [0:0] +:logpass-4 - [0:0] +:logpass-40 - [0:0] +:logpass-41 - [0:0] +:logpass-42 - [0:0] +:logpass-43 - [0:0] +:logpass-44 - [0:0] +:logpass-45 - [0:0] +:logpass-46 - [0:0] +:logpass-47 - [0:0] +:logpass-48 - [0:0] +:logpass-49 - [0:0] +:logpass-5 - [0:0] +:logpass-50 - [0:0] +:logpass-6 - [0:0] +:logpass-7 - [0:0] +:logpass-8 - [0:0] +:logpass-9 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logpass-0 +-A FORWARD -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -d 172.16.0.0/16 +-A FORWARD -d 172.16.0.0/16 -j logaccept-1 +-A FORWARD -d 172.16.0.0/16 -j logpass-1 +-A FORWARD -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -d 172.16.0.0/16 +-A FORWARD -d 172.16.2.0/16 +-A FORWARD -d 172.16.0.0/16 -j logaccept-2 +-A FORWARD -d 172.16.2.0/16 -j logaccept-2 +-A FORWARD -d 172.16.0.0/16 -j logpass-2 +-A FORWARD -d 172.16.2.0/16 -j logpass-2 +-A FORWARD -s 10.0.0.1 -j ACCEPT +-A FORWARD -s 10.0.0.1 +-A FORWARD -s 10.0.0.1 -j logaccept-3 +-A FORWARD -s 10.0.0.1 -j logpass-3 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A FORWARD -s 10.0.0.1 -j ACCEPT +-A FORWARD -s 10.0.0.2 -j ACCEPT +-A FORWARD -s 10.0.0.1 +-A FORWARD -s 10.0.0.2 +-A FORWARD -s 10.0.0.1 -j logaccept-6 +-A FORWARD -s 10.0.0.2 -j logaccept-6 +-A FORWARD -s 10.0.0.1 -j logpass-6 +-A FORWARD -s 10.0.0.2 -j logpass-6 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j logpass-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth0 +-A FORWARD -i eth0 -j logaccept-18 +-A FORWARD -i eth0 -j logpass-16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.0.0/16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-17 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.0.0/16 +-A FORWARD -i eth0 -d 172.16.2.0/16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 +-A FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-18 +-A FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-18 +-A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 +-A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 +-A FORWARD -i eth0 -s 10.0.0.1 -j logpass-19 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 +-A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 +-A FORWARD -i eth0 -s 10.0.0.2 +-A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 +-A FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 +-A FORWARD -i eth0 -s 10.0.0.1 -j logpass-22 +-A FORWARD -i eth0 -s 10.0.0.2 -j logpass-22 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-30 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 +-A FORWARD -i eth2 -s 10.1.0.0/12 +-A FORWARD -i eth3 -s 10.1.0.0/12 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-37 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-37 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-37 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-63 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-50 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmp -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logpass-0 +-A INPUT -d 172.16.0.0/16 -j ACCEPT +-A INPUT -d 172.16.0.0/16 +-A INPUT -d 172.16.0.0/16 -j logaccept-1 +-A INPUT -d 172.16.0.0/16 -j logpass-1 +-A INPUT -d 172.16.0.0/16 -j ACCEPT +-A INPUT -d 172.16.2.0/16 -j ACCEPT +-A INPUT -d 172.16.0.0/16 +-A INPUT -d 172.16.2.0/16 +-A INPUT -d 172.16.0.0/16 -j logaccept-2 +-A INPUT -d 172.16.2.0/16 -j logaccept-2 +-A INPUT -d 172.16.0.0/16 -j logpass-2 +-A INPUT -d 172.16.2.0/16 -j logpass-2 +-A INPUT -s 10.0.0.1 -j ACCEPT +-A INPUT -s 10.0.0.1 +-A INPUT -s 10.0.0.1 -j logaccept-3 +-A INPUT -s 10.0.0.1 -j logpass-3 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A INPUT -s 10.0.0.1 -j ACCEPT +-A INPUT -s 10.0.0.2 -j ACCEPT +-A INPUT -s 10.0.0.1 +-A INPUT -s 10.0.0.2 +-A INPUT -s 10.0.0.1 -j logaccept-6 +-A INPUT -s 10.0.0.2 -j logaccept-6 +-A INPUT -s 10.0.0.1 -j logpass-6 +-A INPUT -s 10.0.0.2 -j logpass-6 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A INPUT -i eth0 -j ACCEPT +-A INPUT -i eth0 +-A INPUT -i eth0 -j logaccept-18 +-A INPUT -i eth0 -j logpass-16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.0.0/16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-17 +-A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.0.0/16 +-A INPUT -i eth0 -d 172.16.2.0/16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 +-A INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-18 +-A INPUT -i eth0 -d 172.16.2.0/16 -j logpass-18 +-A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 +-A INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 +-A INPUT -i eth0 -s 10.0.0.1 -j logpass-19 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 +-A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 +-A INPUT -i eth0 -s 10.0.0.2 +-A INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 +-A INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 +-A INPUT -i eth0 -s 10.0.0.1 -j logpass-22 +-A INPUT -i eth0 -s 10.0.0.2 -j logpass-22 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 +-A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-30 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-48 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-49 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-50 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-51 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-52 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-53 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-54 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-55 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-56 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-57 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-58 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-59 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-60 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-61 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-62 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-63 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-64 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-65 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-66 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-67 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-68 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-69 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-70 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-71 +-A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 +-A INPUT -i eth2 -s 10.1.0.0/12 +-A INPUT -i eth3 -s 10.1.0.0/12 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 +-A INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 +-A INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-37 +-A INPUT -i eth2 -s 10.1.0.0/12 -j logpass-37 +-A INPUT -i eth3 -s 10.1.0.0/12 -j logpass-37 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-72 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-72 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-72 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-73 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-73 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-73 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-74 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-74 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-74 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-75 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-75 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-75 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-76 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-76 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-76 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-77 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-77 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-77 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-78 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-78 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-78 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-79 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-79 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-79 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-80 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-80 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-80 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-81 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-81 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-81 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-82 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-82 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-82 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-83 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-83 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-83 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-84 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-84 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-84 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-85 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-85 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-85 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-86 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-86 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-86 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-87 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-87 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-87 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-88 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-88 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-88 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-89 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-89 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-89 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-90 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-90 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-90 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-91 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-91 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-91 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-92 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-92 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-92 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-93 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-93 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-93 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-94 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-94 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-94 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-95 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-95 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-95 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-63 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-50 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logpass-0 +-A OUTPUT -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -d 172.16.0.0/16 +-A OUTPUT -d 172.16.0.0/16 -j logaccept-1 +-A OUTPUT -d 172.16.0.0/16 -j logpass-1 +-A OUTPUT -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -d 172.16.0.0/16 +-A OUTPUT -d 172.16.2.0/16 +-A OUTPUT -d 172.16.0.0/16 -j logaccept-2 +-A OUTPUT -d 172.16.2.0/16 -j logaccept-2 +-A OUTPUT -d 172.16.0.0/16 -j logpass-2 +-A OUTPUT -d 172.16.2.0/16 -j logpass-2 +-A OUTPUT -s 10.0.0.1 -j ACCEPT +-A OUTPUT -s 10.0.0.1 +-A OUTPUT -s 10.0.0.1 -j logaccept-3 +-A OUTPUT -s 10.0.0.1 -j logpass-3 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A OUTPUT -s 10.0.0.1 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -j ACCEPT +-A OUTPUT -s 10.0.0.1 +-A OUTPUT -s 10.0.0.2 +-A OUTPUT -s 10.0.0.1 -j logaccept-6 +-A OUTPUT -s 10.0.0.2 -j logaccept-6 +-A OUTPUT -s 10.0.0.1 -j logpass-6 +-A OUTPUT -s 10.0.0.2 -j logpass-6 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j logpass-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-63 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A address-0 -d 172.16.0.0/16 -j ACCEPT +-A address-1 -d 172.16.0.0/16 +-A address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 +-A address-100 -d 172.16.0.0/16 -j ACCEPT +-A address-100 -d 172.16.2.0/16 -j ACCEPT +-A address-101 -d 172.16.0.0/16 +-A address-101 -d 172.16.2.0/16 +-A address-102 -d 172.16.0.0/16 -j logaccept-56 +-A address-102 -d 172.16.2.0/16 -j logaccept-56 +-A address-103 -d 172.16.0.0/16 -j logpass-45 +-A address-103 -d 172.16.2.0/16 -j logpass-45 +-A address-104 -s 10.0.0.1 -j ACCEPT +-A address-105 -s 10.0.0.1 +-A address-106 -s 10.0.0.1 -j logaccept-57 +-A address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-109 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 +-A address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-113 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-113 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 +-A address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 +-A address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-46 +-A address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-46 +-A address-116 -s 10.0.0.1 -j ACCEPT +-A address-116 -s 10.0.0.2 -j ACCEPT +-A address-117 -s 10.0.0.1 +-A address-117 -s 10.0.0.2 +-A address-118 -s 10.0.0.1 -j logaccept-60 +-A address-118 -s 10.0.0.2 -j logaccept-60 +-A address-119 -s 10.0.0.1 -j logpass-47 +-A address-119 -s 10.0.0.2 -j logpass-47 +-A address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-121 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-121 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 +-A address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 +-A address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-48 +-A address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-48 +-A address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-125 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-125 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-125 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-125 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 +-A address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-49 +-A address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-49 +-A address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-49 +-A address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-49 +-A address-13 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-13 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 +-A address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 +-A address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 +-A address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-12 +-A address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-17 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-17 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 +-A address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 +-A address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-14 +-A address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-14 +-A address-2 -d 172.16.0.0/16 -j logaccept-10 +-A address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-21 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-21 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-21 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-21 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 +-A address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 +-A address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 +-A address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-15 +-A address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-15 +-A address-24 -d 172.16.0.0/16 -j ACCEPT +-A address-25 -d 172.16.0.0/16 +-A address-26 -d 172.16.0.0/16 -j logaccept-28 +-A address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-28 -d 172.16.0.0/16 -j ACCEPT +-A address-28 -d 172.16.2.0/16 -j ACCEPT +-A address-29 -d 172.16.0.0/16 +-A address-29 -d 172.16.2.0/16 +-A address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-30 -d 172.16.0.0/16 -j logaccept-29 +-A address-30 -d 172.16.2.0/16 -j logaccept-29 +-A address-31 -d 172.16.0.0/16 -j logpass-25 +-A address-31 -d 172.16.2.0/16 -j logpass-25 +-A address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-33 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 +-A address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-37 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-37 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 +-A address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 +-A address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-26 +-A address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-26 +-A address-4 -d 172.16.0.0/16 -j ACCEPT +-A address-4 -d 172.16.2.0/16 -j ACCEPT +-A address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-41 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-41 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 +-A address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 +-A address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 +-A address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 +-A address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-45 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-45 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-45 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-45 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 +-A address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-29 +-A address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-29 +-A address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-29 +-A address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-29 +-A address-48 -s 10.0.0.1 -j ACCEPT +-A address-49 -s 10.0.0.1 +-A address-5 -d 172.16.0.0/16 +-A address-5 -d 172.16.2.0/16 +-A address-50 -s 10.0.0.1 -j logaccept-39 +-A address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-53 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 +-A address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-57 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-57 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 +-A address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 +-A address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-33 +-A address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-33 +-A address-6 -d 172.16.0.0/16 -j logaccept-11 +-A address-6 -d 172.16.2.0/16 -j logaccept-11 +-A address-60 -s 10.0.0.1 -j ACCEPT +-A address-60 -s 10.0.0.2 -j ACCEPT +-A address-61 -s 10.0.0.1 +-A address-61 -s 10.0.0.2 +-A address-62 -s 10.0.0.1 -j logaccept-42 +-A address-62 -s 10.0.0.2 -j logaccept-42 +-A address-63 -s 10.0.0.1 -j logpass-34 +-A address-63 -s 10.0.0.2 -j logpass-34 +-A address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-65 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-65 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 +-A address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 +-A address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 +-A address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 +-A address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-69 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-69 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-69 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-69 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-7 -d 172.16.0.0/16 -j logpass-10 +-A address-7 -d 172.16.2.0/16 -j logpass-10 +-A address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 +-A address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-36 +-A address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-36 +-A address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-36 +-A address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-36 +-A address-72 -s 10.0.0.1 -j ACCEPT +-A address-73 -s 10.0.0.1 +-A address-74 -s 10.0.0.1 -j logaccept-48 +-A address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-77 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 +-A address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-81 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-81 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 +-A address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 +-A address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 +-A address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-40 +-A address-84 -s 10.0.0.1 -j ACCEPT +-A address-84 -s 10.0.0.2 -j ACCEPT +-A address-85 -s 10.0.0.1 +-A address-85 -s 10.0.0.2 +-A address-86 -s 10.0.0.1 -j logaccept-51 +-A address-86 -s 10.0.0.2 -j logaccept-51 +-A address-87 -s 10.0.0.1 -j logpass-41 +-A address-87 -s 10.0.0.2 -j logpass-41 +-A address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-89 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-89 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-9 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 +-A address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 +-A address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-42 +-A address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-42 +-A address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-93 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-93 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-93 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-93 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 +-A address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-43 +-A address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-43 +-A address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-43 +-A address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-43 +-A address-96 -d 172.16.0.0/16 -j ACCEPT +-A address-97 -d 172.16.0.0/16 +-A address-98 -d 172.16.0.0/16 -j logaccept-55 +-A address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logaccept-1 -m limit --limit 1/second -j LOG +-A logaccept-1 -j ACCEPT +-A logaccept-10 -m limit --limit 1/second -j LOG +-A logaccept-10 -j ACCEPT +-A logaccept-11 -m limit --limit 1/second -j LOG +-A logaccept-11 -j ACCEPT +-A logaccept-12 -m limit --limit 1/second -j LOG +-A logaccept-12 -j ACCEPT +-A logaccept-13 -m limit --limit 1/second -j LOG +-A logaccept-13 -j ACCEPT +-A logaccept-14 -m limit --limit 1/second -j LOG +-A logaccept-14 -j ACCEPT +-A logaccept-15 -m limit --limit 1/second -j LOG +-A logaccept-15 -j ACCEPT +-A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j ACCEPT +-A logaccept-17 -m limit --limit 1/second -j LOG +-A logaccept-17 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-19 -m limit --limit 1/second -j LOG +-A logaccept-19 -j ACCEPT +-A logaccept-2 -m limit --limit 1/second -j LOG +-A logaccept-2 -j ACCEPT +-A logaccept-20 -m limit --limit 1/second -j LOG +-A logaccept-20 -j ACCEPT +-A logaccept-21 -m limit --limit 1/second -j LOG +-A logaccept-21 -j ACCEPT +-A logaccept-22 -m limit --limit 1/second -j LOG +-A logaccept-22 -j ACCEPT +-A logaccept-23 -m limit --limit 1/second -j LOG +-A logaccept-23 -j ACCEPT +-A logaccept-24 -m limit --limit 1/second -j LOG +-A logaccept-24 -j ACCEPT +-A logaccept-25 -m limit --limit 1/second -j LOG +-A logaccept-25 -j ACCEPT +-A logaccept-26 -m limit --limit 1/second -j LOG +-A logaccept-26 -j ACCEPT +-A logaccept-27 -m limit --limit 1/second -j LOG +-A logaccept-27 -j ACCEPT +-A logaccept-28 -m limit --limit 1/second -j LOG +-A logaccept-28 -j ACCEPT +-A logaccept-29 -m limit --limit 1/second -j LOG +-A logaccept-29 -j ACCEPT +-A logaccept-3 -m limit --limit 1/second -j LOG +-A logaccept-3 -j ACCEPT +-A logaccept-30 -m limit --limit 1/second -j LOG +-A logaccept-30 -j ACCEPT +-A logaccept-31 -m limit --limit 1/second -j LOG +-A logaccept-31 -j ACCEPT +-A logaccept-32 -m limit --limit 1/second -j LOG +-A logaccept-32 -j ACCEPT +-A logaccept-33 -m limit --limit 1/second -j LOG +-A logaccept-33 -j ACCEPT +-A logaccept-34 -m limit --limit 1/second -j LOG +-A logaccept-34 -j ACCEPT +-A logaccept-35 -m limit --limit 1/second -j LOG +-A logaccept-35 -j ACCEPT +-A logaccept-36 -m limit --limit 1/second -j LOG +-A logaccept-36 -j ACCEPT +-A logaccept-37 -m limit --limit 1/second -j LOG +-A logaccept-37 -j ACCEPT +-A logaccept-38 -m limit --limit 1/second -j LOG +-A logaccept-38 -j ACCEPT +-A logaccept-39 -m limit --limit 1/second -j LOG +-A logaccept-39 -j ACCEPT +-A logaccept-4 -m limit --limit 1/second -j LOG +-A logaccept-4 -j ACCEPT +-A logaccept-40 -m limit --limit 1/second -j LOG +-A logaccept-40 -j ACCEPT +-A logaccept-41 -m limit --limit 1/second -j LOG +-A logaccept-41 -j ACCEPT +-A logaccept-42 -m limit --limit 1/second -j LOG +-A logaccept-42 -j ACCEPT +-A logaccept-43 -m limit --limit 1/second -j LOG +-A logaccept-43 -j ACCEPT +-A logaccept-44 -m limit --limit 1/second -j LOG +-A logaccept-44 -j ACCEPT +-A logaccept-45 -m limit --limit 1/second -j LOG +-A logaccept-45 -j ACCEPT +-A logaccept-46 -m limit --limit 1/second -j LOG +-A logaccept-46 -j ACCEPT +-A logaccept-47 -m limit --limit 1/second -j LOG +-A logaccept-47 -j ACCEPT +-A logaccept-48 -m limit --limit 1/second -j LOG +-A logaccept-48 -j ACCEPT +-A logaccept-49 -m limit --limit 1/second -j LOG +-A logaccept-49 -j ACCEPT +-A logaccept-5 -m limit --limit 1/second -j LOG +-A logaccept-5 -j ACCEPT +-A logaccept-50 -m limit --limit 1/second -j LOG +-A logaccept-50 -j ACCEPT +-A logaccept-51 -m limit --limit 1/second -j LOG +-A logaccept-51 -j ACCEPT +-A logaccept-52 -m limit --limit 1/second -j LOG +-A logaccept-52 -j ACCEPT +-A logaccept-53 -m limit --limit 1/second -j LOG +-A logaccept-53 -j ACCEPT +-A logaccept-54 -m limit --limit 1/second -j LOG +-A logaccept-54 -j ACCEPT +-A logaccept-55 -m limit --limit 1/second -j LOG +-A logaccept-55 -j ACCEPT +-A logaccept-56 -m limit --limit 1/second -j LOG +-A logaccept-56 -j ACCEPT +-A logaccept-57 -m limit --limit 1/second -j LOG +-A logaccept-57 -j ACCEPT +-A logaccept-58 -m limit --limit 1/second -j LOG +-A logaccept-58 -j ACCEPT +-A logaccept-59 -m limit --limit 1/second -j LOG +-A logaccept-59 -j ACCEPT +-A logaccept-6 -m limit --limit 1/second -j LOG +-A logaccept-6 -j ACCEPT +-A logaccept-60 -m limit --limit 1/second -j LOG +-A logaccept-60 -j ACCEPT +-A logaccept-61 -m limit --limit 1/second -j LOG +-A logaccept-61 -j ACCEPT +-A logaccept-62 -m limit --limit 1/second -j LOG +-A logaccept-62 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-7 -m limit --limit 1/second -j LOG +-A logaccept-7 -j ACCEPT +-A logaccept-8 -m limit --limit 1/second -j LOG +-A logaccept-8 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG +-A logaccept-9 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -m limit --limit 1/second -j LOG +-A logpass-10 -m limit --limit 1/second -j LOG +-A logpass-11 -m limit --limit 1/second -j LOG +-A logpass-12 -m limit --limit 1/second -j LOG +-A logpass-13 -m limit --limit 1/second -j LOG +-A logpass-14 -m limit --limit 1/second -j LOG +-A logpass-15 -m limit --limit 1/second -j LOG +-A logpass-16 -m limit --limit 1/second -j LOG +-A logpass-17 -m limit --limit 1/second -j LOG +-A logpass-18 -m limit --limit 1/second -j LOG +-A logpass-19 -m limit --limit 1/second -j LOG +-A logpass-2 -m limit --limit 1/second -j LOG +-A logpass-20 -m limit --limit 1/second -j LOG +-A logpass-21 -m limit --limit 1/second -j LOG +-A logpass-22 -m limit --limit 1/second -j LOG +-A logpass-23 -m limit --limit 1/second -j LOG +-A logpass-24 -m limit --limit 1/second -j LOG +-A logpass-25 -m limit --limit 1/second -j LOG +-A logpass-26 -m limit --limit 1/second -j LOG +-A logpass-27 -m limit --limit 1/second -j LOG +-A logpass-28 -m limit --limit 1/second -j LOG +-A logpass-29 -m limit --limit 1/second -j LOG +-A logpass-3 -m limit --limit 1/second -j LOG +-A logpass-30 -m limit --limit 1/second -j LOG +-A logpass-31 -m limit --limit 1/second -j LOG +-A logpass-32 -m limit --limit 1/second -j LOG +-A logpass-33 -m limit --limit 1/second -j LOG +-A logpass-34 -m limit --limit 1/second -j LOG +-A logpass-35 -m limit --limit 1/second -j LOG +-A logpass-36 -m limit --limit 1/second -j LOG +-A logpass-37 -m limit --limit 1/second -j LOG +-A logpass-38 -m limit --limit 1/second -j LOG +-A logpass-39 -m limit --limit 1/second -j LOG +-A logpass-4 -m limit --limit 1/second -j LOG +-A logpass-40 -m limit --limit 1/second -j LOG +-A logpass-41 -m limit --limit 1/second -j LOG +-A logpass-42 -m limit --limit 1/second -j LOG +-A logpass-43 -m limit --limit 1/second -j LOG +-A logpass-44 -m limit --limit 1/second -j LOG +-A logpass-45 -m limit --limit 1/second -j LOG +-A logpass-46 -m limit --limit 1/second -j LOG +-A logpass-47 -m limit --limit 1/second -j LOG +-A logpass-48 -m limit --limit 1/second -j LOG +-A logpass-49 -m limit --limit 1/second -j LOG +-A logpass-5 -m limit --limit 1/second -j LOG +-A logpass-50 -m limit --limit 1/second -j LOG +-A logpass-6 -m limit --limit 1/second -j LOG +-A logpass-7 -m limit --limit 1/second -j LOG +-A logpass-8 -m limit --limit 1/second -j LOG +-A logpass-9 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:FORWARD ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*nat +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +:awall-masquerade - [0:0] +-A INPUT -j MASQUERADE +-A OUTPUT -j REDIRECT +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE +-A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade +-A PREROUTING -i eth0 -j REDIRECT +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT +-A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT + +# rules6-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logaccept-18 - [0:0] +:logaccept-27 - [0:0] +:logaccept-36 - [0:0] +:logaccept-45 - [0:0] +:logaccept-63 - [0:0] +:logaccept-9 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +:logpass-16 - [0:0] +:logpass-30 - [0:0] +:logpass-37 - [0:0] +:logpass-50 - [0:0] +:logpass-9 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logpass-0 +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 +-A FORWARD -o eth1 -d fc00::/7 -j logaccept-9 +-A FORWARD -o eth1 -d fc00::/7 -j logpass-9 +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth0 +-A FORWARD -i eth0 -j logaccept-18 +-A FORWARD -i eth0 -j logpass-16 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG +-A FORWARD -i eth1 -s fc00::/7 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 +-A FORWARD -i eth1 -s fc00::/7 -j logaccept-36 +-A FORWARD -i eth1 -s fc00::/7 -j logpass-30 +-A FORWARD -i eth1 -s fc00::/7 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 +-A FORWARD -i eth1 -s fc00::/7 -j logaccept-45 +-A FORWARD -i eth1 -s fc00::/7 -j logpass-37 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-63 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-50 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logpass-0 +-A INPUT -i eth0 -j ACCEPT +-A INPUT -i eth0 +-A INPUT -i eth0 -j logaccept-18 +-A INPUT -i eth0 -j logpass-16 +-A INPUT -i eth1 -s fc00::/7 -j ACCEPT +-A INPUT -i eth1 -s fc00::/7 +-A INPUT -i eth1 -s fc00::/7 -j logaccept-36 +-A INPUT -i eth1 -s fc00::/7 -j logpass-30 +-A INPUT -i eth1 -s fc00::/7 -j ACCEPT +-A INPUT -i eth1 -s fc00::/7 +-A INPUT -i eth1 -s fc00::/7 -j logaccept-45 +-A INPUT -i eth1 -s fc00::/7 -j logpass-37 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-63 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-50 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logpass-0 +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 +-A OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 +-A OUTPUT -o eth1 -d fc00::/7 -j logpass-9 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-63 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-27 -m limit --limit 1/second -j LOG +-A logaccept-27 -j ACCEPT +-A logaccept-36 -m limit --limit 1/second -j LOG +-A logaccept-36 -j ACCEPT +-A logaccept-45 -m limit --limit 1/second -j LOG +-A logaccept-45 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG +-A logaccept-9 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-16 -m limit --limit 1/second -j LOG +-A logpass-30 -m limit --limit 1/second -j LOG +-A logpass-37 -m limit --limit 1/second -j LOG +-A logpass-50 -m limit --limit 1/second -j LOG +-A logpass-9 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT + diff --git a/test/output/address/ipset-awall-masquerade b/test/output/address/ipset-awall-masquerade new file mode 100644 index 0000000..b3a47fd --- /dev/null +++ b/test/output/address/ipset-awall-masquerade @@ -0,0 +1,2 @@ +# ipset awall-masquerade +hash:net family inet diff --git a/test/output/address/rules-save b/test/output/address/rules-save new file mode 100644 index 0000000..c1e91b4 --- /dev/null +++ b/test/output/address/rules-save @@ -0,0 +1,1654 @@ +# rules-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:address-0 - [0:0] +:address-1 - [0:0] +:address-10 - [0:0] +:address-100 - [0:0] +:address-101 - [0:0] +:address-102 - [0:0] +:address-103 - [0:0] +:address-104 - [0:0] +:address-105 - [0:0] +:address-106 - [0:0] +:address-107 - [0:0] +:address-108 - [0:0] +:address-109 - [0:0] +:address-11 - [0:0] +:address-110 - [0:0] +:address-111 - [0:0] +:address-112 - [0:0] +:address-113 - [0:0] +:address-114 - [0:0] +:address-115 - [0:0] +:address-116 - [0:0] +:address-117 - [0:0] +:address-118 - [0:0] +:address-119 - [0:0] +:address-12 - [0:0] +:address-120 - [0:0] +:address-121 - [0:0] +:address-122 - [0:0] +:address-123 - [0:0] +:address-124 - [0:0] +:address-125 - [0:0] +:address-126 - [0:0] +:address-127 - [0:0] +:address-13 - [0:0] +:address-14 - [0:0] +:address-15 - [0:0] +:address-16 - [0:0] +:address-17 - [0:0] +:address-18 - [0:0] +:address-19 - [0:0] +:address-2 - [0:0] +:address-20 - [0:0] +:address-21 - [0:0] +:address-22 - [0:0] +:address-23 - [0:0] +:address-24 - [0:0] +:address-25 - [0:0] +:address-26 - [0:0] +:address-27 - [0:0] +:address-28 - [0:0] +:address-29 - [0:0] +:address-3 - [0:0] +:address-30 - [0:0] +:address-31 - [0:0] +:address-32 - [0:0] +:address-33 - [0:0] +:address-34 - [0:0] +:address-35 - [0:0] +:address-36 - [0:0] +:address-37 - [0:0] +:address-38 - [0:0] +:address-39 - [0:0] +:address-4 - [0:0] +:address-40 - [0:0] +:address-41 - [0:0] +:address-42 - [0:0] +:address-43 - [0:0] +:address-44 - [0:0] +:address-45 - [0:0] +:address-46 - [0:0] +:address-47 - [0:0] +:address-48 - [0:0] +:address-49 - [0:0] +:address-5 - [0:0] +:address-50 - [0:0] +:address-51 - [0:0] +:address-52 - [0:0] +:address-53 - [0:0] +:address-54 - [0:0] +:address-55 - [0:0] +:address-56 - [0:0] +:address-57 - [0:0] +:address-58 - [0:0] +:address-59 - [0:0] +:address-6 - [0:0] +:address-60 - [0:0] +:address-61 - [0:0] +:address-62 - [0:0] +:address-63 - [0:0] +:address-64 - [0:0] +:address-65 - [0:0] +:address-66 - [0:0] +:address-67 - [0:0] +:address-68 - [0:0] +:address-69 - [0:0] +:address-7 - [0:0] +:address-70 - [0:0] +:address-71 - [0:0] +:address-72 - [0:0] +:address-73 - [0:0] +:address-74 - [0:0] +:address-75 - [0:0] +:address-76 - [0:0] +:address-77 - [0:0] +:address-78 - [0:0] +:address-79 - [0:0] +:address-8 - [0:0] +:address-80 - [0:0] +:address-81 - [0:0] +:address-82 - [0:0] +:address-83 - [0:0] +:address-84 - [0:0] +:address-85 - [0:0] +:address-86 - [0:0] +:address-87 - [0:0] +:address-88 - [0:0] +:address-89 - [0:0] +:address-9 - [0:0] +:address-90 - [0:0] +:address-91 - [0:0] +:address-92 - [0:0] +:address-93 - [0:0] +:address-94 - [0:0] +:address-95 - [0:0] +:address-96 - [0:0] +:address-97 - [0:0] +:address-98 - [0:0] +:address-99 - [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logaccept-1 - [0:0] +:logaccept-10 - [0:0] +:logaccept-11 - [0:0] +:logaccept-12 - [0:0] +:logaccept-13 - [0:0] +:logaccept-14 - [0:0] +:logaccept-15 - [0:0] +:logaccept-16 - [0:0] +:logaccept-17 - [0:0] +:logaccept-18 - [0:0] +:logaccept-19 - [0:0] +:logaccept-2 - [0:0] +:logaccept-20 - [0:0] +:logaccept-21 - [0:0] +:logaccept-22 - [0:0] +:logaccept-23 - [0:0] +:logaccept-24 - [0:0] +:logaccept-25 - [0:0] +:logaccept-26 - [0:0] +:logaccept-27 - [0:0] +:logaccept-28 - [0:0] +:logaccept-29 - [0:0] +:logaccept-3 - [0:0] +:logaccept-30 - [0:0] +:logaccept-31 - [0:0] +:logaccept-32 - [0:0] +:logaccept-33 - [0:0] +:logaccept-34 - [0:0] +:logaccept-35 - [0:0] +:logaccept-36 - [0:0] +:logaccept-37 - [0:0] +:logaccept-38 - [0:0] +:logaccept-39 - [0:0] +:logaccept-4 - [0:0] +:logaccept-40 - [0:0] +:logaccept-41 - [0:0] +:logaccept-42 - [0:0] +:logaccept-43 - [0:0] +:logaccept-44 - [0:0] +:logaccept-45 - [0:0] +:logaccept-46 - [0:0] +:logaccept-47 - [0:0] +:logaccept-48 - [0:0] +:logaccept-49 - [0:0] +:logaccept-5 - [0:0] +:logaccept-50 - [0:0] +:logaccept-51 - [0:0] +:logaccept-52 - [0:0] +:logaccept-53 - [0:0] +:logaccept-54 - [0:0] +:logaccept-55 - [0:0] +:logaccept-56 - [0:0] +:logaccept-57 - [0:0] +:logaccept-58 - [0:0] +:logaccept-59 - [0:0] +:logaccept-6 - [0:0] +:logaccept-60 - [0:0] +:logaccept-61 - [0:0] +:logaccept-62 - [0:0] +:logaccept-63 - [0:0] +:logaccept-7 - [0:0] +:logaccept-8 - [0:0] +:logaccept-9 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-10 - [0:0] +:logpass-11 - [0:0] +:logpass-12 - [0:0] +:logpass-13 - [0:0] +:logpass-14 - [0:0] +:logpass-15 - [0:0] +:logpass-16 - [0:0] +:logpass-17 - [0:0] +:logpass-18 - [0:0] +:logpass-19 - [0:0] +:logpass-2 - [0:0] +:logpass-20 - [0:0] +:logpass-21 - [0:0] +:logpass-22 - [0:0] +:logpass-23 - [0:0] +:logpass-24 - [0:0] +:logpass-25 - [0:0] +:logpass-26 - [0:0] +:logpass-27 - [0:0] +:logpass-28 - [0:0] +:logpass-29 - [0:0] +:logpass-3 - [0:0] +:logpass-30 - [0:0] +:logpass-31 - [0:0] +:logpass-32 - [0:0] +:logpass-33 - [0:0] +:logpass-34 - [0:0] +:logpass-35 - [0:0] +:logpass-36 - [0:0] +:logpass-37 - [0:0] +:logpass-38 - [0:0] +:logpass-39 - [0:0] +:logpass-4 - [0:0] +:logpass-40 - [0:0] +:logpass-41 - [0:0] +:logpass-42 - [0:0] +:logpass-43 - [0:0] +:logpass-44 - [0:0] +:logpass-45 - [0:0] +:logpass-46 - [0:0] +:logpass-47 - [0:0] +:logpass-48 - [0:0] +:logpass-49 - [0:0] +:logpass-5 - [0:0] +:logpass-50 - [0:0] +:logpass-6 - [0:0] +:logpass-7 - [0:0] +:logpass-8 - [0:0] +:logpass-9 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logpass-0 +-A FORWARD -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -d 172.16.0.0/16 +-A FORWARD -d 172.16.0.0/16 -j logaccept-1 +-A FORWARD -d 172.16.0.0/16 -j logpass-1 +-A FORWARD -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -d 172.16.0.0/16 +-A FORWARD -d 172.16.2.0/16 +-A FORWARD -d 172.16.0.0/16 -j logaccept-2 +-A FORWARD -d 172.16.2.0/16 -j logaccept-2 +-A FORWARD -d 172.16.0.0/16 -j logpass-2 +-A FORWARD -d 172.16.2.0/16 -j logpass-2 +-A FORWARD -s 10.0.0.1 -j ACCEPT +-A FORWARD -s 10.0.0.1 +-A FORWARD -s 10.0.0.1 -j logaccept-3 +-A FORWARD -s 10.0.0.1 -j logpass-3 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A FORWARD -s 10.0.0.1 -j ACCEPT +-A FORWARD -s 10.0.0.2 -j ACCEPT +-A FORWARD -s 10.0.0.1 +-A FORWARD -s 10.0.0.2 +-A FORWARD -s 10.0.0.1 -j logaccept-6 +-A FORWARD -s 10.0.0.2 -j logaccept-6 +-A FORWARD -s 10.0.0.1 -j logpass-6 +-A FORWARD -s 10.0.0.2 -j logpass-6 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j logpass-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth0 +-A FORWARD -i eth0 -j logaccept-18 +-A FORWARD -i eth0 -j logpass-16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.0.0/16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-17 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.0.0/16 +-A FORWARD -i eth0 -d 172.16.2.0/16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 +-A FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-18 +-A FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-18 +-A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 +-A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 +-A FORWARD -i eth0 -s 10.0.0.1 -j logpass-19 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 +-A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 +-A FORWARD -i eth0 -s 10.0.0.2 +-A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 +-A FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 +-A FORWARD -i eth0 -s 10.0.0.1 -j logpass-22 +-A FORWARD -i eth0 -s 10.0.0.2 -j logpass-22 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-30 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 +-A FORWARD -i eth2 -s 10.1.0.0/12 +-A FORWARD -i eth3 -s 10.1.0.0/12 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-37 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-37 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-37 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-63 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-50 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmp -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logpass-0 +-A INPUT -d 172.16.0.0/16 -j ACCEPT +-A INPUT -d 172.16.0.0/16 +-A INPUT -d 172.16.0.0/16 -j logaccept-1 +-A INPUT -d 172.16.0.0/16 -j logpass-1 +-A INPUT -d 172.16.0.0/16 -j ACCEPT +-A INPUT -d 172.16.2.0/16 -j ACCEPT +-A INPUT -d 172.16.0.0/16 +-A INPUT -d 172.16.2.0/16 +-A INPUT -d 172.16.0.0/16 -j logaccept-2 +-A INPUT -d 172.16.2.0/16 -j logaccept-2 +-A INPUT -d 172.16.0.0/16 -j logpass-2 +-A INPUT -d 172.16.2.0/16 -j logpass-2 +-A INPUT -s 10.0.0.1 -j ACCEPT +-A INPUT -s 10.0.0.1 +-A INPUT -s 10.0.0.1 -j logaccept-3 +-A INPUT -s 10.0.0.1 -j logpass-3 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A INPUT -s 10.0.0.1 -j ACCEPT +-A INPUT -s 10.0.0.2 -j ACCEPT +-A INPUT -s 10.0.0.1 +-A INPUT -s 10.0.0.2 +-A INPUT -s 10.0.0.1 -j logaccept-6 +-A INPUT -s 10.0.0.2 -j logaccept-6 +-A INPUT -s 10.0.0.1 -j logpass-6 +-A INPUT -s 10.0.0.2 -j logpass-6 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A INPUT -i eth0 -j ACCEPT +-A INPUT -i eth0 +-A INPUT -i eth0 -j logaccept-18 +-A INPUT -i eth0 -j logpass-16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.0.0/16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-17 +-A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.0.0/16 +-A INPUT -i eth0 -d 172.16.2.0/16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 +-A INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-18 +-A INPUT -i eth0 -d 172.16.2.0/16 -j logpass-18 +-A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 +-A INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 +-A INPUT -i eth0 -s 10.0.0.1 -j logpass-19 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 +-A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 +-A INPUT -i eth0 -s 10.0.0.2 +-A INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 +-A INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 +-A INPUT -i eth0 -s 10.0.0.1 -j logpass-22 +-A INPUT -i eth0 -s 10.0.0.2 -j logpass-22 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 +-A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-30 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-48 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-49 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-50 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-51 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-52 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-53 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-54 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-55 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-56 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-57 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-58 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-59 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-60 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-61 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-62 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-63 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-64 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-65 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-66 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-67 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-68 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-69 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-70 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-71 +-A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 +-A INPUT -i eth2 -s 10.1.0.0/12 +-A INPUT -i eth3 -s 10.1.0.0/12 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 +-A INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 +-A INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-37 +-A INPUT -i eth2 -s 10.1.0.0/12 -j logpass-37 +-A INPUT -i eth3 -s 10.1.0.0/12 -j logpass-37 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-72 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-72 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-72 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-73 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-73 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-73 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-74 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-74 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-74 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-75 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-75 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-75 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-76 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-76 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-76 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-77 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-77 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-77 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-78 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-78 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-78 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-79 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-79 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-79 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-80 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-80 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-80 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-81 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-81 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-81 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-82 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-82 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-82 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-83 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-83 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-83 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-84 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-84 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-84 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-85 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-85 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-85 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-86 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-86 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-86 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-87 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-87 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-87 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-88 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-88 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-88 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-89 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-89 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-89 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-90 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-90 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-90 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-91 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-91 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-91 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-92 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-92 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-92 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-93 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-93 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-93 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-94 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-94 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-94 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-95 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-95 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-95 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-63 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-50 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logpass-0 +-A OUTPUT -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -d 172.16.0.0/16 +-A OUTPUT -d 172.16.0.0/16 -j logaccept-1 +-A OUTPUT -d 172.16.0.0/16 -j logpass-1 +-A OUTPUT -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -d 172.16.0.0/16 +-A OUTPUT -d 172.16.2.0/16 +-A OUTPUT -d 172.16.0.0/16 -j logaccept-2 +-A OUTPUT -d 172.16.2.0/16 -j logaccept-2 +-A OUTPUT -d 172.16.0.0/16 -j logpass-2 +-A OUTPUT -d 172.16.2.0/16 -j logpass-2 +-A OUTPUT -s 10.0.0.1 -j ACCEPT +-A OUTPUT -s 10.0.0.1 +-A OUTPUT -s 10.0.0.1 -j logaccept-3 +-A OUTPUT -s 10.0.0.1 -j logpass-3 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A OUTPUT -s 10.0.0.1 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -j ACCEPT +-A OUTPUT -s 10.0.0.1 +-A OUTPUT -s 10.0.0.2 +-A OUTPUT -s 10.0.0.1 -j logaccept-6 +-A OUTPUT -s 10.0.0.2 -j logaccept-6 +-A OUTPUT -s 10.0.0.1 -j logpass-6 +-A OUTPUT -s 10.0.0.2 -j logpass-6 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j logpass-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-63 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A address-0 -d 172.16.0.0/16 -j ACCEPT +-A address-1 -d 172.16.0.0/16 +-A address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 +-A address-100 -d 172.16.0.0/16 -j ACCEPT +-A address-100 -d 172.16.2.0/16 -j ACCEPT +-A address-101 -d 172.16.0.0/16 +-A address-101 -d 172.16.2.0/16 +-A address-102 -d 172.16.0.0/16 -j logaccept-56 +-A address-102 -d 172.16.2.0/16 -j logaccept-56 +-A address-103 -d 172.16.0.0/16 -j logpass-45 +-A address-103 -d 172.16.2.0/16 -j logpass-45 +-A address-104 -s 10.0.0.1 -j ACCEPT +-A address-105 -s 10.0.0.1 +-A address-106 -s 10.0.0.1 -j logaccept-57 +-A address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-109 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 +-A address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-113 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-113 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 +-A address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 +-A address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-46 +-A address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-46 +-A address-116 -s 10.0.0.1 -j ACCEPT +-A address-116 -s 10.0.0.2 -j ACCEPT +-A address-117 -s 10.0.0.1 +-A address-117 -s 10.0.0.2 +-A address-118 -s 10.0.0.1 -j logaccept-60 +-A address-118 -s 10.0.0.2 -j logaccept-60 +-A address-119 -s 10.0.0.1 -j logpass-47 +-A address-119 -s 10.0.0.2 -j logpass-47 +-A address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-121 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-121 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 +-A address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 +-A address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-48 +-A address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-48 +-A address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-125 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-125 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-125 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-125 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 +-A address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-49 +-A address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-49 +-A address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-49 +-A address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-49 +-A address-13 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-13 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 +-A address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 +-A address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 +-A address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-12 +-A address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-17 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-17 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 +-A address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 +-A address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-14 +-A address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-14 +-A address-2 -d 172.16.0.0/16 -j logaccept-10 +-A address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-21 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-21 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-21 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-21 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 +-A address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 +-A address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 +-A address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-15 +-A address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-15 +-A address-24 -d 172.16.0.0/16 -j ACCEPT +-A address-25 -d 172.16.0.0/16 +-A address-26 -d 172.16.0.0/16 -j logaccept-28 +-A address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-28 -d 172.16.0.0/16 -j ACCEPT +-A address-28 -d 172.16.2.0/16 -j ACCEPT +-A address-29 -d 172.16.0.0/16 +-A address-29 -d 172.16.2.0/16 +-A address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-30 -d 172.16.0.0/16 -j logaccept-29 +-A address-30 -d 172.16.2.0/16 -j logaccept-29 +-A address-31 -d 172.16.0.0/16 -j logpass-25 +-A address-31 -d 172.16.2.0/16 -j logpass-25 +-A address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-33 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 +-A address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-37 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-37 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 +-A address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 +-A address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-26 +-A address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-26 +-A address-4 -d 172.16.0.0/16 -j ACCEPT +-A address-4 -d 172.16.2.0/16 -j ACCEPT +-A address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-41 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-41 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 +-A address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 +-A address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 +-A address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 +-A address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-45 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-45 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-45 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-45 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 +-A address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-29 +-A address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-29 +-A address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-29 +-A address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-29 +-A address-48 -s 10.0.0.1 -j ACCEPT +-A address-49 -s 10.0.0.1 +-A address-5 -d 172.16.0.0/16 +-A address-5 -d 172.16.2.0/16 +-A address-50 -s 10.0.0.1 -j logaccept-39 +-A address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-53 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 +-A address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-57 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-57 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 +-A address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 +-A address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-33 +-A address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-33 +-A address-6 -d 172.16.0.0/16 -j logaccept-11 +-A address-6 -d 172.16.2.0/16 -j logaccept-11 +-A address-60 -s 10.0.0.1 -j ACCEPT +-A address-60 -s 10.0.0.2 -j ACCEPT +-A address-61 -s 10.0.0.1 +-A address-61 -s 10.0.0.2 +-A address-62 -s 10.0.0.1 -j logaccept-42 +-A address-62 -s 10.0.0.2 -j logaccept-42 +-A address-63 -s 10.0.0.1 -j logpass-34 +-A address-63 -s 10.0.0.2 -j logpass-34 +-A address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-65 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-65 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 +-A address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 +-A address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 +-A address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 +-A address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-69 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-69 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-69 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-69 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-7 -d 172.16.0.0/16 -j logpass-10 +-A address-7 -d 172.16.2.0/16 -j logpass-10 +-A address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 +-A address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-36 +-A address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-36 +-A address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-36 +-A address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-36 +-A address-72 -s 10.0.0.1 -j ACCEPT +-A address-73 -s 10.0.0.1 +-A address-74 -s 10.0.0.1 -j logaccept-48 +-A address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-77 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 +-A address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-81 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-81 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 +-A address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 +-A address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 +-A address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-40 +-A address-84 -s 10.0.0.1 -j ACCEPT +-A address-84 -s 10.0.0.2 -j ACCEPT +-A address-85 -s 10.0.0.1 +-A address-85 -s 10.0.0.2 +-A address-86 -s 10.0.0.1 -j logaccept-51 +-A address-86 -s 10.0.0.2 -j logaccept-51 +-A address-87 -s 10.0.0.1 -j logpass-41 +-A address-87 -s 10.0.0.2 -j logpass-41 +-A address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-89 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-89 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-9 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 +-A address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 +-A address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-42 +-A address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-42 +-A address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-93 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-93 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-93 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-93 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 +-A address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-43 +-A address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-43 +-A address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-43 +-A address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-43 +-A address-96 -d 172.16.0.0/16 -j ACCEPT +-A address-97 -d 172.16.0.0/16 +-A address-98 -d 172.16.0.0/16 -j logaccept-55 +-A address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logaccept-1 -m limit --limit 1/second -j LOG +-A logaccept-1 -j ACCEPT +-A logaccept-10 -m limit --limit 1/second -j LOG +-A logaccept-10 -j ACCEPT +-A logaccept-11 -m limit --limit 1/second -j LOG +-A logaccept-11 -j ACCEPT +-A logaccept-12 -m limit --limit 1/second -j LOG +-A logaccept-12 -j ACCEPT +-A logaccept-13 -m limit --limit 1/second -j LOG +-A logaccept-13 -j ACCEPT +-A logaccept-14 -m limit --limit 1/second -j LOG +-A logaccept-14 -j ACCEPT +-A logaccept-15 -m limit --limit 1/second -j LOG +-A logaccept-15 -j ACCEPT +-A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j ACCEPT +-A logaccept-17 -m limit --limit 1/second -j LOG +-A logaccept-17 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-19 -m limit --limit 1/second -j LOG +-A logaccept-19 -j ACCEPT +-A logaccept-2 -m limit --limit 1/second -j LOG +-A logaccept-2 -j ACCEPT +-A logaccept-20 -m limit --limit 1/second -j LOG +-A logaccept-20 -j ACCEPT +-A logaccept-21 -m limit --limit 1/second -j LOG +-A logaccept-21 -j ACCEPT +-A logaccept-22 -m limit --limit 1/second -j LOG +-A logaccept-22 -j ACCEPT +-A logaccept-23 -m limit --limit 1/second -j LOG +-A logaccept-23 -j ACCEPT +-A logaccept-24 -m limit --limit 1/second -j LOG +-A logaccept-24 -j ACCEPT +-A logaccept-25 -m limit --limit 1/second -j LOG +-A logaccept-25 -j ACCEPT +-A logaccept-26 -m limit --limit 1/second -j LOG +-A logaccept-26 -j ACCEPT +-A logaccept-27 -m limit --limit 1/second -j LOG +-A logaccept-27 -j ACCEPT +-A logaccept-28 -m limit --limit 1/second -j LOG +-A logaccept-28 -j ACCEPT +-A logaccept-29 -m limit --limit 1/second -j LOG +-A logaccept-29 -j ACCEPT +-A logaccept-3 -m limit --limit 1/second -j LOG +-A logaccept-3 -j ACCEPT +-A logaccept-30 -m limit --limit 1/second -j LOG +-A logaccept-30 -j ACCEPT +-A logaccept-31 -m limit --limit 1/second -j LOG +-A logaccept-31 -j ACCEPT +-A logaccept-32 -m limit --limit 1/second -j LOG +-A logaccept-32 -j ACCEPT +-A logaccept-33 -m limit --limit 1/second -j LOG +-A logaccept-33 -j ACCEPT +-A logaccept-34 -m limit --limit 1/second -j LOG +-A logaccept-34 -j ACCEPT +-A logaccept-35 -m limit --limit 1/second -j LOG +-A logaccept-35 -j ACCEPT +-A logaccept-36 -m limit --limit 1/second -j LOG +-A logaccept-36 -j ACCEPT +-A logaccept-37 -m limit --limit 1/second -j LOG +-A logaccept-37 -j ACCEPT +-A logaccept-38 -m limit --limit 1/second -j LOG +-A logaccept-38 -j ACCEPT +-A logaccept-39 -m limit --limit 1/second -j LOG +-A logaccept-39 -j ACCEPT +-A logaccept-4 -m limit --limit 1/second -j LOG +-A logaccept-4 -j ACCEPT +-A logaccept-40 -m limit --limit 1/second -j LOG +-A logaccept-40 -j ACCEPT +-A logaccept-41 -m limit --limit 1/second -j LOG +-A logaccept-41 -j ACCEPT +-A logaccept-42 -m limit --limit 1/second -j LOG +-A logaccept-42 -j ACCEPT +-A logaccept-43 -m limit --limit 1/second -j LOG +-A logaccept-43 -j ACCEPT +-A logaccept-44 -m limit --limit 1/second -j LOG +-A logaccept-44 -j ACCEPT +-A logaccept-45 -m limit --limit 1/second -j LOG +-A logaccept-45 -j ACCEPT +-A logaccept-46 -m limit --limit 1/second -j LOG +-A logaccept-46 -j ACCEPT +-A logaccept-47 -m limit --limit 1/second -j LOG +-A logaccept-47 -j ACCEPT +-A logaccept-48 -m limit --limit 1/second -j LOG +-A logaccept-48 -j ACCEPT +-A logaccept-49 -m limit --limit 1/second -j LOG +-A logaccept-49 -j ACCEPT +-A logaccept-5 -m limit --limit 1/second -j LOG +-A logaccept-5 -j ACCEPT +-A logaccept-50 -m limit --limit 1/second -j LOG +-A logaccept-50 -j ACCEPT +-A logaccept-51 -m limit --limit 1/second -j LOG +-A logaccept-51 -j ACCEPT +-A logaccept-52 -m limit --limit 1/second -j LOG +-A logaccept-52 -j ACCEPT +-A logaccept-53 -m limit --limit 1/second -j LOG +-A logaccept-53 -j ACCEPT +-A logaccept-54 -m limit --limit 1/second -j LOG +-A logaccept-54 -j ACCEPT +-A logaccept-55 -m limit --limit 1/second -j LOG +-A logaccept-55 -j ACCEPT +-A logaccept-56 -m limit --limit 1/second -j LOG +-A logaccept-56 -j ACCEPT +-A logaccept-57 -m limit --limit 1/second -j LOG +-A logaccept-57 -j ACCEPT +-A logaccept-58 -m limit --limit 1/second -j LOG +-A logaccept-58 -j ACCEPT +-A logaccept-59 -m limit --limit 1/second -j LOG +-A logaccept-59 -j ACCEPT +-A logaccept-6 -m limit --limit 1/second -j LOG +-A logaccept-6 -j ACCEPT +-A logaccept-60 -m limit --limit 1/second -j LOG +-A logaccept-60 -j ACCEPT +-A logaccept-61 -m limit --limit 1/second -j LOG +-A logaccept-61 -j ACCEPT +-A logaccept-62 -m limit --limit 1/second -j LOG +-A logaccept-62 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-7 -m limit --limit 1/second -j LOG +-A logaccept-7 -j ACCEPT +-A logaccept-8 -m limit --limit 1/second -j LOG +-A logaccept-8 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG +-A logaccept-9 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -m limit --limit 1/second -j LOG +-A logpass-10 -m limit --limit 1/second -j LOG +-A logpass-11 -m limit --limit 1/second -j LOG +-A logpass-12 -m limit --limit 1/second -j LOG +-A logpass-13 -m limit --limit 1/second -j LOG +-A logpass-14 -m limit --limit 1/second -j LOG +-A logpass-15 -m limit --limit 1/second -j LOG +-A logpass-16 -m limit --limit 1/second -j LOG +-A logpass-17 -m limit --limit 1/second -j LOG +-A logpass-18 -m limit --limit 1/second -j LOG +-A logpass-19 -m limit --limit 1/second -j LOG +-A logpass-2 -m limit --limit 1/second -j LOG +-A logpass-20 -m limit --limit 1/second -j LOG +-A logpass-21 -m limit --limit 1/second -j LOG +-A logpass-22 -m limit --limit 1/second -j LOG +-A logpass-23 -m limit --limit 1/second -j LOG +-A logpass-24 -m limit --limit 1/second -j LOG +-A logpass-25 -m limit --limit 1/second -j LOG +-A logpass-26 -m limit --limit 1/second -j LOG +-A logpass-27 -m limit --limit 1/second -j LOG +-A logpass-28 -m limit --limit 1/second -j LOG +-A logpass-29 -m limit --limit 1/second -j LOG +-A logpass-3 -m limit --limit 1/second -j LOG +-A logpass-30 -m limit --limit 1/second -j LOG +-A logpass-31 -m limit --limit 1/second -j LOG +-A logpass-32 -m limit --limit 1/second -j LOG +-A logpass-33 -m limit --limit 1/second -j LOG +-A logpass-34 -m limit --limit 1/second -j LOG +-A logpass-35 -m limit --limit 1/second -j LOG +-A logpass-36 -m limit --limit 1/second -j LOG +-A logpass-37 -m limit --limit 1/second -j LOG +-A logpass-38 -m limit --limit 1/second -j LOG +-A logpass-39 -m limit --limit 1/second -j LOG +-A logpass-4 -m limit --limit 1/second -j LOG +-A logpass-40 -m limit --limit 1/second -j LOG +-A logpass-41 -m limit --limit 1/second -j LOG +-A logpass-42 -m limit --limit 1/second -j LOG +-A logpass-43 -m limit --limit 1/second -j LOG +-A logpass-44 -m limit --limit 1/second -j LOG +-A logpass-45 -m limit --limit 1/second -j LOG +-A logpass-46 -m limit --limit 1/second -j LOG +-A logpass-47 -m limit --limit 1/second -j LOG +-A logpass-48 -m limit --limit 1/second -j LOG +-A logpass-49 -m limit --limit 1/second -j LOG +-A logpass-5 -m limit --limit 1/second -j LOG +-A logpass-50 -m limit --limit 1/second -j LOG +-A logpass-6 -m limit --limit 1/second -j LOG +-A logpass-7 -m limit --limit 1/second -j LOG +-A logpass-8 -m limit --limit 1/second -j LOG +-A logpass-9 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:FORWARD ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*nat +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +:awall-masquerade - [0:0] +-A INPUT -j MASQUERADE +-A OUTPUT -j REDIRECT +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE +-A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade +-A PREROUTING -i eth0 -j REDIRECT +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT +-A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT diff --git a/test/output/address/rules6-save b/test/output/address/rules6-save new file mode 100644 index 0000000..8612d82 --- /dev/null +++ b/test/output/address/rules6-save @@ -0,0 +1,189 @@ +# rules6-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logaccept-18 - [0:0] +:logaccept-27 - [0:0] +:logaccept-36 - [0:0] +:logaccept-45 - [0:0] +:logaccept-63 - [0:0] +:logaccept-9 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +:logpass-16 - [0:0] +:logpass-30 - [0:0] +:logpass-37 - [0:0] +:logpass-50 - [0:0] +:logpass-9 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logpass-0 +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 +-A FORWARD -o eth1 -d fc00::/7 -j logaccept-9 +-A FORWARD -o eth1 -d fc00::/7 -j logpass-9 +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth0 +-A FORWARD -i eth0 -j logaccept-18 +-A FORWARD -i eth0 -j logpass-16 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG +-A FORWARD -i eth1 -s fc00::/7 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 +-A FORWARD -i eth1 -s fc00::/7 -j logaccept-36 +-A FORWARD -i eth1 -s fc00::/7 -j logpass-30 +-A FORWARD -i eth1 -s fc00::/7 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 +-A FORWARD -i eth1 -s fc00::/7 -j logaccept-45 +-A FORWARD -i eth1 -s fc00::/7 -j logpass-37 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-63 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-50 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logpass-0 +-A INPUT -i eth0 -j ACCEPT +-A INPUT -i eth0 +-A INPUT -i eth0 -j logaccept-18 +-A INPUT -i eth0 -j logpass-16 +-A INPUT -i eth1 -s fc00::/7 -j ACCEPT +-A INPUT -i eth1 -s fc00::/7 +-A INPUT -i eth1 -s fc00::/7 -j logaccept-36 +-A INPUT -i eth1 -s fc00::/7 -j logpass-30 +-A INPUT -i eth1 -s fc00::/7 -j ACCEPT +-A INPUT -i eth1 -s fc00::/7 +-A INPUT -i eth1 -s fc00::/7 -j logaccept-45 +-A INPUT -i eth1 -s fc00::/7 -j logpass-37 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-63 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-50 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logpass-0 +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 +-A OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 +-A OUTPUT -o eth1 -d fc00::/7 -j logpass-9 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-63 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-27 -m limit --limit 1/second -j LOG +-A logaccept-27 -j ACCEPT +-A logaccept-36 -m limit --limit 1/second -j LOG +-A logaccept-36 -j ACCEPT +-A logaccept-45 -m limit --limit 1/second -j LOG +-A logaccept-45 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG +-A logaccept-9 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-16 -m limit --limit 1/second -j LOG +-A logpass-30 -m limit --limit 1/second -j LOG +-A logpass-37 -m limit --limit 1/second -j LOG +-A logpass-50 -m limit --limit 1/second -j LOG +-A logpass-9 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT diff --git a/test/output/dump b/test/output/dump deleted file mode 100644 index 57eccbb..0000000 --- a/test/output/dump +++ /dev/null @@ -1,43304 +0,0 @@ -Dnat 1 {"in":["_fw","A"]} -(zone) - inet/nat/OUTPUT -j REDIRECT - inet/nat/PREROUTING -i eth0 -j REDIRECT - -Dnat 2 {"in":"B"} -(zone) - inet/nat/PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT - - -Filter 1 {} -(address) - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 2 {"action":"pass"} -(address) - inet/filter/FORWARD - inet6/filter/FORWARD - inet/filter/INPUT - inet6/filter/INPUT - inet/filter/OUTPUT - inet6/filter/OUTPUT - -Filter 3 {"log":true} -(address) - inet/filter/FORWARD -j logaccept-0 - inet6/filter/FORWARD -j logaccept-0 - inet/filter/INPUT -j logaccept-0 - inet6/filter/INPUT -j logaccept-0 - inet/filter/OUTPUT -j logaccept-0 - inet6/filter/OUTPUT -j logaccept-0 - inet/filter/logaccept-0 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG - inet/filter/logaccept-0 -j ACCEPT - inet6/filter/logaccept-0 -j ACCEPT - -Filter 4 {"action":"pass","log":true} -(address) - inet/filter/FORWARD -j logpass-0 - inet6/filter/FORWARD -j logpass-0 - inet/filter/INPUT -j logpass-0 - inet6/filter/INPUT -j logpass-0 - inet/filter/OUTPUT -j logpass-0 - inet6/filter/OUTPUT -j logpass-0 - inet/filter/logpass-0 -m limit --limit 1/second -j LOG - inet6/filter/logpass-0 -m limit --limit 1/second -j LOG - -Filter 5 {"dest":"172.16.0.0\/16"} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -d 172.16.0.0/16 -j ACCEPT - -Filter 6 {"action":"pass","dest":"172.16.0.0\/16"} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 - inet/filter/INPUT -d 172.16.0.0/16 - inet/filter/OUTPUT -d 172.16.0.0/16 - -Filter 7 {"dest":"172.16.0.0\/16","log":true} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 -j logaccept-1 - inet/filter/INPUT -d 172.16.0.0/16 -j logaccept-1 - inet/filter/OUTPUT -d 172.16.0.0/16 -j logaccept-1 - inet/filter/logaccept-1 -m limit --limit 1/second -j LOG - inet/filter/logaccept-1 -j ACCEPT - -Filter 8 {"action":"pass","dest":"172.16.0.0\/16","log":true} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 -j logpass-1 - inet/filter/INPUT -d 172.16.0.0/16 -j logpass-1 - inet/filter/OUTPUT -d 172.16.0.0/16 -j logpass-1 - inet/filter/logpass-1 -m limit --limit 1/second -j LOG - -Filter 9 {"dest":["172.16.0.0\/16","172.16.2.0\/16"]} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -d 172.16.2.0/16 -j ACCEPT - inet/filter/OUTPUT -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -d 172.16.2.0/16 -j ACCEPT - -Filter 10 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"]} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 - inet/filter/INPUT -d 172.16.0.0/16 - inet/filter/FORWARD -d 172.16.2.0/16 - inet/filter/INPUT -d 172.16.2.0/16 - inet/filter/OUTPUT -d 172.16.0.0/16 - inet/filter/OUTPUT -d 172.16.2.0/16 - -Filter 11 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 -j logaccept-2 - inet/filter/INPUT -d 172.16.0.0/16 -j logaccept-2 - inet/filter/FORWARD -d 172.16.2.0/16 -j logaccept-2 - inet/filter/INPUT -d 172.16.2.0/16 -j logaccept-2 - inet/filter/OUTPUT -d 172.16.0.0/16 -j logaccept-2 - inet/filter/OUTPUT -d 172.16.2.0/16 -j logaccept-2 - inet/filter/logaccept-2 -m limit --limit 1/second -j LOG - inet/filter/logaccept-2 -j ACCEPT - -Filter 12 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 -j logpass-2 - inet/filter/INPUT -d 172.16.0.0/16 -j logpass-2 - inet/filter/FORWARD -d 172.16.2.0/16 -j logpass-2 - inet/filter/INPUT -d 172.16.2.0/16 -j logpass-2 - inet/filter/OUTPUT -d 172.16.0.0/16 -j logpass-2 - inet/filter/OUTPUT -d 172.16.2.0/16 -j logpass-2 - inet/filter/logpass-2 -m limit --limit 1/second -j LOG - -Filter 13 {"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -j ACCEPT - -Filter 14 {"action":"pass","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 - inet/filter/INPUT -s 10.0.0.1 - inet/filter/OUTPUT -s 10.0.0.1 - -Filter 15 {"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -j logaccept-3 - inet/filter/INPUT -s 10.0.0.1 -j logaccept-3 - inet/filter/OUTPUT -s 10.0.0.1 -j logaccept-3 - inet/filter/logaccept-3 -m limit --limit 1/second -j LOG - inet/filter/logaccept-3 -j ACCEPT - -Filter 16 {"action":"pass","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -j logpass-3 - inet/filter/INPUT -s 10.0.0.1 -j logpass-3 - inet/filter/OUTPUT -s 10.0.0.1 -j logpass-3 - inet/filter/logpass-3 -m limit --limit 1/second -j LOG - -Filter 17 {"dest":"172.16.0.0\/16","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - -Filter 18 {"action":"pass","dest":"172.16.0.0\/16","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 - -Filter 19 {"dest":"172.16.0.0\/16","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 - inet/filter/logaccept-4 -m limit --limit 1/second -j LOG - inet/filter/logaccept-4 -j ACCEPT - -Filter 20 {"action":"pass","dest":"172.16.0.0\/16","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 - inet/filter/logpass-4 -m limit --limit 1/second -j LOG - -Filter 21 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - -Filter 22 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 - -Filter 23 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 - inet/filter/logaccept-5 -m limit --limit 1/second -j LOG - inet/filter/logaccept-5 -j ACCEPT - -Filter 24 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 - inet/filter/logpass-5 -m limit --limit 1/second -j LOG - -Filter 25 {"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -j ACCEPT - inet/filter/FORWARD -s 10.0.0.2 -j ACCEPT - inet/filter/INPUT -s 10.0.0.2 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.2 -j ACCEPT - -Filter 26 {"action":"pass","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 - inet/filter/INPUT -s 10.0.0.1 - inet/filter/FORWARD -s 10.0.0.2 - inet/filter/INPUT -s 10.0.0.2 - inet/filter/OUTPUT -s 10.0.0.1 - inet/filter/OUTPUT -s 10.0.0.2 - -Filter 27 {"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -j logaccept-6 - inet/filter/INPUT -s 10.0.0.1 -j logaccept-6 - inet/filter/FORWARD -s 10.0.0.2 -j logaccept-6 - inet/filter/INPUT -s 10.0.0.2 -j logaccept-6 - inet/filter/OUTPUT -s 10.0.0.1 -j logaccept-6 - inet/filter/OUTPUT -s 10.0.0.2 -j logaccept-6 - inet/filter/logaccept-6 -m limit --limit 1/second -j LOG - inet/filter/logaccept-6 -j ACCEPT - -Filter 28 {"action":"pass","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -j logpass-6 - inet/filter/INPUT -s 10.0.0.1 -j logpass-6 - inet/filter/FORWARD -s 10.0.0.2 -j logpass-6 - inet/filter/INPUT -s 10.0.0.2 -j logpass-6 - inet/filter/OUTPUT -s 10.0.0.1 -j logpass-6 - inet/filter/OUTPUT -s 10.0.0.2 -j logpass-6 - inet/filter/logpass-6 -m limit --limit 1/second -j LOG - -Filter 29 {"dest":"172.16.0.0\/16","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - -Filter 30 {"action":"pass","dest":"172.16.0.0\/16","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 - -Filter 31 {"dest":"172.16.0.0\/16","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 - inet/filter/logaccept-7 -m limit --limit 1/second -j LOG - inet/filter/logaccept-7 -j ACCEPT - -Filter 32 {"action":"pass","dest":"172.16.0.0\/16","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 - inet/filter/logpass-7 -m limit --limit 1/second -j LOG - -Filter 33 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - -Filter 34 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 - -Filter 35 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 - inet/filter/logaccept-8 -m limit --limit 1/second -j LOG - inet/filter/logaccept-8 -j ACCEPT - -Filter 36 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 - inet/filter/logpass-8 -m limit --limit 1/second -j LOG - -Filter 37 {"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT - -Filter 38 {"action":"pass","out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 - inet6/filter/FORWARD -o eth1 -d fc00::/7 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 - -Filter 39 {"log":true,"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j logaccept-9 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 - inet/filter/logaccept-9 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-9 -m limit --limit 1/second -j LOG - inet/filter/logaccept-9 -j ACCEPT - inet6/filter/logaccept-9 -j ACCEPT - -Filter 40 {"action":"pass","log":true,"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j logpass-9 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j logpass-9 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j logpass-9 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j logpass-9 - inet/filter/logpass-9 -m limit --limit 1/second -j LOG - inet6/filter/logpass-9 -m limit --limit 1/second -j LOG - -Filter 41 {"dest":"172.16.0.0\/16","out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 - inet/filter/address-0 -d 172.16.0.0/16 -j ACCEPT - -Filter 42 {"action":"pass","dest":"172.16.0.0\/16","out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 - inet/filter/address-1 -d 172.16.0.0/16 - -Filter 43 {"dest":"172.16.0.0\/16","log":true,"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 - inet/filter/address-2 -d 172.16.0.0/16 -j logaccept-10 - inet/filter/logaccept-10 -m limit --limit 1/second -j LOG - inet/filter/logaccept-10 -j ACCEPT - -Filter 44 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 - inet/filter/address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 45 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 - inet/filter/address-4 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-4 -d 172.16.2.0/16 -j ACCEPT - -Filter 46 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 - inet/filter/address-5 -d 172.16.0.0/16 - inet/filter/address-5 -d 172.16.2.0/16 - -Filter 47 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 - inet/filter/address-6 -d 172.16.0.0/16 -j logaccept-11 - inet/filter/address-6 -d 172.16.2.0/16 -j logaccept-11 - inet/filter/logaccept-11 -m limit --limit 1/second -j LOG - inet/filter/logaccept-11 -j ACCEPT - -Filter 48 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 - inet/filter/address-7 -d 172.16.0.0/16 -j logpass-10 - inet/filter/address-7 -d 172.16.2.0/16 -j logpass-10 - inet/filter/logpass-10 -m limit --limit 1/second -j LOG - -Filter 49 {"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT - -Filter 50 {"action":"pass","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 - -Filter 51 {"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 - inet/filter/logaccept-12 -m limit --limit 1/second -j LOG - inet/filter/logaccept-12 -j ACCEPT - -Filter 52 {"action":"pass","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 - inet/filter/logpass-11 -m limit --limit 1/second -j LOG - -Filter 53 {"dest":"172.16.0.0\/16","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 - inet/filter/address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - -Filter 54 {"action":"pass","dest":"172.16.0.0\/16","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 - inet/filter/address-9 -s 10.0.0.1 -d 172.16.0.0/16 - -Filter 55 {"dest":"172.16.0.0\/16","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 - inet/filter/address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 - inet/filter/logaccept-13 -m limit --limit 1/second -j LOG - inet/filter/logaccept-13 -j ACCEPT - -Filter 56 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 - inet/filter/address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 57 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 - inet/filter/address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - -Filter 58 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 - inet/filter/address-13 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-13 -s 10.0.0.1 -d 172.16.2.0/16 - -Filter 59 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 - inet/filter/address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 - inet/filter/address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 - inet/filter/logaccept-14 -m limit --limit 1/second -j LOG - inet/filter/logaccept-14 -j ACCEPT - -Filter 60 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 - inet/filter/address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 - inet/filter/address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-12 - inet/filter/logpass-12 -m limit --limit 1/second -j LOG - -Filter 61 {"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT - -Filter 62 {"action":"pass","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 - -Filter 63 {"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 - inet/filter/logaccept-15 -m limit --limit 1/second -j LOG - inet/filter/logaccept-15 -j ACCEPT - -Filter 64 {"action":"pass","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 - inet/filter/logpass-13 -m limit --limit 1/second -j LOG - -Filter 65 {"dest":"172.16.0.0\/16","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 - inet/filter/address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - -Filter 66 {"action":"pass","dest":"172.16.0.0\/16","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 - inet/filter/address-17 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-17 -s 10.0.0.2 -d 172.16.0.0/16 - -Filter 67 {"dest":"172.16.0.0\/16","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 - inet/filter/address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 - inet/filter/address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 - inet/filter/logaccept-16 -m limit --limit 1/second -j LOG - inet/filter/logaccept-16 -j ACCEPT - -Filter 68 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 - inet/filter/address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-14 - inet/filter/address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-14 - inet/filter/logpass-14 -m limit --limit 1/second -j LOG - -Filter 69 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 - inet/filter/address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - -Filter 70 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 - inet/filter/address-21 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-21 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/address-21 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/address-21 -s 10.0.0.2 -d 172.16.2.0/16 - -Filter 71 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 - inet/filter/address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 - inet/filter/address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 - inet/filter/address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 - inet/filter/address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 - inet/filter/logaccept-17 -m limit --limit 1/second -j LOG - inet/filter/logaccept-17 -j ACCEPT - -Filter 72 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 - inet/filter/address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 - inet/filter/address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 - inet/filter/address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-15 - inet/filter/address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-15 - inet/filter/logpass-15 -m limit --limit 1/second -j LOG - -Filter 73 {"in":"A"} -(address) - inet/filter/FORWARD -i eth0 -j ACCEPT - inet6/filter/FORWARD -i eth0 -j ACCEPT - inet/filter/INPUT -i eth0 -j ACCEPT - inet6/filter/INPUT -i eth0 -j ACCEPT - -Filter 74 {"action":"pass","in":"A"} -(address) - inet/filter/FORWARD -i eth0 - inet6/filter/FORWARD -i eth0 - inet/filter/INPUT -i eth0 - inet6/filter/INPUT -i eth0 - -Filter 75 {"in":"A","log":true} -(address) - inet/filter/FORWARD -i eth0 -j logaccept-18 - inet6/filter/FORWARD -i eth0 -j logaccept-18 - inet/filter/INPUT -i eth0 -j logaccept-18 - inet6/filter/INPUT -i eth0 -j logaccept-18 - inet/filter/logaccept-18 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-18 -m limit --limit 1/second -j LOG - inet/filter/logaccept-18 -j ACCEPT - inet6/filter/logaccept-18 -j ACCEPT - -Filter 76 {"action":"pass","in":"A","log":true} -(address) - inet/filter/FORWARD -i eth0 -j logpass-16 - inet6/filter/FORWARD -i eth0 -j logpass-16 - inet/filter/INPUT -i eth0 -j logpass-16 - inet6/filter/INPUT -i eth0 -j logpass-16 - inet/filter/logpass-16 -m limit --limit 1/second -j LOG - inet6/filter/logpass-16 -m limit --limit 1/second -j LOG - -Filter 77 {"dest":"172.16.0.0\/16","in":"A"} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT - -Filter 78 {"action":"pass","dest":"172.16.0.0\/16","in":"A"} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 - -Filter 79 {"dest":"172.16.0.0\/16","in":"A","log":true} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 - inet/filter/logaccept-19 -m limit --limit 1/second -j LOG - inet/filter/logaccept-19 -j ACCEPT - -Filter 80 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-17 - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logpass-17 - inet/filter/logpass-17 -m limit --limit 1/second -j LOG - -Filter 81 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A"} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT - -Filter 82 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A"} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 - inet/filter/INPUT -i eth0 -d 172.16.2.0/16 - -Filter 83 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 - inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 - inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 - inet/filter/logaccept-20 -m limit --limit 1/second -j LOG - inet/filter/logaccept-20 -j ACCEPT - -Filter 84 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-18 - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logpass-18 - inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-18 - inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j logpass-18 - inet/filter/logpass-18 -m limit --limit 1/second -j LOG - -Filter 85 {"in":"A","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -j ACCEPT - -Filter 86 {"action":"pass","in":"A","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 - inet/filter/INPUT -i eth0 -s 10.0.0.1 - -Filter 87 {"in":"A","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 - inet/filter/logaccept-21 -m limit --limit 1/second -j LOG - inet/filter/logaccept-21 -j ACCEPT - -Filter 88 {"action":"pass","in":"A","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logpass-19 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logpass-19 - inet/filter/logpass-19 -m limit --limit 1/second -j LOG - -Filter 89 {"dest":"172.16.0.0\/16","in":"A","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - -Filter 90 {"action":"pass","dest":"172.16.0.0\/16","in":"A","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - -Filter 91 {"dest":"172.16.0.0\/16","in":"A","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 - inet/filter/logaccept-22 -m limit --limit 1/second -j LOG - inet/filter/logaccept-22 -j ACCEPT - -Filter 92 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 - inet/filter/logpass-20 -m limit --limit 1/second -j LOG - -Filter 93 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - -Filter 94 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 - -Filter 95 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 - inet/filter/logaccept-23 -m limit --limit 1/second -j LOG - inet/filter/logaccept-23 -j ACCEPT - -Filter 96 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 - inet/filter/logpass-21 -m limit --limit 1/second -j LOG - -Filter 97 {"in":"A","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -j ACCEPT - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.2 -j ACCEPT - -Filter 98 {"action":"pass","in":"A","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 - inet/filter/INPUT -i eth0 -s 10.0.0.1 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 - inet/filter/INPUT -i eth0 -s 10.0.0.2 - -Filter 99 {"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 - inet/filter/logaccept-24 -m limit --limit 1/second -j LOG - inet/filter/logaccept-24 -j ACCEPT - -Filter 100 {"action":"pass","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logpass-22 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logpass-22 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j logpass-22 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -j logpass-22 - inet/filter/logpass-22 -m limit --limit 1/second -j LOG - -Filter 101 {"dest":"172.16.0.0\/16","in":"A","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - -Filter 102 {"action":"pass","dest":"172.16.0.0\/16","in":"A","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 - -Filter 103 {"dest":"172.16.0.0\/16","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 - inet/filter/logaccept-25 -m limit --limit 1/second -j LOG - inet/filter/logaccept-25 -j ACCEPT - -Filter 104 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 - inet/filter/logpass-23 -m limit --limit 1/second -j LOG - -Filter 105 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - -Filter 106 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 - -Filter 107 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 - inet/filter/logaccept-26 -m limit --limit 1/second -j LOG - inet/filter/logaccept-26 -j ACCEPT - -Filter 108 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 - inet/filter/logpass-24 -m limit --limit 1/second -j LOG - -Filter 109 {"in":"A","out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT - -Filter 110 {"action":"pass","in":"A","out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 - inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 - -Filter 111 {"in":"A","log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 - inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 - inet/filter/logaccept-27 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-27 -m limit --limit 1/second -j LOG - inet/filter/logaccept-27 -j ACCEPT - inet6/filter/logaccept-27 -j ACCEPT - -Filter 112 {"action":"pass","in":"A","log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG - -Filter 113 {"dest":"172.16.0.0\/16","in":"A","out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 - inet/filter/address-24 -d 172.16.0.0/16 -j ACCEPT - -Filter 114 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 - inet/filter/address-25 -d 172.16.0.0/16 - -Filter 115 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 - inet/filter/address-26 -d 172.16.0.0/16 -j logaccept-28 - inet/filter/logaccept-28 -m limit --limit 1/second -j LOG - inet/filter/logaccept-28 -j ACCEPT - -Filter 116 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 - inet/filter/address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 117 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 - inet/filter/address-28 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-28 -d 172.16.2.0/16 -j ACCEPT - -Filter 118 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 - inet/filter/address-29 -d 172.16.0.0/16 - inet/filter/address-29 -d 172.16.2.0/16 - -Filter 119 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 - inet/filter/address-30 -d 172.16.0.0/16 -j logaccept-29 - inet/filter/address-30 -d 172.16.2.0/16 -j logaccept-29 - inet/filter/logaccept-29 -m limit --limit 1/second -j LOG - inet/filter/logaccept-29 -j ACCEPT - -Filter 120 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 - inet/filter/address-31 -d 172.16.0.0/16 -j logpass-25 - inet/filter/address-31 -d 172.16.2.0/16 -j logpass-25 - inet/filter/logpass-25 -m limit --limit 1/second -j LOG - -Filter 121 {"in":"A","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT - -Filter 122 {"action":"pass","in":"A","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 - -Filter 123 {"in":"A","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 - inet/filter/logaccept-30 -m limit --limit 1/second -j LOG - inet/filter/logaccept-30 -j ACCEPT - -Filter 124 {"action":"pass","in":"A","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG - -Filter 125 {"dest":"172.16.0.0\/16","in":"A","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 - inet/filter/address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - -Filter 126 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 - inet/filter/address-33 -s 10.0.0.1 -d 172.16.0.0/16 - -Filter 127 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 - inet/filter/address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 - inet/filter/logaccept-31 -m limit --limit 1/second -j LOG - inet/filter/logaccept-31 -j ACCEPT - -Filter 128 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 - inet/filter/address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 129 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 - inet/filter/address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - -Filter 130 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 - inet/filter/address-37 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-37 -s 10.0.0.1 -d 172.16.2.0/16 - -Filter 131 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 - inet/filter/address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 - inet/filter/address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 - inet/filter/logaccept-32 -m limit --limit 1/second -j LOG - inet/filter/logaccept-32 -j ACCEPT - -Filter 132 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 - inet/filter/address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-26 - inet/filter/address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-26 - inet/filter/logpass-26 -m limit --limit 1/second -j LOG - -Filter 133 {"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT - -Filter 134 {"action":"pass","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 - -Filter 135 {"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 - inet/filter/logaccept-33 -m limit --limit 1/second -j LOG - inet/filter/logaccept-33 -j ACCEPT - -Filter 136 {"action":"pass","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-27 - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-27 - inet/filter/logpass-27 -m limit --limit 1/second -j LOG - -Filter 137 {"dest":"172.16.0.0\/16","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 - inet/filter/address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - -Filter 138 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 - inet/filter/address-41 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-41 -s 10.0.0.2 -d 172.16.0.0/16 - -Filter 139 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 - inet/filter/address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 - inet/filter/address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 - inet/filter/logaccept-34 -m limit --limit 1/second -j LOG - inet/filter/logaccept-34 -j ACCEPT - -Filter 140 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 - inet/filter/address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 - inet/filter/address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 - inet/filter/logpass-28 -m limit --limit 1/second -j LOG - -Filter 141 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 - inet/filter/address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - -Filter 142 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 - inet/filter/address-45 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-45 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/address-45 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/address-45 -s 10.0.0.2 -d 172.16.2.0/16 - -Filter 143 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 - inet/filter/address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 - inet/filter/address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 - inet/filter/address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 - inet/filter/address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 - inet/filter/logaccept-35 -m limit --limit 1/second -j LOG - inet/filter/logaccept-35 -j ACCEPT - -Filter 144 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 - inet/filter/address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-29 - inet/filter/address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-29 - inet/filter/address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-29 - inet/filter/address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-29 - inet/filter/logpass-29 -m limit --limit 1/second -j LOG - -Filter 145 {"in":"B"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT - inet6/filter/FORWARD -i eth1 -s fc00::/7 -j ACCEPT - inet6/filter/INPUT -i eth1 -s fc00::/7 -j ACCEPT - -Filter 146 {"action":"pass","in":"B"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 - inet6/filter/FORWARD -i eth1 -s fc00::/7 - inet6/filter/INPUT -i eth1 -s fc00::/7 - -Filter 147 {"in":"B","log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 - inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logaccept-36 - inet6/filter/INPUT -i eth1 -s fc00::/7 -j logaccept-36 - inet/filter/logaccept-36 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-36 -m limit --limit 1/second -j LOG - inet/filter/logaccept-36 -j ACCEPT - inet6/filter/logaccept-36 -j ACCEPT - -Filter 148 {"action":"pass","in":"B","log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-30 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logpass-30 - inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logpass-30 - inet6/filter/INPUT -i eth1 -s fc00::/7 -j logpass-30 - inet/filter/logpass-30 -m limit --limit 1/second -j LOG - inet6/filter/logpass-30 -m limit --limit 1/second -j LOG - -Filter 149 {"dest":"172.16.0.0\/16","in":"B"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - -Filter 150 {"action":"pass","dest":"172.16.0.0\/16","in":"B"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - -Filter 151 {"dest":"172.16.0.0\/16","in":"B","log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 - inet/filter/logaccept-37 -m limit --limit 1/second -j LOG - inet/filter/logaccept-37 -j ACCEPT - -Filter 152 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 - inet/filter/logpass-31 -m limit --limit 1/second -j LOG - -Filter 153 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT - -Filter 154 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 - -Filter 155 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 - inet/filter/logaccept-38 -m limit --limit 1/second -j LOG - inet/filter/logaccept-38 -j ACCEPT - -Filter 156 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 - inet/filter/logpass-32 -m limit --limit 1/second -j LOG - -Filter 157 {"in":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-48 - inet/filter/address-48 -s 10.0.0.1 -j ACCEPT - -Filter 158 {"action":"pass","in":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-49 - inet/filter/address-49 -s 10.0.0.1 - -Filter 159 {"in":"B","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-50 - inet/filter/address-50 -s 10.0.0.1 -j logaccept-39 - inet/filter/logaccept-39 -m limit --limit 1/second -j LOG - inet/filter/logaccept-39 -j ACCEPT - -Filter 160 {"action":"pass","in":"B","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-51 - inet/filter/address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG - -Filter 161 {"dest":"172.16.0.0\/16","in":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-52 - inet/filter/address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - -Filter 162 {"action":"pass","dest":"172.16.0.0\/16","in":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-53 - inet/filter/address-53 -s 10.0.0.1 -d 172.16.0.0/16 - -Filter 163 {"dest":"172.16.0.0\/16","in":"B","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-54 - inet/filter/address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 - inet/filter/logaccept-40 -m limit --limit 1/second -j LOG - inet/filter/logaccept-40 -j ACCEPT - -Filter 164 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-55 - inet/filter/address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 165 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-56 - inet/filter/address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - -Filter 166 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-57 - inet/filter/address-57 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-57 -s 10.0.0.1 -d 172.16.2.0/16 - -Filter 167 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-58 - inet/filter/address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 - inet/filter/address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 - inet/filter/logaccept-41 -m limit --limit 1/second -j LOG - inet/filter/logaccept-41 -j ACCEPT - -Filter 168 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-59 - inet/filter/address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-33 - inet/filter/address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-33 - inet/filter/logpass-33 -m limit --limit 1/second -j LOG - -Filter 169 {"in":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-60 - inet/filter/address-60 -s 10.0.0.1 -j ACCEPT - inet/filter/address-60 -s 10.0.0.2 -j ACCEPT - -Filter 170 {"action":"pass","in":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-61 - inet/filter/address-61 -s 10.0.0.1 - inet/filter/address-61 -s 10.0.0.2 - -Filter 171 {"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-62 - inet/filter/address-62 -s 10.0.0.1 -j logaccept-42 - inet/filter/address-62 -s 10.0.0.2 -j logaccept-42 - inet/filter/logaccept-42 -m limit --limit 1/second -j LOG - inet/filter/logaccept-42 -j ACCEPT - -Filter 172 {"action":"pass","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-63 - inet/filter/address-63 -s 10.0.0.1 -j logpass-34 - inet/filter/address-63 -s 10.0.0.2 -j logpass-34 - inet/filter/logpass-34 -m limit --limit 1/second -j LOG - -Filter 173 {"dest":"172.16.0.0\/16","in":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-64 - inet/filter/address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - -Filter 174 {"action":"pass","dest":"172.16.0.0\/16","in":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-65 - inet/filter/address-65 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-65 -s 10.0.0.2 -d 172.16.0.0/16 - -Filter 175 {"dest":"172.16.0.0\/16","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-66 - inet/filter/address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 - inet/filter/address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 - inet/filter/logaccept-43 -m limit --limit 1/second -j LOG - inet/filter/logaccept-43 -j ACCEPT - -Filter 176 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-67 - inet/filter/address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 - inet/filter/address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 - inet/filter/logpass-35 -m limit --limit 1/second -j LOG - -Filter 177 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-68 - inet/filter/address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - -Filter 178 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-69 - inet/filter/address-69 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-69 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/address-69 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/address-69 -s 10.0.0.2 -d 172.16.2.0/16 - -Filter 179 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-70 - inet/filter/address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 - inet/filter/address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 - inet/filter/address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 - inet/filter/address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 - inet/filter/logaccept-44 -m limit --limit 1/second -j LOG - inet/filter/logaccept-44 -j ACCEPT - -Filter 180 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-71 - inet/filter/address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-36 - inet/filter/address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-36 - inet/filter/address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-36 - inet/filter/address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-36 - inet/filter/logpass-36 -m limit --limit 1/second -j LOG - -Filter 181 {"in":"B","out":"B"} -(address) - -Filter 182 {"action":"pass","in":"B","out":"B"} -(address) - -Filter 183 {"in":"B","log":true,"out":"B"} -(address) - -Filter 184 {"action":"pass","in":"B","log":true,"out":"B"} -(address) - -Filter 185 {"dest":"172.16.0.0\/16","in":"B","out":"B"} -(address) - -Filter 186 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B"} -(address) - -Filter 187 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B"} -(address) - -Filter 188 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B"} -(address) - -Filter 189 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B"} -(address) - -Filter 190 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B"} -(address) - -Filter 191 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B"} -(address) - -Filter 192 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B"} -(address) - -Filter 193 {"in":"B","out":"B","src":"10.0.0.1"} -(address) - -Filter 194 {"action":"pass","in":"B","out":"B","src":"10.0.0.1"} -(address) - -Filter 195 {"in":"B","log":true,"out":"B","src":"10.0.0.1"} -(address) - -Filter 196 {"action":"pass","in":"B","log":true,"out":"B","src":"10.0.0.1"} -(address) - -Filter 197 {"dest":"172.16.0.0\/16","in":"B","out":"B","src":"10.0.0.1"} -(address) - -Filter 198 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B","src":"10.0.0.1"} -(address) - -Filter 199 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":"10.0.0.1"} -(address) - -Filter 200 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":"10.0.0.1"} -(address) - -Filter 201 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":"10.0.0.1"} -(address) - -Filter 202 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":"10.0.0.1"} -(address) - -Filter 203 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":"10.0.0.1"} -(address) - -Filter 204 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":"10.0.0.1"} -(address) - -Filter 205 {"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 206 {"action":"pass","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 207 {"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 208 {"action":"pass","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 209 {"dest":"172.16.0.0\/16","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 210 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 211 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 212 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 213 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 214 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 215 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 216 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 217 {"in":["B","C"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT - inet6/filter/FORWARD -i eth1 -s fc00::/7 -j ACCEPT - inet6/filter/INPUT -i eth1 -s fc00::/7 -j ACCEPT - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT - -Filter 218 {"action":"pass","in":["B","C"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 - inet6/filter/FORWARD -i eth1 -s fc00::/7 - inet6/filter/INPUT -i eth1 -s fc00::/7 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 - -Filter 219 {"in":["B","C"],"log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 - inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logaccept-45 - inet6/filter/INPUT -i eth1 -s fc00::/7 -j logaccept-45 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 - inet/filter/logaccept-45 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-45 -m limit --limit 1/second -j LOG - inet/filter/logaccept-45 -j ACCEPT - inet6/filter/logaccept-45 -j ACCEPT - -Filter 220 {"action":"pass","in":["B","C"],"log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-37 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logpass-37 - inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logpass-37 - inet6/filter/INPUT -i eth1 -s fc00::/7 -j logpass-37 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-37 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j logpass-37 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-37 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j logpass-37 - inet/filter/logpass-37 -m limit --limit 1/second -j LOG - inet6/filter/logpass-37 -m limit --limit 1/second -j LOG - -Filter 221 {"dest":"172.16.0.0\/16","in":["B","C"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - -Filter 222 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 - -Filter 223 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 - inet/filter/logaccept-46 -m limit --limit 1/second -j LOG - inet/filter/logaccept-46 -j ACCEPT - -Filter 224 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 - inet/filter/logpass-38 -m limit --limit 1/second -j LOG - -Filter 225 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT - -Filter 226 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 - -Filter 227 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 - inet/filter/logaccept-47 -m limit --limit 1/second -j LOG - inet/filter/logaccept-47 -j ACCEPT - -Filter 228 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 - inet/filter/logpass-39 -m limit --limit 1/second -j LOG - -Filter 229 {"in":["B","C"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-72 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-72 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-72 - inet/filter/address-72 -s 10.0.0.1 -j ACCEPT - -Filter 230 {"action":"pass","in":["B","C"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-73 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-73 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-73 - inet/filter/address-73 -s 10.0.0.1 - -Filter 231 {"in":["B","C"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-74 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-74 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-74 - inet/filter/address-74 -s 10.0.0.1 -j logaccept-48 - inet/filter/logaccept-48 -m limit --limit 1/second -j LOG - inet/filter/logaccept-48 -j ACCEPT - -Filter 232 {"action":"pass","in":["B","C"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-75 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-75 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-75 - inet/filter/address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG - -Filter 233 {"dest":"172.16.0.0\/16","in":["B","C"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-76 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-76 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-76 - inet/filter/address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - -Filter 234 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-77 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-77 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-77 - inet/filter/address-77 -s 10.0.0.1 -d 172.16.0.0/16 - -Filter 235 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-78 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-78 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-78 - inet/filter/address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 - inet/filter/logaccept-49 -m limit --limit 1/second -j LOG - inet/filter/logaccept-49 -j ACCEPT - -Filter 236 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-79 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-79 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-79 - inet/filter/address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 237 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-80 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-80 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-80 - inet/filter/address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - -Filter 238 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-81 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-81 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-81 - inet/filter/address-81 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-81 -s 10.0.0.1 -d 172.16.2.0/16 - -Filter 239 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-82 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-82 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-82 - inet/filter/address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 - inet/filter/address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 - inet/filter/logaccept-50 -m limit --limit 1/second -j LOG - inet/filter/logaccept-50 -j ACCEPT - -Filter 240 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-83 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-83 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-83 - inet/filter/address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 - inet/filter/address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-40 - inet/filter/logpass-40 -m limit --limit 1/second -j LOG - -Filter 241 {"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-84 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-84 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-84 - inet/filter/address-84 -s 10.0.0.1 -j ACCEPT - inet/filter/address-84 -s 10.0.0.2 -j ACCEPT - -Filter 242 {"action":"pass","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-85 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-85 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-85 - inet/filter/address-85 -s 10.0.0.1 - inet/filter/address-85 -s 10.0.0.2 - -Filter 243 {"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-86 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-86 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-86 - inet/filter/address-86 -s 10.0.0.1 -j logaccept-51 - inet/filter/address-86 -s 10.0.0.2 -j logaccept-51 - inet/filter/logaccept-51 -m limit --limit 1/second -j LOG - inet/filter/logaccept-51 -j ACCEPT - -Filter 244 {"action":"pass","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-87 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-87 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-87 - inet/filter/address-87 -s 10.0.0.1 -j logpass-41 - inet/filter/address-87 -s 10.0.0.2 -j logpass-41 - inet/filter/logpass-41 -m limit --limit 1/second -j LOG - -Filter 245 {"dest":"172.16.0.0\/16","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-88 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-88 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-88 - inet/filter/address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - -Filter 246 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-89 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-89 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-89 - inet/filter/address-89 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-89 -s 10.0.0.2 -d 172.16.0.0/16 - -Filter 247 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-90 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-90 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-90 - inet/filter/address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 - inet/filter/address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 - inet/filter/logaccept-52 -m limit --limit 1/second -j LOG - inet/filter/logaccept-52 -j ACCEPT - -Filter 248 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-91 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-91 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-91 - inet/filter/address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-42 - inet/filter/address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-42 - inet/filter/logpass-42 -m limit --limit 1/second -j LOG - -Filter 249 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-92 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-92 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-92 - inet/filter/address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - -Filter 250 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-93 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-93 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-93 - inet/filter/address-93 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-93 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/address-93 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/address-93 -s 10.0.0.2 -d 172.16.2.0/16 - -Filter 251 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-94 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-94 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-94 - inet/filter/address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 - inet/filter/address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 - inet/filter/address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 - inet/filter/address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 - inet/filter/logaccept-53 -m limit --limit 1/second -j LOG - inet/filter/logaccept-53 -j ACCEPT - -Filter 252 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-95 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-95 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-95 - inet/filter/address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-43 - inet/filter/address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-43 - inet/filter/address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-43 - inet/filter/address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-43 - inet/filter/logpass-43 -m limit --limit 1/second -j LOG - -Filter 253 {"in":["B","C"],"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT - -Filter 254 {"action":"pass","in":["B","C"],"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 - -Filter 255 {"in":["B","C"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 - inet/filter/logaccept-54 -m limit --limit 1/second -j LOG - inet/filter/logaccept-54 -j ACCEPT - -Filter 256 {"action":"pass","in":["B","C"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 - inet/filter/logpass-44 -m limit --limit 1/second -j LOG - -Filter 257 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 - inet/filter/address-96 -d 172.16.0.0/16 -j ACCEPT - -Filter 258 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 - inet/filter/address-97 -d 172.16.0.0/16 - -Filter 259 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 - inet/filter/address-98 -d 172.16.0.0/16 -j logaccept-55 - inet/filter/logaccept-55 -m limit --limit 1/second -j LOG - inet/filter/logaccept-55 -j ACCEPT - -Filter 260 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 - inet/filter/address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 261 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 - inet/filter/address-100 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-100 -d 172.16.2.0/16 -j ACCEPT - -Filter 262 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 - inet/filter/address-101 -d 172.16.0.0/16 - inet/filter/address-101 -d 172.16.2.0/16 - -Filter 263 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 - inet/filter/address-102 -d 172.16.0.0/16 -j logaccept-56 - inet/filter/address-102 -d 172.16.2.0/16 -j logaccept-56 - inet/filter/logaccept-56 -m limit --limit 1/second -j LOG - inet/filter/logaccept-56 -j ACCEPT - -Filter 264 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 - inet/filter/address-103 -d 172.16.0.0/16 -j logpass-45 - inet/filter/address-103 -d 172.16.2.0/16 -j logpass-45 - inet/filter/logpass-45 -m limit --limit 1/second -j LOG - -Filter 265 {"in":["B","C"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 - inet/filter/address-104 -s 10.0.0.1 -j ACCEPT - -Filter 266 {"action":"pass","in":["B","C"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 - inet/filter/address-105 -s 10.0.0.1 - -Filter 267 {"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 - inet/filter/address-106 -s 10.0.0.1 -j logaccept-57 - inet/filter/logaccept-57 -m limit --limit 1/second -j LOG - inet/filter/logaccept-57 -j ACCEPT - -Filter 268 {"action":"pass","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 - inet/filter/address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG - -Filter 269 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 - inet/filter/address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - -Filter 270 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 - inet/filter/address-109 -s 10.0.0.1 -d 172.16.0.0/16 - -Filter 271 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 - inet/filter/address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 - inet/filter/logaccept-58 -m limit --limit 1/second -j LOG - inet/filter/logaccept-58 -j ACCEPT - -Filter 272 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 - inet/filter/address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 273 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 - inet/filter/address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - -Filter 274 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 - inet/filter/address-113 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-113 -s 10.0.0.1 -d 172.16.2.0/16 - -Filter 275 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 - inet/filter/address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 - inet/filter/address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 - inet/filter/logaccept-59 -m limit --limit 1/second -j LOG - inet/filter/logaccept-59 -j ACCEPT - -Filter 276 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 - inet/filter/address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-46 - inet/filter/address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-46 - inet/filter/logpass-46 -m limit --limit 1/second -j LOG - -Filter 277 {"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 - inet/filter/address-116 -s 10.0.0.1 -j ACCEPT - inet/filter/address-116 -s 10.0.0.2 -j ACCEPT - -Filter 278 {"action":"pass","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 - inet/filter/address-117 -s 10.0.0.1 - inet/filter/address-117 -s 10.0.0.2 - -Filter 279 {"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 - inet/filter/address-118 -s 10.0.0.1 -j logaccept-60 - inet/filter/address-118 -s 10.0.0.2 -j logaccept-60 - inet/filter/logaccept-60 -m limit --limit 1/second -j LOG - inet/filter/logaccept-60 -j ACCEPT - -Filter 280 {"action":"pass","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 - inet/filter/address-119 -s 10.0.0.1 -j logpass-47 - inet/filter/address-119 -s 10.0.0.2 -j logpass-47 - inet/filter/logpass-47 -m limit --limit 1/second -j LOG - -Filter 281 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 - inet/filter/address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - -Filter 282 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 - inet/filter/address-121 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-121 -s 10.0.0.2 -d 172.16.0.0/16 - -Filter 283 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 - inet/filter/address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 - inet/filter/address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 - inet/filter/logaccept-61 -m limit --limit 1/second -j LOG - inet/filter/logaccept-61 -j ACCEPT - -Filter 284 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 - inet/filter/address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-48 - inet/filter/address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-48 - inet/filter/logpass-48 -m limit --limit 1/second -j LOG - -Filter 285 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 - inet/filter/address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - -Filter 286 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 - inet/filter/address-125 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-125 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/address-125 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/address-125 -s 10.0.0.2 -d 172.16.2.0/16 - -Filter 287 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 - inet/filter/address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 - inet/filter/address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 - inet/filter/address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 - inet/filter/address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 - inet/filter/logaccept-62 -m limit --limit 1/second -j LOG - inet/filter/logaccept-62 -j ACCEPT - -Filter 288 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 - inet/filter/address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-49 - inet/filter/address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-49 - inet/filter/address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-49 - inet/filter/address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-49 - inet/filter/logpass-49 -m limit --limit 1/second -j LOG - -Filter 289 {} -(filter) - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 290 {"action":"accept"} -(filter) - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 291 {"action":"drop"} -(filter) - inet/filter/FORWARD -j logdrop-0 - inet6/filter/FORWARD -j logdrop-0 - inet/filter/INPUT -j logdrop-0 - inet6/filter/INPUT -j logdrop-0 - inet/filter/OUTPUT -j logdrop-0 - inet6/filter/OUTPUT -j logdrop-0 - inet/filter/logdrop-0 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-0 -m limit --limit 1/second -j LOG - inet/filter/logdrop-0 -j DROP - inet6/filter/logdrop-0 -j DROP - -Filter 292 {"action":"pass"} -(filter) - inet/filter/FORWARD - inet6/filter/FORWARD - inet/filter/INPUT - inet6/filter/INPUT - inet/filter/OUTPUT - inet6/filter/OUTPUT - -Filter 293 {"action":"reject"} -(filter) - inet/filter/FORWARD -j logreject-0 - inet6/filter/FORWARD -j logreject-0 - inet/filter/INPUT -j logreject-0 - inet6/filter/INPUT -j logreject-0 - inet/filter/OUTPUT -j logreject-0 - inet6/filter/OUTPUT -j logreject-0 - inet/filter/logreject-0 -m limit --limit 1/second -j LOG - inet6/filter/logreject-0 -m limit --limit 1/second -j LOG - inet/filter/logreject-0 -j REJECT - inet6/filter/logreject-0 -j REJECT - -Filter 294 {"action":"tarpit"} -(filter) - inet/filter/FORWARD -j logtarpit-0 - inet6/filter/FORWARD -j logtarpit-0 - inet/filter/INPUT -j logtarpit-0 - inet6/filter/INPUT -j logtarpit-0 - inet/filter/OUTPUT -j logtarpit-0 - inet6/filter/OUTPUT -j logtarpit-0 - inet/filter/logtarpit-0 -m limit --limit 1/second -j LOG - inet6/filter/logtarpit-0 -m limit --limit 1/second -j LOG - inet/filter/logtarpit-0 -j tarpit - inet6/filter/logtarpit-0 -j tarpit - inet/raw/PREROUTING -j CT --notrack - inet6/raw/PREROUTING -j CT --notrack - inet/raw/OUTPUT -j CT --notrack - inet6/raw/OUTPUT -j CT --notrack - -Filter 295 {"conn-limit":1,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-0 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-0 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-0 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-0 - inet/filter/limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 - inet6/filter/limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 - inet/filter/logdrop-1 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1 -j DROP - inet6/filter/logdrop-1 -j DROP - inet/filter/limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 296 {"action":"pass","conn-limit":1,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-1 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-1 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1 - inet/filter/limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 - inet6/filter/limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 - inet/filter/logdrop-2 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2 -j DROP - inet6/filter/logdrop-2 -j DROP - inet/filter/limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 297 {"conn-limit":1,"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-2 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-2 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-2 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-2 - inet/filter/limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 - inet6/filter/limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 - inet/filter/logdrop-3 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-3 -m limit --limit 1/second -j LOG - inet/filter/logdrop-3 -j DROP - inet6/filter/logdrop-3 -j DROP - inet/filter/limit-2 -m limit --limit 1/second -j LOG - inet6/filter/limit-2 -m limit --limit 1/second -j LOG - inet/filter/limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 298 {"action":"pass","conn-limit":1,"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-3 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-3 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-3 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-3 - inet/filter/limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 - inet6/filter/limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 - inet/filter/logdrop-4 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-4 -m limit --limit 1/second -j LOG - inet/filter/logdrop-4 -j DROP - inet6/filter/logdrop-4 -j DROP - inet/filter/limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 299 {"conn-limit":1,"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-4 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-4 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-4 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-4 - inet/filter/limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 - inet6/filter/limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 - inet/filter/logdrop-5 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-5 -m limit --limit 1/second -j LOG - inet/filter/logdrop-5 -j DROP - inet6/filter/logdrop-5 -j DROP - inet/filter/limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 300 {"action":"pass","conn-limit":1,"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-5 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-5 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-5 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-5 - inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 - inet6/filter/limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 - inet/filter/logdrop-6 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-6 -m limit --limit 1/second -j LOG - inet/filter/logdrop-6 -j DROP - inet6/filter/logdrop-6 -j DROP - inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 301 {"conn-limit":{},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-6 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-6 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-6 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-6 - inet/filter/limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 - inet6/filter/limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 - inet/filter/logdrop-7 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-7 -m limit --limit 1/second -j LOG - inet/filter/logdrop-7 -j DROP - inet6/filter/logdrop-7 -j DROP - inet/filter/limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 302 {"action":"pass","conn-limit":{},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-7 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-7 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-7 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-7 - inet/filter/limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 - inet6/filter/limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 - inet/filter/logdrop-8 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-8 -m limit --limit 1/second -j LOG - inet/filter/logdrop-8 -j DROP - inet6/filter/logdrop-8 -j DROP - inet/filter/limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 303 {"conn-limit":{},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-8 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-8 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-8 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-8 - inet/filter/limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 - inet6/filter/limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 - inet/filter/logdrop-9 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-9 -m limit --limit 1/second -j LOG - inet/filter/logdrop-9 -j DROP - inet6/filter/logdrop-9 -j DROP - inet/filter/limit-8 -m limit --limit 1/second -j LOG - inet6/filter/limit-8 -m limit --limit 1/second -j LOG - inet/filter/limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 304 {"action":"pass","conn-limit":{},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-9 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-9 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-9 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-9 - inet/filter/limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 - inet6/filter/limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 - inet/filter/logdrop-10 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-10 -m limit --limit 1/second -j LOG - inet/filter/logdrop-10 -j DROP - inet6/filter/logdrop-10 -j DROP - inet/filter/limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 305 {"conn-limit":{},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-10 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-10 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-10 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-10 - inet/filter/limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 - inet6/filter/limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 - inet/filter/logdrop-11 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-11 -m limit --limit 1/second -j LOG - inet/filter/logdrop-11 -j DROP - inet6/filter/logdrop-11 -j DROP - inet/filter/limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 306 {"action":"pass","conn-limit":{},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-11 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-11 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-11 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-11 - inet/filter/limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 - inet6/filter/limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 - inet/filter/logdrop-12 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-12 -m limit --limit 1/second -j LOG - inet/filter/logdrop-12 -j DROP - inet6/filter/logdrop-12 -j DROP - inet/filter/limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 307 {"conn-limit":{"name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-12 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-12 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-12 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-12 - inet/filter/limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 - inet6/filter/limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 - inet/filter/logdrop-13 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-13 -m limit --limit 1/second -j LOG - inet/filter/logdrop-13 -j DROP - inet6/filter/logdrop-13 -j DROP - inet/filter/limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 308 {"action":"pass","conn-limit":{"name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-13 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-13 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-13 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-13 - inet/filter/limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 - inet6/filter/limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 - inet/filter/logdrop-14 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-14 -m limit --limit 1/second -j LOG - inet/filter/logdrop-14 -j DROP - inet6/filter/logdrop-14 -j DROP - inet/filter/limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 309 {"conn-limit":{"name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-14 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-14 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-14 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-14 - inet/filter/limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 - inet6/filter/limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 - inet/filter/logdrop-15 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-15 -m limit --limit 1/second -j LOG - inet/filter/logdrop-15 -j DROP - inet6/filter/logdrop-15 -j DROP - inet/filter/limit-14 -m limit --limit 1/second -j LOG - inet6/filter/limit-14 -m limit --limit 1/second -j LOG - inet/filter/limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 310 {"action":"pass","conn-limit":{"name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-15 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-15 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-15 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-15 - inet/filter/limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 - inet6/filter/limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 - inet/filter/logdrop-16 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-16 -m limit --limit 1/second -j LOG - inet/filter/logdrop-16 -j DROP - inet6/filter/logdrop-16 -j DROP - inet/filter/limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 311 {"conn-limit":{"name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-16 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-16 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-16 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-16 - inet/filter/limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 - inet6/filter/limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 - inet/filter/logdrop-17 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-17 -m limit --limit 1/second -j LOG - inet/filter/logdrop-17 -j DROP - inet6/filter/logdrop-17 -j DROP - inet/filter/limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 312 {"action":"pass","conn-limit":{"name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-17 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-17 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-17 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-17 - inet/filter/limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 - inet6/filter/limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 - inet/filter/logdrop-18 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-18 -m limit --limit 1/second -j LOG - inet/filter/logdrop-18 -j DROP - inet6/filter/logdrop-18 -j DROP - inet/filter/limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 313 {"conn-limit":{"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-18 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-18 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-18 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-18 - inet/filter/limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-19 - inet6/filter/limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 - inet/filter/logdrop-19 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-19 -m limit --limit 1/second -j LOG - inet/filter/logdrop-19 -j DROP - inet6/filter/logdrop-19 -j DROP - inet/filter/limit-18 -j ACCEPT - inet6/filter/limit-18 -j ACCEPT - -Filter 314 {"action":"pass","conn-limit":{"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-19 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-19 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-19 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-19 - inet/filter/limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20 - inet6/filter/limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-20 - inet/filter/logdrop-20 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-20 -m limit --limit 1/second -j LOG - inet/filter/logdrop-20 -j DROP - inet6/filter/logdrop-20 -j DROP - -Filter 315 {"conn-limit":{"name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-20 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-20 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-20 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-20 - inet/filter/limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-21 - inet6/filter/limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 - inet/filter/logdrop-21 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-21 -m limit --limit 1/second -j LOG - inet/filter/logdrop-21 -j DROP - inet6/filter/logdrop-21 -j DROP - inet/filter/limit-20 -m limit --limit 1/second -j LOG - inet6/filter/limit-20 -m limit --limit 1/second -j LOG - inet/filter/limit-20 -j ACCEPT - inet6/filter/limit-20 -j ACCEPT - -Filter 316 {"action":"pass","conn-limit":{"name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-21 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-21 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-21 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-21 - inet/filter/limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-22 - inet6/filter/limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 - inet/filter/logdrop-22 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-22 -m limit --limit 1/second -j LOG - inet/filter/logdrop-22 -j DROP - inet6/filter/logdrop-22 -j DROP - inet/filter/limit-21 -m limit --limit 1/second -j LOG - inet6/filter/limit-21 -m limit --limit 1/second -j LOG - -Filter 317 {"conn-limit":{"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-22 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-22 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-22 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-22 - inet/filter/limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-23 - inet6/filter/limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 - inet/filter/logdrop-23 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-23 -m limit --limit 1/second -j LOG - inet/filter/logdrop-23 -j DROP - inet6/filter/logdrop-23 -j DROP - inet/filter/limit-22 -j ACCEPT - inet6/filter/limit-22 -j ACCEPT - -Filter 318 {"action":"pass","conn-limit":{"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-23 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-23 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-23 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-23 - inet/filter/limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-24 - inet6/filter/limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-24 - inet/filter/logdrop-24 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-24 -m limit --limit 1/second -j LOG - inet/filter/logdrop-24 -j DROP - inet6/filter/logdrop-24 -j DROP - -Filter 319 {"conn-limit":{"addr":"dest","name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-24 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-24 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-24 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-24 - inet/filter/limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 - inet6/filter/limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 - inet/filter/logdrop-25 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-25 -m limit --limit 1/second -j LOG - inet/filter/logdrop-25 -j DROP - inet6/filter/logdrop-25 -j DROP - inet/filter/limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 320 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-25 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-25 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-25 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-25 - inet/filter/limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 - inet6/filter/limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 - inet/filter/logdrop-26 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-26 -m limit --limit 1/second -j LOG - inet/filter/logdrop-26 -j DROP - inet6/filter/logdrop-26 -j DROP - inet/filter/limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 321 {"conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-26 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-26 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-26 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-26 - inet/filter/limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 - inet6/filter/limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 - inet/filter/logdrop-27 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-27 -m limit --limit 1/second -j LOG - inet/filter/logdrop-27 -j DROP - inet6/filter/logdrop-27 -j DROP - inet/filter/limit-26 -m limit --limit 1/second -j LOG - inet6/filter/limit-26 -m limit --limit 1/second -j LOG - inet/filter/limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 322 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-27 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-27 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-27 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-27 - inet/filter/limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 - inet6/filter/limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 - inet/filter/logdrop-28 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-28 -m limit --limit 1/second -j LOG - inet/filter/logdrop-28 -j DROP - inet6/filter/logdrop-28 -j DROP - inet/filter/limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 323 {"conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-28 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-28 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-28 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-28 - inet/filter/limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 - inet6/filter/limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 - inet/filter/logdrop-29 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-29 -m limit --limit 1/second -j LOG - inet/filter/logdrop-29 -j DROP - inet6/filter/logdrop-29 -j DROP - inet/filter/limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 324 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-29 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-29 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-29 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-29 - inet/filter/limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-30 - inet6/filter/limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-30 - inet/filter/logdrop-30 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-30 -m limit --limit 1/second -j LOG - inet/filter/logdrop-30 -j DROP - inet6/filter/logdrop-30 -j DROP - inet/filter/limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 325 {"conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-30 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-30 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-30 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-30 - inet/filter/limit-30 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 - inet6/filter/limit-30 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 - inet/filter/logdrop-31 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-31 -m limit --limit 1/second -j LOG - inet/filter/logdrop-31 -j DROP - inet6/filter/logdrop-31 -j DROP - inet/filter/limit-30 -j ACCEPT - inet6/filter/limit-30 -j ACCEPT - -Filter 326 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-31 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-31 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-31 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-31 - inet/filter/limit-31 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 - inet6/filter/limit-31 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 - inet/filter/logdrop-32 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-32 -m limit --limit 1/second -j LOG - inet/filter/logdrop-32 -j DROP - inet6/filter/logdrop-32 -j DROP - -Filter 327 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-32 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-32 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-32 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-32 - inet/filter/limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 - inet6/filter/limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 - inet/filter/logdrop-33 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-33 -m limit --limit 1/second -j LOG - inet/filter/logdrop-33 -j DROP - inet6/filter/logdrop-33 -j DROP - inet/filter/limit-32 -m limit --limit 1/second -j LOG - inet6/filter/limit-32 -m limit --limit 1/second -j LOG - inet/filter/limit-32 -j ACCEPT - inet6/filter/limit-32 -j ACCEPT - -Filter 328 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-33 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-33 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-33 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-33 - inet/filter/limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 - inet6/filter/limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 - inet/filter/logdrop-34 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-34 -m limit --limit 1/second -j LOG - inet/filter/logdrop-34 -j DROP - inet6/filter/logdrop-34 -j DROP - inet/filter/limit-33 -m limit --limit 1/second -j LOG - inet6/filter/limit-33 -m limit --limit 1/second -j LOG - -Filter 329 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-34 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-34 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-34 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-34 - inet/filter/limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 - inet6/filter/limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 - inet/filter/logdrop-35 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-35 -m limit --limit 1/second -j LOG - inet/filter/logdrop-35 -j DROP - inet6/filter/logdrop-35 -j DROP - inet/filter/limit-34 -j ACCEPT - inet6/filter/limit-34 -j ACCEPT - -Filter 330 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-35 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-35 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-35 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-35 - inet/filter/limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-36 - inet6/filter/limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 - inet/filter/logdrop-36 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-36 -m limit --limit 1/second -j LOG - inet/filter/logdrop-36 -j DROP - inet6/filter/logdrop-36 -j DROP - -Filter 331 {"conn-limit":{"name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-36 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-36 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-36 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-36 - inet/filter/limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 - inet6/filter/limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 - inet/filter/logdrop-37 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-37 -m limit --limit 1/second -j LOG - inet/filter/logdrop-37 -j DROP - inet6/filter/logdrop-37 -j DROP - inet/filter/limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-36 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 332 {"action":"pass","conn-limit":{"name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-37 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-37 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-37 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-37 - inet/filter/limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 - inet6/filter/limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 - inet/filter/logdrop-38 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-38 -m limit --limit 1/second -j LOG - inet/filter/logdrop-38 -j DROP - inet6/filter/logdrop-38 -j DROP - inet/filter/limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-37 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 333 {"conn-limit":{"name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-38 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-38 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-38 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-38 - inet/filter/limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 - inet6/filter/limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 - inet/filter/logdrop-39 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-39 -m limit --limit 1/second -j LOG - inet/filter/logdrop-39 -j DROP - inet6/filter/logdrop-39 -j DROP - inet/filter/limit-38 -m limit --limit 1/second -j LOG - inet6/filter/limit-38 -m limit --limit 1/second -j LOG - inet/filter/limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-38 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 334 {"action":"pass","conn-limit":{"name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-39 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-39 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-39 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-39 - inet/filter/limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 - inet6/filter/limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 - inet/filter/logdrop-40 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-40 -m limit --limit 1/second -j LOG - inet/filter/logdrop-40 -j DROP - inet6/filter/logdrop-40 -j DROP - inet/filter/limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-39 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 335 {"conn-limit":{"name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-40 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-40 - inet/filter/limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 - inet6/filter/limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 - inet/filter/logdrop-41 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-41 -m limit --limit 1/second -j LOG - inet/filter/logdrop-41 -j DROP - inet6/filter/logdrop-41 -j DROP - inet/filter/limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-40 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 336 {"action":"pass","conn-limit":{"name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-41 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-41 - inet/filter/limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-42 - inet6/filter/limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-42 - inet/filter/logdrop-42 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-42 -m limit --limit 1/second -j LOG - inet/filter/logdrop-42 -j DROP - inet6/filter/logdrop-42 -j DROP - inet/filter/limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-41 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 337 {"conn-limit":{"name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-42 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-42 - inet/filter/limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 - inet6/filter/limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 - inet/filter/logdrop-43 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-43 -m limit --limit 1/second -j LOG - inet/filter/logdrop-43 -j DROP - inet6/filter/logdrop-43 -j DROP - inet/filter/limit-42 -j ACCEPT - inet6/filter/limit-42 -j ACCEPT - -Filter 338 {"action":"pass","conn-limit":{"name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-43 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-43 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-43 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-43 - inet/filter/limit-43 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 - inet6/filter/limit-43 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 - inet/filter/logdrop-44 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-44 -m limit --limit 1/second -j LOG - inet/filter/logdrop-44 -j DROP - inet6/filter/logdrop-44 -j DROP - -Filter 339 {"conn-limit":{"name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-44 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-44 - inet/filter/limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 - inet6/filter/limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 - inet/filter/logdrop-45 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-45 -m limit --limit 1/second -j LOG - inet/filter/logdrop-45 -j DROP - inet6/filter/logdrop-45 -j DROP - inet/filter/limit-44 -m limit --limit 1/second -j LOG - inet6/filter/limit-44 -m limit --limit 1/second -j LOG - inet/filter/limit-44 -j ACCEPT - inet6/filter/limit-44 -j ACCEPT - -Filter 340 {"action":"pass","conn-limit":{"name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-45 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-45 - inet/filter/limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 - inet6/filter/limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 - inet/filter/logdrop-46 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-46 -m limit --limit 1/second -j LOG - inet/filter/logdrop-46 -j DROP - inet6/filter/logdrop-46 -j DROP - inet/filter/limit-45 -m limit --limit 1/second -j LOG - inet6/filter/limit-45 -m limit --limit 1/second -j LOG - -Filter 341 {"conn-limit":{"name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-46 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-46 - inet/filter/limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 - inet6/filter/limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 - inet/filter/logdrop-47 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-47 -m limit --limit 1/second -j LOG - inet/filter/logdrop-47 -j DROP - inet6/filter/logdrop-47 -j DROP - inet/filter/limit-46 -j ACCEPT - inet6/filter/limit-46 -j ACCEPT - -Filter 342 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-47 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-47 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-47 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-47 - inet/filter/limit-47 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 - inet6/filter/limit-47 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48 - inet/filter/logdrop-48 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-48 -m limit --limit 1/second -j LOG - inet/filter/logdrop-48 -j DROP - inet6/filter/logdrop-48 -j DROP - -Filter 343 {"conn-limit":{"addr":"dest","name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-48 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-48 - inet/filter/limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 - inet6/filter/limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 - inet/filter/logdrop-49 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-49 -m limit --limit 1/second -j LOG - inet/filter/logdrop-49 -j DROP - inet6/filter/logdrop-49 -j DROP - inet/filter/limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-48 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 344 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-49 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-49 - inet/filter/limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 - inet6/filter/limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 - inet/filter/logdrop-50 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-50 -m limit --limit 1/second -j LOG - inet/filter/logdrop-50 -j DROP - inet6/filter/logdrop-50 -j DROP - inet/filter/limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-49 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 345 {"conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-50 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-50 - inet/filter/limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 - inet6/filter/limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 - inet/filter/logdrop-51 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-51 -m limit --limit 1/second -j LOG - inet/filter/logdrop-51 -j DROP - inet6/filter/logdrop-51 -j DROP - inet/filter/limit-50 -m limit --limit 1/second -j LOG - inet6/filter/limit-50 -m limit --limit 1/second -j LOG - inet/filter/limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-50 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 346 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-51 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-51 - inet/filter/limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 - inet6/filter/limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 - inet/filter/logdrop-52 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-52 -m limit --limit 1/second -j LOG - inet/filter/logdrop-52 -j DROP - inet6/filter/logdrop-52 -j DROP - inet/filter/limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-51 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 347 {"conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-52 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-52 - inet/filter/limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 - inet6/filter/limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 - inet/filter/logdrop-53 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-53 -m limit --limit 1/second -j LOG - inet/filter/logdrop-53 -j DROP - inet6/filter/logdrop-53 -j DROP - inet/filter/limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-52 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 348 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-53 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-53 - inet/filter/limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-54 - inet6/filter/limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-54 - inet/filter/logdrop-54 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-54 -m limit --limit 1/second -j LOG - inet/filter/logdrop-54 -j DROP - inet6/filter/logdrop-54 -j DROP - inet/filter/limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-53 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 349 {"conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-54 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-54 - inet/filter/limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 - inet6/filter/limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 - inet/filter/logdrop-55 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-55 -m limit --limit 1/second -j LOG - inet/filter/logdrop-55 -j DROP - inet6/filter/logdrop-55 -j DROP - inet/filter/limit-54 -j ACCEPT - inet6/filter/limit-54 -j ACCEPT - -Filter 350 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-55 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-55 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-55 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-55 - inet/filter/limit-55 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 - inet6/filter/limit-55 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 - inet/filter/logdrop-56 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-56 -m limit --limit 1/second -j LOG - inet/filter/logdrop-56 -j DROP - inet6/filter/logdrop-56 -j DROP - -Filter 351 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-56 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-56 - inet/filter/limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 - inet6/filter/limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 - inet/filter/logdrop-57 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-57 -m limit --limit 1/second -j LOG - inet/filter/logdrop-57 -j DROP - inet6/filter/logdrop-57 -j DROP - inet/filter/limit-56 -m limit --limit 1/second -j LOG - inet6/filter/limit-56 -m limit --limit 1/second -j LOG - inet/filter/limit-56 -j ACCEPT - inet6/filter/limit-56 -j ACCEPT - -Filter 352 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-57 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-57 - inet/filter/limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 - inet6/filter/limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 - inet/filter/logdrop-58 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-58 -m limit --limit 1/second -j LOG - inet/filter/logdrop-58 -j DROP - inet6/filter/logdrop-58 -j DROP - inet/filter/limit-57 -m limit --limit 1/second -j LOG - inet6/filter/limit-57 -m limit --limit 1/second -j LOG - -Filter 353 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-58 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-58 - inet/filter/limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 - inet6/filter/limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 - inet/filter/logdrop-59 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-59 -m limit --limit 1/second -j LOG - inet/filter/logdrop-59 -j DROP - inet6/filter/logdrop-59 -j DROP - inet/filter/limit-58 -j ACCEPT - inet6/filter/limit-58 -j ACCEPT - -Filter 354 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-59 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-59 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-59 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-59 - inet/filter/limit-59 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 - inet6/filter/limit-59 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 - inet/filter/logdrop-60 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-60 -m limit --limit 1/second -j LOG - inet/filter/logdrop-60 -j DROP - inet6/filter/logdrop-60 -j DROP - -Filter 355 {"conn-limit":{"log":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-60 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-60 - inet/filter/limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 356 {"action":"pass","conn-limit":{"log":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-61 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-61 - inet/filter/limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 357 {"conn-limit":{"log":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-62 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-62 - inet/filter/limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-62 -m limit --limit 1/second -j LOG - inet6/filter/limit-62 -m limit --limit 1/second -j LOG - inet/filter/limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 358 {"action":"pass","conn-limit":{"log":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-63 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-63 - inet/filter/limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 359 {"conn-limit":{"log":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-64 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-64 - inet/filter/limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 360 {"action":"pass","conn-limit":{"log":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-65 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-65 - inet/filter/limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 361 {"conn-limit":{"log":false,"name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-66 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-66 - inet/filter/limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 362 {"action":"pass","conn-limit":{"log":false,"name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-67 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-67 - inet/filter/limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 363 {"conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-68 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-68 - inet/filter/limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-68 -m limit --limit 1/second -j LOG - inet6/filter/limit-68 -m limit --limit 1/second -j LOG - inet/filter/limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 364 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-69 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-69 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-69 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-69 - inet/filter/limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 365 {"conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-70 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-70 - inet/filter/limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 366 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-71 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-71 - inet/filter/limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 367 {"conn-limit":{"log":false,"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-72 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-72 - inet/filter/limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-72 -j ACCEPT - inet6/filter/limit-72 -j ACCEPT - -Filter 368 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-73 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-73 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-73 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-73 - inet/filter/limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 369 {"conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-74 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-74 - inet/filter/limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-74 -m limit --limit 1/second -j LOG - inet6/filter/limit-74 -m limit --limit 1/second -j LOG - inet/filter/limit-74 -j ACCEPT - inet6/filter/limit-74 -j ACCEPT - -Filter 370 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-75 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-75 - inet/filter/limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-75 -m limit --limit 1/second -j LOG - inet6/filter/limit-75 -m limit --limit 1/second -j LOG - -Filter 371 {"conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-76 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-76 - inet/filter/limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-76 -j ACCEPT - inet6/filter/limit-76 -j ACCEPT - -Filter 372 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-77 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-77 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-77 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-77 - inet/filter/limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 373 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-78 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-78 - inet/filter/limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 374 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-79 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-79 - inet/filter/limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 375 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-80 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-80 - inet/filter/limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-80 -m limit --limit 1/second -j LOG - inet6/filter/limit-80 -m limit --limit 1/second -j LOG - inet/filter/limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 376 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-81 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-81 - inet/filter/limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 377 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-82 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-82 - inet/filter/limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 378 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-83 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-83 - inet/filter/limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 379 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-84 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-84 - inet/filter/limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-84 -j ACCEPT - inet6/filter/limit-84 -j ACCEPT - -Filter 380 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-85 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-85 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-85 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-85 - inet/filter/limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 381 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-86 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-86 - inet/filter/limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-86 -m limit --limit 1/second -j LOG - inet6/filter/limit-86 -m limit --limit 1/second -j LOG - inet/filter/limit-86 -j ACCEPT - inet6/filter/limit-86 -j ACCEPT - -Filter 382 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-87 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-87 - inet/filter/limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-87 -m limit --limit 1/second -j LOG - inet6/filter/limit-87 -m limit --limit 1/second -j LOG - -Filter 383 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-88 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-88 - inet/filter/limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-88 -j ACCEPT - inet6/filter/limit-88 -j ACCEPT - -Filter 384 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-89 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-89 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-89 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-89 - inet/filter/limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 385 {"conn-limit":{"log":false,"name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-90 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-90 - inet/filter/limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-90 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-90 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 386 {"action":"pass","conn-limit":{"log":false,"name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-91 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-91 - inet/filter/limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-91 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-91 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 387 {"conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-92 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-92 - inet/filter/limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-92 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-92 -m limit --limit 1/second -j LOG - inet6/filter/limit-92 -m limit --limit 1/second -j LOG - inet/filter/limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-92 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 388 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-93 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-93 - inet/filter/limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-93 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-93 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 389 {"conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-94 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-94 - inet/filter/limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-94 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-94 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 390 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-95 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-95 - inet/filter/limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-95 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-95 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 391 {"conn-limit":{"log":false,"name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-96 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-96 - inet/filter/limit-96 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-96 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-96 -j ACCEPT - inet6/filter/limit-96 -j ACCEPT - -Filter 392 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-97 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-97 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-97 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-97 - inet/filter/limit-97 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-97 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 393 {"conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-98 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-98 - inet/filter/limit-98 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-98 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-98 -m limit --limit 1/second -j LOG - inet6/filter/limit-98 -m limit --limit 1/second -j LOG - inet/filter/limit-98 -j ACCEPT - inet6/filter/limit-98 -j ACCEPT - -Filter 394 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-99 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-99 - inet/filter/limit-99 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-99 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-99 -m limit --limit 1/second -j LOG - inet6/filter/limit-99 -m limit --limit 1/second -j LOG - -Filter 395 {"conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-100 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-100 - inet/filter/limit-100 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-100 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-100 -j ACCEPT - inet6/filter/limit-100 -j ACCEPT - -Filter 396 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-101 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-101 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-101 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-101 - inet/filter/limit-101 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-101 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 397 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-102 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-102 - inet/filter/limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 398 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-103 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-103 - inet/filter/limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-103 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 399 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-104 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-104 - inet/filter/limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-104 -m limit --limit 1/second -j LOG - inet6/filter/limit-104 -m limit --limit 1/second -j LOG - inet/filter/limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 400 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-105 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-105 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-105 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-105 - inet/filter/limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-105 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 401 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-106 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-106 - inet/filter/limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 402 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-107 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-107 - inet/filter/limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-107 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 403 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-108 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-108 - inet/filter/limit-108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-108 -j ACCEPT - inet6/filter/limit-108 -j ACCEPT - -Filter 404 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-109 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-109 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-109 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-109 - inet/filter/limit-109 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-109 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 405 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-110 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-110 - inet/filter/limit-110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-110 -m limit --limit 1/second -j LOG - inet6/filter/limit-110 -m limit --limit 1/second -j LOG - inet/filter/limit-110 -j ACCEPT - inet6/filter/limit-110 -j ACCEPT - -Filter 406 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-111 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-111 - inet/filter/limit-111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-111 -m limit --limit 1/second -j LOG - inet6/filter/limit-111 -m limit --limit 1/second -j LOG - -Filter 407 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-112 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-112 - inet/filter/limit-112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-112 -j ACCEPT - inet6/filter/limit-112 -j ACCEPT - -Filter 408 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-113 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-113 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-113 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-113 - inet/filter/limit-113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 409 {"conn-limit":{"log":"none"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-114 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-114 - inet/filter/limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 410 {"action":"pass","conn-limit":{"log":"none"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-115 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-115 - inet/filter/limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 411 {"conn-limit":{"log":"none"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-116 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-116 - inet/filter/limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-116 -m limit --limit 1/second -j LOG - inet6/filter/limit-116 -m limit --limit 1/second -j LOG - inet/filter/limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 412 {"action":"pass","conn-limit":{"log":"none"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-117 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-117 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-117 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-117 - inet/filter/limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 413 {"conn-limit":{"log":"none"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-118 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-118 - inet/filter/limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 414 {"action":"pass","conn-limit":{"log":"none"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-119 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-119 - inet/filter/limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 415 {"conn-limit":{"log":"none","name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-120 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-120 - inet/filter/limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 416 {"action":"pass","conn-limit":{"log":"none","name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-121 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-121 - inet/filter/limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 417 {"conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-122 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-122 - inet/filter/limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-122 -m limit --limit 1/second -j LOG - inet6/filter/limit-122 -m limit --limit 1/second -j LOG - inet/filter/limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 418 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-123 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-123 - inet/filter/limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 419 {"conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-124 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-124 - inet/filter/limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 420 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-125 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-125 - inet/filter/limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 421 {"conn-limit":{"log":"none","name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-126 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-126 - inet/filter/limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-126 -j ACCEPT - inet6/filter/limit-126 -j ACCEPT - -Filter 422 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-127 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-127 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-127 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-127 - inet/filter/limit-127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 423 {"conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-128 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-128 - inet/filter/limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-128 -m limit --limit 1/second -j LOG - inet6/filter/limit-128 -m limit --limit 1/second -j LOG - inet/filter/limit-128 -j ACCEPT - inet6/filter/limit-128 -j ACCEPT - -Filter 424 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-129 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-129 - inet/filter/limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-129 -m limit --limit 1/second -j LOG - inet6/filter/limit-129 -m limit --limit 1/second -j LOG - -Filter 425 {"conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-130 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-130 - inet/filter/limit-130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-130 -j ACCEPT - inet6/filter/limit-130 -j ACCEPT - -Filter 426 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-131 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-131 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-131 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-131 - inet/filter/limit-131 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 427 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-132 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-132 - inet/filter/limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 428 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-133 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-133 - inet/filter/limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 429 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-134 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-134 - inet/filter/limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-134 -m limit --limit 1/second -j LOG - inet6/filter/limit-134 -m limit --limit 1/second -j LOG - inet/filter/limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 430 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-135 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-135 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-135 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-135 - inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 431 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-136 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-136 - inet/filter/limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 432 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-137 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-137 - inet/filter/limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 433 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-138 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-138 - inet/filter/limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-138 -j ACCEPT - inet6/filter/limit-138 -j ACCEPT - -Filter 434 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-139 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-139 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-139 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-139 - inet/filter/limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 435 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-140 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-140 - inet/filter/limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-140 -m limit --limit 1/second -j LOG - inet6/filter/limit-140 -m limit --limit 1/second -j LOG - inet/filter/limit-140 -j ACCEPT - inet6/filter/limit-140 -j ACCEPT - -Filter 436 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-141 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-141 - inet/filter/limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-141 -m limit --limit 1/second -j LOG - inet6/filter/limit-141 -m limit --limit 1/second -j LOG - -Filter 437 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-142 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-142 - inet/filter/limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-142 -j ACCEPT - inet6/filter/limit-142 -j ACCEPT - -Filter 438 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-143 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-143 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-143 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-143 - inet/filter/limit-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 439 {"conn-limit":{"log":"none","name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-144 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-144 - inet/filter/limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-144 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-144 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 440 {"action":"pass","conn-limit":{"log":"none","name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-145 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-145 - inet/filter/limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-145 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-145 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 441 {"conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-146 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-146 - inet/filter/limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-146 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-146 -m limit --limit 1/second -j LOG - inet6/filter/limit-146 -m limit --limit 1/second -j LOG - inet/filter/limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-146 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 442 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-147 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-147 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-147 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-147 - inet/filter/limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-147 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-147 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 443 {"conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-148 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-148 - inet/filter/limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-148 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-148 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 444 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-149 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-149 - inet/filter/limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-149 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-149 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 445 {"conn-limit":{"log":"none","name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-150 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-150 - inet/filter/limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-150 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-150 -j ACCEPT - inet6/filter/limit-150 -j ACCEPT - -Filter 446 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-151 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-151 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-151 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-151 - inet/filter/limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-151 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 447 {"conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-152 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-152 - inet/filter/limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-152 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-152 -m limit --limit 1/second -j LOG - inet6/filter/limit-152 -m limit --limit 1/second -j LOG - inet/filter/limit-152 -j ACCEPT - inet6/filter/limit-152 -j ACCEPT - -Filter 448 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-153 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-153 - inet/filter/limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-153 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-153 -m limit --limit 1/second -j LOG - inet6/filter/limit-153 -m limit --limit 1/second -j LOG - -Filter 449 {"conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-154 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-154 - inet/filter/limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-154 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-154 -j ACCEPT - inet6/filter/limit-154 -j ACCEPT - -Filter 450 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-155 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-155 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-155 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-155 - inet/filter/limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-155 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 451 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-156 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-156 - inet/filter/limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-156 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-156 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 452 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-157 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-157 - inet/filter/limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-157 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-157 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 453 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-158 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-158 - inet/filter/limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-158 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-158 -m limit --limit 1/second -j LOG - inet6/filter/limit-158 -m limit --limit 1/second -j LOG - inet/filter/limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-158 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 454 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-159 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-159 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-159 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-159 - inet/filter/limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-159 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-159 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 455 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-160 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-160 - inet/filter/limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-160 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-160 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 456 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-161 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-161 - inet/filter/limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-161 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-161 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 457 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-162 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-162 - inet/filter/limit-162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-162 -j ACCEPT - inet6/filter/limit-162 -j ACCEPT - -Filter 458 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-163 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-163 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-163 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-163 - inet/filter/limit-163 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-163 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 459 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-164 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-164 - inet/filter/limit-164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-164 -m limit --limit 1/second -j LOG - inet6/filter/limit-164 -m limit --limit 1/second -j LOG - inet/filter/limit-164 -j ACCEPT - inet6/filter/limit-164 -j ACCEPT - -Filter 460 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-165 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-165 - inet/filter/limit-165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-165 -m limit --limit 1/second -j LOG - inet6/filter/limit-165 -m limit --limit 1/second -j LOG - -Filter 461 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-166 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-166 - inet/filter/limit-166 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-166 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-166 -j ACCEPT - inet6/filter/limit-166 -j ACCEPT - -Filter 462 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-167 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-167 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-167 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-167 - inet/filter/limit-167 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-167 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 463 {"conn-limit":{"interval":5},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-168 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-168 - inet/filter/limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 - inet6/filter/limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 - inet/filter/logdrop-61 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-61 -m limit --limit 1/second -j LOG - inet/filter/logdrop-61 -j DROP - inet6/filter/logdrop-61 -j DROP - inet/filter/limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 464 {"action":"pass","conn-limit":{"interval":5},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-169 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-169 - inet/filter/limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 - inet6/filter/limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 - inet/filter/logdrop-62 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-62 -m limit --limit 1/second -j LOG - inet/filter/logdrop-62 -j DROP - inet6/filter/logdrop-62 -j DROP - inet/filter/limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 465 {"conn-limit":{"interval":5},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-170 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-170 - inet/filter/limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 - inet6/filter/limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 - inet/filter/logdrop-63 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-63 -m limit --limit 1/second -j LOG - inet/filter/logdrop-63 -j DROP - inet6/filter/logdrop-63 -j DROP - inet/filter/limit-170 -m limit --limit 1/second -j LOG - inet6/filter/limit-170 -m limit --limit 1/second -j LOG - inet/filter/limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 466 {"action":"pass","conn-limit":{"interval":5},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-171 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-171 - inet/filter/limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 - inet6/filter/limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 - inet/filter/logdrop-64 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-64 -m limit --limit 1/second -j LOG - inet/filter/logdrop-64 -j DROP - inet6/filter/logdrop-64 -j DROP - inet/filter/limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 467 {"conn-limit":{"interval":5},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-172 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-172 - inet/filter/limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 - inet6/filter/limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 - inet/filter/logdrop-65 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-65 -m limit --limit 1/second -j LOG - inet/filter/logdrop-65 -j DROP - inet6/filter/logdrop-65 -j DROP - inet/filter/limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 468 {"action":"pass","conn-limit":{"interval":5},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-173 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-173 - inet/filter/limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 - inet6/filter/limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 - inet/filter/logdrop-66 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-66 -m limit --limit 1/second -j LOG - inet/filter/logdrop-66 -j DROP - inet6/filter/logdrop-66 -j DROP - inet/filter/limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 469 {"conn-limit":{"interval":5,"name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-174 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-174 - inet/filter/limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 - inet6/filter/limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 - inet/filter/logdrop-67 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-67 -m limit --limit 1/second -j LOG - inet/filter/logdrop-67 -j DROP - inet6/filter/logdrop-67 -j DROP - inet/filter/limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 470 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-175 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-175 - inet/filter/limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 - inet6/filter/limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 - inet/filter/logdrop-68 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-68 -m limit --limit 1/second -j LOG - inet/filter/logdrop-68 -j DROP - inet6/filter/logdrop-68 -j DROP - inet/filter/limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 471 {"conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-176 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-176 - inet/filter/limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 - inet6/filter/limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 - inet/filter/logdrop-69 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-69 -m limit --limit 1/second -j LOG - inet/filter/logdrop-69 -j DROP - inet6/filter/logdrop-69 -j DROP - inet/filter/limit-176 -m limit --limit 1/second -j LOG - inet6/filter/limit-176 -m limit --limit 1/second -j LOG - inet/filter/limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 472 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-177 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-177 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-177 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-177 - inet/filter/limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 - inet6/filter/limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 - inet/filter/logdrop-70 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-70 -m limit --limit 1/second -j LOG - inet/filter/logdrop-70 -j DROP - inet6/filter/logdrop-70 -j DROP - inet/filter/limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 473 {"conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-178 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-178 - inet/filter/limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 - inet6/filter/limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 - inet/filter/logdrop-71 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-71 -m limit --limit 1/second -j LOG - inet/filter/logdrop-71 -j DROP - inet6/filter/logdrop-71 -j DROP - inet/filter/limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 474 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-179 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-179 - inet/filter/limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-72 - inet6/filter/limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-72 - inet/filter/logdrop-72 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-72 -m limit --limit 1/second -j LOG - inet/filter/logdrop-72 -j DROP - inet6/filter/logdrop-72 -j DROP - inet/filter/limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 475 {"conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-180 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-180 - inet/filter/limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 - inet6/filter/limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 - inet/filter/logdrop-73 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-73 -m limit --limit 1/second -j LOG - inet/filter/logdrop-73 -j DROP - inet6/filter/logdrop-73 -j DROP - inet/filter/limit-180 -j ACCEPT - inet6/filter/limit-180 -j ACCEPT - -Filter 476 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-181 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-181 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-181 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-181 - inet/filter/limit-181 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 - inet6/filter/limit-181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 - inet/filter/logdrop-74 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-74 -m limit --limit 1/second -j LOG - inet/filter/logdrop-74 -j DROP - inet6/filter/logdrop-74 -j DROP - -Filter 477 {"conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-182 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-182 - inet/filter/limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 - inet6/filter/limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 - inet/filter/logdrop-75 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-75 -m limit --limit 1/second -j LOG - inet/filter/logdrop-75 -j DROP - inet6/filter/logdrop-75 -j DROP - inet/filter/limit-182 -m limit --limit 1/second -j LOG - inet6/filter/limit-182 -m limit --limit 1/second -j LOG - inet/filter/limit-182 -j ACCEPT - inet6/filter/limit-182 -j ACCEPT - -Filter 478 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-183 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-183 - inet/filter/limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 - inet6/filter/limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 - inet/filter/logdrop-76 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-76 -m limit --limit 1/second -j LOG - inet/filter/logdrop-76 -j DROP - inet6/filter/logdrop-76 -j DROP - inet/filter/limit-183 -m limit --limit 1/second -j LOG - inet6/filter/limit-183 -m limit --limit 1/second -j LOG - -Filter 479 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-184 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-184 - inet/filter/limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 - inet6/filter/limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 - inet/filter/logdrop-77 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-77 -m limit --limit 1/second -j LOG - inet/filter/logdrop-77 -j DROP - inet6/filter/logdrop-77 -j DROP - inet/filter/limit-184 -j ACCEPT - inet6/filter/limit-184 -j ACCEPT - -Filter 480 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-185 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-185 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-185 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-185 - inet/filter/limit-185 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 - inet6/filter/limit-185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78 - inet/filter/logdrop-78 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-78 -m limit --limit 1/second -j LOG - inet/filter/logdrop-78 -j DROP - inet6/filter/logdrop-78 -j DROP - -Filter 481 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-186 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-186 - inet/filter/limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 - inet6/filter/limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 - inet/filter/logdrop-79 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-79 -m limit --limit 1/second -j LOG - inet/filter/logdrop-79 -j DROP - inet6/filter/logdrop-79 -j DROP - inet/filter/limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 482 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-187 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-187 - inet/filter/limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 - inet6/filter/limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 - inet/filter/logdrop-80 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-80 -m limit --limit 1/second -j LOG - inet/filter/logdrop-80 -j DROP - inet6/filter/logdrop-80 -j DROP - inet/filter/limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 483 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-188 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-188 - inet/filter/limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 - inet6/filter/limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 - inet/filter/logdrop-81 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-81 -m limit --limit 1/second -j LOG - inet/filter/logdrop-81 -j DROP - inet6/filter/logdrop-81 -j DROP - inet/filter/limit-188 -m limit --limit 1/second -j LOG - inet6/filter/limit-188 -m limit --limit 1/second -j LOG - inet/filter/limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 484 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-189 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-189 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-189 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-189 - inet/filter/limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 - inet6/filter/limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 - inet/filter/logdrop-82 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-82 -m limit --limit 1/second -j LOG - inet/filter/logdrop-82 -j DROP - inet6/filter/logdrop-82 -j DROP - inet/filter/limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 485 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-190 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-190 - inet/filter/limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 - inet6/filter/limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 - inet/filter/logdrop-83 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-83 -m limit --limit 1/second -j LOG - inet/filter/logdrop-83 -j DROP - inet6/filter/logdrop-83 -j DROP - inet/filter/limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 486 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-191 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-191 - inet/filter/limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-84 - inet6/filter/limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-84 - inet/filter/logdrop-84 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-84 -m limit --limit 1/second -j LOG - inet/filter/logdrop-84 -j DROP - inet6/filter/logdrop-84 -j DROP - inet/filter/limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 487 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-192 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-192 - inet/filter/limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 - inet6/filter/limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 - inet/filter/logdrop-85 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-85 -m limit --limit 1/second -j LOG - inet/filter/logdrop-85 -j DROP - inet6/filter/logdrop-85 -j DROP - inet/filter/limit-192 -j ACCEPT - inet6/filter/limit-192 -j ACCEPT - -Filter 488 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-193 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-193 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-193 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-193 - inet/filter/limit-193 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 - inet6/filter/limit-193 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 - inet/filter/logdrop-86 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-86 -m limit --limit 1/second -j LOG - inet/filter/logdrop-86 -j DROP - inet6/filter/logdrop-86 -j DROP - -Filter 489 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-194 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-194 - inet/filter/limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 - inet6/filter/limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 - inet/filter/logdrop-87 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-87 -m limit --limit 1/second -j LOG - inet/filter/logdrop-87 -j DROP - inet6/filter/logdrop-87 -j DROP - inet/filter/limit-194 -m limit --limit 1/second -j LOG - inet6/filter/limit-194 -m limit --limit 1/second -j LOG - inet/filter/limit-194 -j ACCEPT - inet6/filter/limit-194 -j ACCEPT - -Filter 490 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-195 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-195 - inet/filter/limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 - inet6/filter/limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 - inet/filter/logdrop-88 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-88 -m limit --limit 1/second -j LOG - inet/filter/logdrop-88 -j DROP - inet6/filter/logdrop-88 -j DROP - inet/filter/limit-195 -m limit --limit 1/second -j LOG - inet6/filter/limit-195 -m limit --limit 1/second -j LOG - -Filter 491 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-196 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-196 - inet/filter/limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 - inet6/filter/limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 - inet/filter/logdrop-89 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-89 -m limit --limit 1/second -j LOG - inet/filter/logdrop-89 -j DROP - inet6/filter/logdrop-89 -j DROP - inet/filter/limit-196 -j ACCEPT - inet6/filter/limit-196 -j ACCEPT - -Filter 492 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-197 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-197 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-197 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-197 - inet/filter/limit-197 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 - inet6/filter/limit-197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90 - inet/filter/logdrop-90 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-90 -m limit --limit 1/second -j LOG - inet/filter/logdrop-90 -j DROP - inet6/filter/logdrop-90 -j DROP - -Filter 493 {"conn-limit":{"interval":5,"name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-198 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-198 - inet/filter/limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 - inet6/filter/limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 - inet/filter/logdrop-91 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-91 -m limit --limit 1/second -j LOG - inet/filter/logdrop-91 -j DROP - inet6/filter/logdrop-91 -j DROP - inet/filter/limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 494 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-199 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-199 - inet/filter/limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 - inet6/filter/limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 - inet/filter/logdrop-92 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-92 -m limit --limit 1/second -j LOG - inet/filter/logdrop-92 -j DROP - inet6/filter/logdrop-92 -j DROP - inet/filter/limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-199 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 495 {"conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-200 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-200 - inet/filter/limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 - inet6/filter/limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 - inet/filter/logdrop-93 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-93 -m limit --limit 1/second -j LOG - inet/filter/logdrop-93 -j DROP - inet6/filter/logdrop-93 -j DROP - inet/filter/limit-200 -m limit --limit 1/second -j LOG - inet6/filter/limit-200 -m limit --limit 1/second -j LOG - inet/filter/limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-200 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 496 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-201 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-201 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-201 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-201 - inet/filter/limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 - inet6/filter/limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 - inet/filter/logdrop-94 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-94 -m limit --limit 1/second -j LOG - inet/filter/logdrop-94 -j DROP - inet6/filter/logdrop-94 -j DROP - inet/filter/limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-201 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 497 {"conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-202 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-202 - inet/filter/limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 - inet6/filter/limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 - inet/filter/logdrop-95 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-95 -m limit --limit 1/second -j LOG - inet/filter/logdrop-95 -j DROP - inet6/filter/logdrop-95 -j DROP - inet/filter/limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-202 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 498 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-203 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-203 - inet/filter/limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-96 - inet6/filter/limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-96 - inet/filter/logdrop-96 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-96 -m limit --limit 1/second -j LOG - inet/filter/logdrop-96 -j DROP - inet6/filter/logdrop-96 -j DROP - inet/filter/limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-203 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 499 {"conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-204 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-204 - inet/filter/limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 - inet6/filter/limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 - inet/filter/logdrop-97 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-97 -m limit --limit 1/second -j LOG - inet/filter/logdrop-97 -j DROP - inet6/filter/logdrop-97 -j DROP - inet/filter/limit-204 -j ACCEPT - inet6/filter/limit-204 -j ACCEPT - -Filter 500 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-205 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-205 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-205 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-205 - inet/filter/limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 - inet6/filter/limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 - inet/filter/logdrop-98 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-98 -m limit --limit 1/second -j LOG - inet/filter/logdrop-98 -j DROP - inet6/filter/logdrop-98 -j DROP - -Filter 501 {"conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-206 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-206 - inet/filter/limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 - inet6/filter/limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 - inet/filter/logdrop-99 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-99 -m limit --limit 1/second -j LOG - inet/filter/logdrop-99 -j DROP - inet6/filter/logdrop-99 -j DROP - inet/filter/limit-206 -m limit --limit 1/second -j LOG - inet6/filter/limit-206 -m limit --limit 1/second -j LOG - inet/filter/limit-206 -j ACCEPT - inet6/filter/limit-206 -j ACCEPT - -Filter 502 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-207 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-207 - inet/filter/limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 - inet6/filter/limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 - inet/filter/logdrop-100 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-100 -m limit --limit 1/second -j LOG - inet/filter/logdrop-100 -j DROP - inet6/filter/logdrop-100 -j DROP - inet/filter/limit-207 -m limit --limit 1/second -j LOG - inet6/filter/limit-207 -m limit --limit 1/second -j LOG - -Filter 503 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-208 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-208 - inet/filter/limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 - inet6/filter/limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 - inet/filter/logdrop-101 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-101 -m limit --limit 1/second -j LOG - inet/filter/logdrop-101 -j DROP - inet6/filter/logdrop-101 -j DROP - inet/filter/limit-208 -j ACCEPT - inet6/filter/limit-208 -j ACCEPT - -Filter 504 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-209 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-209 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-209 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-209 - inet/filter/limit-209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 - inet6/filter/limit-209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102 - inet/filter/logdrop-102 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-102 -m limit --limit 1/second -j LOG - inet/filter/logdrop-102 -j DROP - inet6/filter/logdrop-102 -j DROP - -Filter 505 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-210 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-210 - inet/filter/limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 - inet6/filter/limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 - inet/filter/logdrop-103 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-103 -m limit --limit 1/second -j LOG - inet/filter/logdrop-103 -j DROP - inet6/filter/logdrop-103 -j DROP - inet/filter/limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 506 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-211 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-211 - inet/filter/limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 - inet6/filter/limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 - inet/filter/logdrop-104 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-104 -m limit --limit 1/second -j LOG - inet/filter/logdrop-104 -j DROP - inet6/filter/logdrop-104 -j DROP - inet/filter/limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-211 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 507 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-212 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-212 - inet/filter/limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 - inet6/filter/limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 - inet/filter/logdrop-105 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-105 -m limit --limit 1/second -j LOG - inet/filter/logdrop-105 -j DROP - inet6/filter/logdrop-105 -j DROP - inet/filter/limit-212 -m limit --limit 1/second -j LOG - inet6/filter/limit-212 -m limit --limit 1/second -j LOG - inet/filter/limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 508 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-213 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-213 - inet/filter/limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 - inet6/filter/limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 - inet/filter/logdrop-106 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-106 -m limit --limit 1/second -j LOG - inet/filter/logdrop-106 -j DROP - inet6/filter/logdrop-106 -j DROP - inet/filter/limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-213 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 509 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-214 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-214 - inet/filter/limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 - inet6/filter/limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 - inet/filter/logdrop-107 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-107 -m limit --limit 1/second -j LOG - inet/filter/logdrop-107 -j DROP - inet6/filter/logdrop-107 -j DROP - inet/filter/limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 510 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-215 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-215 - inet/filter/limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-108 - inet6/filter/limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-108 - inet/filter/logdrop-108 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-108 -m limit --limit 1/second -j LOG - inet/filter/logdrop-108 -j DROP - inet6/filter/logdrop-108 -j DROP - inet/filter/limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-215 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 511 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-216 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-216 - inet/filter/limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 - inet6/filter/limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 - inet/filter/logdrop-109 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-109 -m limit --limit 1/second -j LOG - inet/filter/logdrop-109 -j DROP - inet6/filter/logdrop-109 -j DROP - inet/filter/limit-216 -j ACCEPT - inet6/filter/limit-216 -j ACCEPT - -Filter 512 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-217 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-217 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-217 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-217 - inet/filter/limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 - inet6/filter/limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 - inet/filter/logdrop-110 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-110 -m limit --limit 1/second -j LOG - inet/filter/logdrop-110 -j DROP - inet6/filter/logdrop-110 -j DROP - -Filter 513 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-218 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-218 - inet/filter/limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 - inet6/filter/limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 - inet/filter/logdrop-111 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-111 -m limit --limit 1/second -j LOG - inet/filter/logdrop-111 -j DROP - inet6/filter/logdrop-111 -j DROP - inet/filter/limit-218 -m limit --limit 1/second -j LOG - inet6/filter/limit-218 -m limit --limit 1/second -j LOG - inet/filter/limit-218 -j ACCEPT - inet6/filter/limit-218 -j ACCEPT - -Filter 514 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-219 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-219 - inet/filter/limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 - inet6/filter/limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 - inet/filter/logdrop-112 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-112 -m limit --limit 1/second -j LOG - inet/filter/logdrop-112 -j DROP - inet6/filter/logdrop-112 -j DROP - inet/filter/limit-219 -m limit --limit 1/second -j LOG - inet6/filter/limit-219 -m limit --limit 1/second -j LOG - -Filter 515 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-220 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-220 - inet/filter/limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 - inet6/filter/limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 - inet/filter/logdrop-113 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-113 -m limit --limit 1/second -j LOG - inet/filter/logdrop-113 -j DROP - inet6/filter/logdrop-113 -j DROP - inet/filter/limit-220 -j ACCEPT - inet6/filter/limit-220 -j ACCEPT - -Filter 516 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-221 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-221 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-221 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-221 - inet/filter/limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 - inet6/filter/limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114 - inet/filter/logdrop-114 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-114 -m limit --limit 1/second -j LOG - inet/filter/logdrop-114 -j DROP - inet6/filter/logdrop-114 -j DROP - -Filter 517 {"conn-limit":{"interval":5,"log":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-222 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-222 - inet/filter/limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 518 {"action":"pass","conn-limit":{"interval":5,"log":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-223 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-223 - inet/filter/limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 519 {"conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-224 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-224 - inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-224 -m limit --limit 1/second -j LOG - inet6/filter/limit-224 -m limit --limit 1/second -j LOG - inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 520 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-225 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-225 - inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 521 {"conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-226 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-226 - inet/filter/limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 522 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-227 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-227 - inet/filter/limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 523 {"conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-228 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-228 - inet/filter/limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 524 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-229 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-229 - inet/filter/limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 525 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-230 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-230 - inet/filter/limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-230 -m limit --limit 1/second -j LOG - inet6/filter/limit-230 -m limit --limit 1/second -j LOG - inet/filter/limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 526 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-231 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-231 - inet/filter/limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 527 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-232 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-232 - inet/filter/limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 528 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-233 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-233 - inet/filter/limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 529 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-234 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-234 - inet/filter/limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-234 -j ACCEPT - inet6/filter/limit-234 -j ACCEPT - -Filter 530 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-235 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-235 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-235 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-235 - inet/filter/limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 531 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-236 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-236 - inet/filter/limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-236 -m limit --limit 1/second -j LOG - inet6/filter/limit-236 -m limit --limit 1/second -j LOG - inet/filter/limit-236 -j ACCEPT - inet6/filter/limit-236 -j ACCEPT - -Filter 532 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-237 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-237 - inet/filter/limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-237 -m limit --limit 1/second -j LOG - inet6/filter/limit-237 -m limit --limit 1/second -j LOG - -Filter 533 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-238 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-238 - inet/filter/limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-238 -j ACCEPT - inet6/filter/limit-238 -j ACCEPT - -Filter 534 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-239 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-239 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-239 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-239 - inet/filter/limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-239 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 535 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-240 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-240 - inet/filter/limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 536 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-241 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-241 - inet/filter/limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 537 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-242 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-242 - inet/filter/limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-242 -m limit --limit 1/second -j LOG - inet6/filter/limit-242 -m limit --limit 1/second -j LOG - inet/filter/limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 538 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-243 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-243 - inet/filter/limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 539 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-244 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-244 - inet/filter/limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 540 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-245 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-245 - inet/filter/limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 541 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-246 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-246 - inet/filter/limit-246 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-246 -j ACCEPT - inet6/filter/limit-246 -j ACCEPT - -Filter 542 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-247 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-247 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-247 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-247 - inet/filter/limit-247 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 543 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-248 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-248 - inet/filter/limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-248 -m limit --limit 1/second -j LOG - inet6/filter/limit-248 -m limit --limit 1/second -j LOG - inet/filter/limit-248 -j ACCEPT - inet6/filter/limit-248 -j ACCEPT - -Filter 544 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-249 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-249 - inet/filter/limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-249 -m limit --limit 1/second -j LOG - inet6/filter/limit-249 -m limit --limit 1/second -j LOG - -Filter 545 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-250 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-250 - inet/filter/limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-250 -j ACCEPT - inet6/filter/limit-250 -j ACCEPT - -Filter 546 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-251 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-251 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-251 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-251 - inet/filter/limit-251 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 547 {"conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-252 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-252 - inet/filter/limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-252 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-252 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 548 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-253 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-253 - inet/filter/limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-253 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-253 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 549 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-254 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-254 - inet/filter/limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-254 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-254 -m limit --limit 1/second -j LOG - inet6/filter/limit-254 -m limit --limit 1/second -j LOG - inet/filter/limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-254 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 550 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-255 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-255 - inet/filter/limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-255 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-255 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 551 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-256 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-256 - inet/filter/limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-256 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-256 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 552 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-257 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-257 - inet/filter/limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-257 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-257 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 553 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-258 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-258 - inet/filter/limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-258 -j ACCEPT - inet6/filter/limit-258 -j ACCEPT - -Filter 554 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-259 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-259 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-259 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-259 - inet/filter/limit-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 555 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-260 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-260 - inet/filter/limit-260 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-260 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-260 -m limit --limit 1/second -j LOG - inet6/filter/limit-260 -m limit --limit 1/second -j LOG - inet/filter/limit-260 -j ACCEPT - inet6/filter/limit-260 -j ACCEPT - -Filter 556 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-261 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-261 - inet/filter/limit-261 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-261 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-261 -m limit --limit 1/second -j LOG - inet6/filter/limit-261 -m limit --limit 1/second -j LOG - -Filter 557 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-262 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-262 - inet/filter/limit-262 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-262 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-262 -j ACCEPT - inet6/filter/limit-262 -j ACCEPT - -Filter 558 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-263 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-263 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-263 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-263 - inet/filter/limit-263 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-263 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 559 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-264 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-264 - inet/filter/limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 560 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-265 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-265 - inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-265 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 561 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-266 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-266 - inet/filter/limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-266 -m limit --limit 1/second -j LOG - inet6/filter/limit-266 -m limit --limit 1/second -j LOG - inet/filter/limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 562 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-267 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-267 - inet/filter/limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-267 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 563 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-268 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-268 - inet/filter/limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 564 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-269 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-269 - inet/filter/limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-269 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 565 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-270 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-270 - inet/filter/limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-270 -j ACCEPT - inet6/filter/limit-270 -j ACCEPT - -Filter 566 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-271 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-271 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-271 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-271 - inet/filter/limit-271 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-271 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 567 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-272 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-272 - inet/filter/limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-272 -m limit --limit 1/second -j LOG - inet6/filter/limit-272 -m limit --limit 1/second -j LOG - inet/filter/limit-272 -j ACCEPT - inet6/filter/limit-272 -j ACCEPT - -Filter 568 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-273 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-273 - inet/filter/limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-273 -m limit --limit 1/second -j LOG - inet6/filter/limit-273 -m limit --limit 1/second -j LOG - -Filter 569 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-274 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-274 - inet/filter/limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-274 -j ACCEPT - inet6/filter/limit-274 -j ACCEPT - -Filter 570 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-275 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-275 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-275 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-275 - inet/filter/limit-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 571 {"conn-limit":{"interval":5,"log":"none"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-276 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-276 - inet/filter/limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 572 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-277 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-277 - inet/filter/limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 573 {"conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-278 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-278 - inet/filter/limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-278 -m limit --limit 1/second -j LOG - inet6/filter/limit-278 -m limit --limit 1/second -j LOG - inet/filter/limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 574 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-279 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-279 - inet/filter/limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 575 {"conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-280 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-280 - inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 576 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-281 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-281 - inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 577 {"conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-282 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-282 - inet/filter/limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 578 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-283 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-283 - inet/filter/limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 579 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-284 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-284 - inet/filter/limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-284 -m limit --limit 1/second -j LOG - inet6/filter/limit-284 -m limit --limit 1/second -j LOG - inet/filter/limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 580 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-285 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-285 - inet/filter/limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 581 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-286 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-286 - inet/filter/limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 582 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-287 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-287 - inet/filter/limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 583 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-288 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-288 - inet/filter/limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-288 -j ACCEPT - inet6/filter/limit-288 -j ACCEPT - -Filter 584 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-289 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-289 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-289 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-289 - inet/filter/limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 585 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-290 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-290 - inet/filter/limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-290 -m limit --limit 1/second -j LOG - inet6/filter/limit-290 -m limit --limit 1/second -j LOG - inet/filter/limit-290 -j ACCEPT - inet6/filter/limit-290 -j ACCEPT - -Filter 586 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-291 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-291 - inet/filter/limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-291 -m limit --limit 1/second -j LOG - inet6/filter/limit-291 -m limit --limit 1/second -j LOG - -Filter 587 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-292 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-292 - inet/filter/limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-292 -j ACCEPT - inet6/filter/limit-292 -j ACCEPT - -Filter 588 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-293 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-293 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-293 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-293 - inet/filter/limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 589 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-294 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-294 - inet/filter/limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 590 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-295 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-295 - inet/filter/limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 591 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-296 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-296 - inet/filter/limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-296 -m limit --limit 1/second -j LOG - inet6/filter/limit-296 -m limit --limit 1/second -j LOG - inet/filter/limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 592 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-297 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-297 - inet/filter/limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 593 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-298 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-298 - inet/filter/limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 594 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-299 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-299 - inet/filter/limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 595 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-300 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-300 - inet/filter/limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-300 -j ACCEPT - inet6/filter/limit-300 -j ACCEPT - -Filter 596 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-301 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-301 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-301 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-301 - inet/filter/limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 597 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-302 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-302 - inet/filter/limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-302 -m limit --limit 1/second -j LOG - inet6/filter/limit-302 -m limit --limit 1/second -j LOG - inet/filter/limit-302 -j ACCEPT - inet6/filter/limit-302 -j ACCEPT - -Filter 598 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-303 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-303 - inet/filter/limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-303 -m limit --limit 1/second -j LOG - inet6/filter/limit-303 -m limit --limit 1/second -j LOG - -Filter 599 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-304 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-304 - inet/filter/limit-304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-304 -j ACCEPT - inet6/filter/limit-304 -j ACCEPT - -Filter 600 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-305 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-305 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-305 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-305 - inet/filter/limit-305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 601 {"conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-306 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-306 - inet/filter/limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 602 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-307 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-307 - inet/filter/limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-307 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 603 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-308 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-308 - inet/filter/limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-308 -m limit --limit 1/second -j LOG - inet6/filter/limit-308 -m limit --limit 1/second -j LOG - inet/filter/limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 604 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-309 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-309 - inet/filter/limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 605 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-310 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-310 - inet/filter/limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 606 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-311 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-311 - inet/filter/limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-311 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 607 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-312 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-312 - inet/filter/limit-312 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-312 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-312 -j ACCEPT - inet6/filter/limit-312 -j ACCEPT - -Filter 608 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-313 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-313 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-313 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-313 - inet/filter/limit-313 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-313 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 609 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-314 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-314 - inet/filter/limit-314 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-314 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-314 -m limit --limit 1/second -j LOG - inet6/filter/limit-314 -m limit --limit 1/second -j LOG - inet/filter/limit-314 -j ACCEPT - inet6/filter/limit-314 -j ACCEPT - -Filter 610 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-315 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-315 - inet/filter/limit-315 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-315 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-315 -m limit --limit 1/second -j LOG - inet6/filter/limit-315 -m limit --limit 1/second -j LOG - -Filter 611 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-316 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-316 - inet/filter/limit-316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-316 -j ACCEPT - inet6/filter/limit-316 -j ACCEPT - -Filter 612 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-317 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-317 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-317 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-317 - inet/filter/limit-317 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-317 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 613 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-318 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-318 - inet/filter/limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-318 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-318 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 614 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-319 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-319 - inet/filter/limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-319 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-319 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 615 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-320 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-320 - inet/filter/limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-320 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-320 -m limit --limit 1/second -j LOG - inet6/filter/limit-320 -m limit --limit 1/second -j LOG - inet/filter/limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-320 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 616 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-321 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-321 - inet/filter/limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-321 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-321 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 617 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-322 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-322 - inet/filter/limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-322 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-322 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 618 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-323 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-323 - inet/filter/limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-323 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-323 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 619 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-324 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-324 - inet/filter/limit-324 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-324 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-324 -j ACCEPT - inet6/filter/limit-324 -j ACCEPT - -Filter 620 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-325 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-325 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-325 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-325 - inet/filter/limit-325 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-325 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 621 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-326 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-326 - inet/filter/limit-326 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-326 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-326 -m limit --limit 1/second -j LOG - inet6/filter/limit-326 -m limit --limit 1/second -j LOG - inet/filter/limit-326 -j ACCEPT - inet6/filter/limit-326 -j ACCEPT - -Filter 622 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-327 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-327 - inet/filter/limit-327 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-327 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-327 -m limit --limit 1/second -j LOG - inet6/filter/limit-327 -m limit --limit 1/second -j LOG - -Filter 623 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-328 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-328 - inet/filter/limit-328 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-328 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-328 -j ACCEPT - inet6/filter/limit-328 -j ACCEPT - -Filter 624 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-329 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-329 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-329 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-329 - inet/filter/limit-329 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-329 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 625 {"conn-limit":150,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-330 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-330 - inet/filter/limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-330 -j ACCEPT - inet6/filter/limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-330 -j ACCEPT - inet/filter/limit-330 -m limit --limit 1/second -j LOG - inet6/filter/limit-330 -m limit --limit 1/second -j LOG - inet/filter/limit-330 -j DROP - inet6/filter/limit-330 -j DROP - -Filter 626 {"action":"pass","conn-limit":150,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-331 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-331 - inet/filter/limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-331 -j RETURN - inet6/filter/limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j RETURN - inet/filter/limit-331 -m limit --limit 1/second -j LOG - inet6/filter/limit-331 -m limit --limit 1/second -j LOG - inet/filter/limit-331 -j DROP - inet6/filter/limit-331 -j DROP - -Filter 627 {"conn-limit":150,"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-332 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-332 - inet/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-63 - inet6/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-63 - inet/filter/logaccept-63 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-63 -m limit --limit 1/second -j LOG - inet/filter/logaccept-63 -j ACCEPT - inet6/filter/logaccept-63 -j ACCEPT - inet/filter/limit-332 -m limit --limit 1/second -j LOG - inet6/filter/limit-332 -m limit --limit 1/second -j LOG - inet/filter/limit-332 -j DROP - inet6/filter/limit-332 -j DROP - -Filter 628 {"conn-limit":150,"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-333 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-333 - inet/filter/limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-333 -j ACCEPT - inet6/filter/limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j ACCEPT - inet/filter/limit-333 -m limit --limit 1/second -j LOG - inet6/filter/limit-333 -m limit --limit 1/second -j LOG - inet/filter/limit-333 -j DROP - inet6/filter/limit-333 -j DROP - -Filter 629 {"conn-limit":{"count":150},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-334 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-334 - inet/filter/limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-334 -j ACCEPT - inet6/filter/limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-334 -j ACCEPT - inet/filter/limit-334 -m limit --limit 1/second -j LOG - inet6/filter/limit-334 -m limit --limit 1/second -j LOG - inet/filter/limit-334 -j DROP - inet6/filter/limit-334 -j DROP - -Filter 630 {"action":"pass","conn-limit":{"count":150},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-335 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-335 - inet/filter/limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-335 -j RETURN - inet6/filter/limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j RETURN - inet/filter/limit-335 -m limit --limit 1/second -j LOG - inet6/filter/limit-335 -m limit --limit 1/second -j LOG - inet/filter/limit-335 -j DROP - inet6/filter/limit-335 -j DROP - -Filter 631 {"conn-limit":{"count":150},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-336 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-336 - inet/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-64 - inet6/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-64 - inet/filter/logaccept-64 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-64 -m limit --limit 1/second -j LOG - inet/filter/logaccept-64 -j ACCEPT - inet6/filter/logaccept-64 -j ACCEPT - inet/filter/limit-336 -m limit --limit 1/second -j LOG - inet6/filter/limit-336 -m limit --limit 1/second -j LOG - inet/filter/limit-336 -j DROP - inet6/filter/limit-336 -j DROP - -Filter 632 {"conn-limit":{"count":150},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-337 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-337 - inet/filter/limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-337 -j ACCEPT - inet6/filter/limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-337 -j ACCEPT - inet/filter/limit-337 -m limit --limit 1/second -j LOG - inet6/filter/limit-337 -m limit --limit 1/second -j LOG - inet/filter/limit-337 -j DROP - inet6/filter/limit-337 -j DROP - -Filter 633 {"conn-limit":{"count":150,"log":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-338 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-338 - inet/filter/limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-338 -j ACCEPT - inet6/filter/limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-338 -j ACCEPT - inet/filter/limit-338 -j DROP - inet6/filter/limit-338 -j DROP - -Filter 634 {"action":"pass","conn-limit":{"count":150,"log":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-339 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-339 - inet/filter/limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-339 -j RETURN - inet6/filter/limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-339 -j RETURN - inet/filter/limit-339 -j DROP - inet6/filter/limit-339 -j DROP - -Filter 635 {"conn-limit":{"count":150,"log":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-340 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-340 - inet/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-65 - inet6/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-65 - inet/filter/logaccept-65 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-65 -m limit --limit 1/second -j LOG - inet/filter/logaccept-65 -j ACCEPT - inet6/filter/logaccept-65 -j ACCEPT - inet/filter/limit-340 -j DROP - inet6/filter/limit-340 -j DROP - -Filter 636 {"conn-limit":{"count":150,"log":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-341 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-341 - inet/filter/limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-341 -j ACCEPT - inet6/filter/limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-341 -j ACCEPT - inet/filter/limit-341 -j DROP - inet6/filter/limit-341 -j DROP - -Filter 637 {"conn-limit":{"count":150,"log":"none"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-342 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-342 - inet/filter/limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-342 -j ACCEPT - inet6/filter/limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-342 -j ACCEPT - inet/filter/limit-342 -j DROP - inet6/filter/limit-342 -j DROP - -Filter 638 {"action":"pass","conn-limit":{"count":150,"log":"none"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-343 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-343 - inet/filter/limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-343 -j RETURN - inet6/filter/limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-343 -j RETURN - inet/filter/limit-343 -j DROP - inet6/filter/limit-343 -j DROP - -Filter 639 {"conn-limit":{"count":150,"log":"none"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-344 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-344 - inet/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-66 - inet6/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-66 - inet/filter/logaccept-66 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-66 -m limit --limit 1/second -j LOG - inet/filter/logaccept-66 -j ACCEPT - inet6/filter/logaccept-66 -j ACCEPT - inet/filter/limit-344 -j DROP - inet6/filter/limit-344 -j DROP - -Filter 640 {"conn-limit":{"count":150,"log":"none"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-345 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-345 - inet/filter/limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-345 -j ACCEPT - inet6/filter/limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-345 -j ACCEPT - inet/filter/limit-345 -j DROP - inet6/filter/limit-345 -j DROP - -Filter 641 {"conn-limit":{"count":150,"interval":5},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-346 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-346 - inet/filter/limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-346 -j ACCEPT - inet6/filter/limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-346 -j ACCEPT - inet/filter/limit-346 -m limit --limit 1/second -j LOG - inet6/filter/limit-346 -m limit --limit 1/second -j LOG - inet/filter/limit-346 -j DROP - inet6/filter/limit-346 -j DROP - -Filter 642 {"action":"pass","conn-limit":{"count":150,"interval":5},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-347 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-347 - inet/filter/limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-347 -j RETURN - inet6/filter/limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-347 -j RETURN - inet/filter/limit-347 -m limit --limit 1/second -j LOG - inet6/filter/limit-347 -m limit --limit 1/second -j LOG - inet/filter/limit-347 -j DROP - inet6/filter/limit-347 -j DROP - -Filter 643 {"conn-limit":{"count":150,"interval":5},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-348 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-348 - inet/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-67 - inet6/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-67 - inet/filter/logaccept-67 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-67 -m limit --limit 1/second -j LOG - inet/filter/logaccept-67 -j ACCEPT - inet6/filter/logaccept-67 -j ACCEPT - inet/filter/limit-348 -m limit --limit 1/second -j LOG - inet6/filter/limit-348 -m limit --limit 1/second -j LOG - inet/filter/limit-348 -j DROP - inet6/filter/limit-348 -j DROP - -Filter 644 {"conn-limit":{"count":150,"interval":5},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-349 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-349 - inet/filter/limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-349 -j ACCEPT - inet6/filter/limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-349 -j ACCEPT - inet/filter/limit-349 -m limit --limit 1/second -j LOG - inet6/filter/limit-349 -m limit --limit 1/second -j LOG - inet/filter/limit-349 -j DROP - inet6/filter/limit-349 -j DROP - -Filter 645 {"conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-350 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-350 - inet/filter/limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-350 -j ACCEPT - inet6/filter/limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-350 -j ACCEPT - inet/filter/limit-350 -j DROP - inet6/filter/limit-350 -j DROP - -Filter 646 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-351 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-351 - inet/filter/limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-351 -j RETURN - inet6/filter/limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-351 -j RETURN - inet/filter/limit-351 -j DROP - inet6/filter/limit-351 -j DROP - -Filter 647 {"conn-limit":{"count":150,"interval":5,"log":false},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-352 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-352 - inet/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-68 - inet6/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-68 - inet/filter/logaccept-68 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-68 -m limit --limit 1/second -j LOG - inet/filter/logaccept-68 -j ACCEPT - inet6/filter/logaccept-68 -j ACCEPT - inet/filter/limit-352 -j DROP - inet6/filter/limit-352 -j DROP - -Filter 648 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-353 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-353 - inet/filter/limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-353 -j ACCEPT - inet6/filter/limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-353 -j ACCEPT - inet/filter/limit-353 -j DROP - inet6/filter/limit-353 -j DROP - -Filter 649 {"conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-354 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-354 - inet/filter/limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-354 -j ACCEPT - inet6/filter/limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-354 -j ACCEPT - inet/filter/limit-354 -j DROP - inet6/filter/limit-354 -j DROP - -Filter 650 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-355 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-355 - inet/filter/limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-355 -j RETURN - inet6/filter/limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-355 -j RETURN - inet/filter/limit-355 -j DROP - inet6/filter/limit-355 -j DROP - -Filter 651 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":true,"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-356 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-356 - inet/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-69 - inet6/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-69 - inet/filter/logaccept-69 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-69 -m limit --limit 1/second -j LOG - inet/filter/logaccept-69 -j ACCEPT - inet6/filter/logaccept-69 -j ACCEPT - inet/filter/limit-356 -j DROP - inet6/filter/limit-356 -j DROP - -Filter 652 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-357 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-357 - inet/filter/limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-357 -j ACCEPT - inet6/filter/limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-357 -j ACCEPT - inet/filter/limit-357 -j DROP - inet6/filter/limit-357 -j DROP - -Filter 653 {"conn-limit":1,"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-358 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-358 - inet/filter/limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 - inet6/filter/limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 - inet/filter/logdrop-115 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-115 -m limit --limit 1/second -j LOG - inet/filter/logdrop-115 -j DROP - inet6/filter/logdrop-115 -j DROP - inet/filter/limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 654 {"action":"pass","conn-limit":1,"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-359 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-359 - inet/filter/limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 - inet6/filter/limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 - inet/filter/logdrop-116 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-116 -m limit --limit 1/second -j LOG - inet/filter/logdrop-116 -j DROP - inet6/filter/logdrop-116 -j DROP - inet/filter/limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 655 {"conn-limit":1,"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-360 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-360 - inet/filter/limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 - inet6/filter/limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 - inet/filter/logdrop-117 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-117 -m limit --limit 1/second -j LOG - inet/filter/logdrop-117 -j DROP - inet6/filter/logdrop-117 -j DROP - inet/filter/limit-360 -m limit --limit 1/second -j LOG - inet6/filter/limit-360 -m limit --limit 1/second -j LOG - inet/filter/limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 656 {"action":"pass","conn-limit":1,"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-361 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-361 - inet/filter/limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 - inet6/filter/limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 - inet/filter/logdrop-118 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-118 -m limit --limit 1/second -j LOG - inet/filter/logdrop-118 -j DROP - inet6/filter/logdrop-118 -j DROP - inet/filter/limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 657 {"conn-limit":1,"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-362 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-362 - inet/filter/limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 - inet6/filter/limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 - inet/filter/logdrop-119 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-119 -m limit --limit 1/second -j LOG - inet/filter/logdrop-119 -j DROP - inet6/filter/logdrop-119 -j DROP - inet/filter/limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 658 {"action":"pass","conn-limit":1,"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-363 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-363 - inet/filter/limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 - inet6/filter/limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 - inet/filter/logdrop-120 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-120 -m limit --limit 1/second -j LOG - inet/filter/logdrop-120 -j DROP - inet6/filter/logdrop-120 -j DROP - inet/filter/limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 659 {"conn-limit":{},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-364 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-364 - inet/filter/limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 - inet6/filter/limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 - inet/filter/logdrop-121 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-121 -m limit --limit 1/second -j LOG - inet/filter/logdrop-121 -j DROP - inet6/filter/logdrop-121 -j DROP - inet/filter/limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 660 {"action":"pass","conn-limit":{},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-365 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-365 - inet/filter/limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 - inet6/filter/limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 - inet/filter/logdrop-122 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-122 -m limit --limit 1/second -j LOG - inet/filter/logdrop-122 -j DROP - inet6/filter/logdrop-122 -j DROP - inet/filter/limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 661 {"conn-limit":{},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-366 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-366 - inet/filter/limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 - inet6/filter/limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 - inet/filter/logdrop-123 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-123 -m limit --limit 1/second -j LOG - inet/filter/logdrop-123 -j DROP - inet6/filter/logdrop-123 -j DROP - inet/filter/limit-366 -m limit --limit 1/second -j LOG - inet6/filter/limit-366 -m limit --limit 1/second -j LOG - inet/filter/limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 662 {"action":"pass","conn-limit":{},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-367 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-367 - inet/filter/limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 - inet6/filter/limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 - inet/filter/logdrop-124 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-124 -m limit --limit 1/second -j LOG - inet/filter/logdrop-124 -j DROP - inet6/filter/logdrop-124 -j DROP - inet/filter/limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 663 {"conn-limit":{},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-368 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-368 - inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 - inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 - inet/filter/logdrop-125 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-125 -m limit --limit 1/second -j LOG - inet/filter/logdrop-125 -j DROP - inet6/filter/logdrop-125 -j DROP - inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 664 {"action":"pass","conn-limit":{},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-369 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-369 - inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 - inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 - inet/filter/logdrop-126 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-126 -m limit --limit 1/second -j LOG - inet/filter/logdrop-126 -j DROP - inet6/filter/logdrop-126 -j DROP - inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 665 {"conn-limit":{"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-370 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-370 - inet/filter/limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 - inet6/filter/limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 - inet/filter/logdrop-127 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-127 -m limit --limit 1/second -j LOG - inet/filter/logdrop-127 -j DROP - inet6/filter/logdrop-127 -j DROP - inet/filter/limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 666 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-371 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-371 - inet/filter/limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 - inet6/filter/limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 - inet/filter/logdrop-128 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-128 -m limit --limit 1/second -j LOG - inet/filter/logdrop-128 -j DROP - inet6/filter/logdrop-128 -j DROP - inet/filter/limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 667 {"conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-372 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-372 - inet/filter/limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 - inet6/filter/limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 - inet/filter/logdrop-129 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-129 -m limit --limit 1/second -j LOG - inet/filter/logdrop-129 -j DROP - inet6/filter/logdrop-129 -j DROP - inet/filter/limit-372 -m limit --limit 1/second -j LOG - inet6/filter/limit-372 -m limit --limit 1/second -j LOG - inet/filter/limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 668 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-373 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-373 - inet/filter/limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 - inet6/filter/limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 - inet/filter/logdrop-130 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-130 -m limit --limit 1/second -j LOG - inet/filter/logdrop-130 -j DROP - inet6/filter/logdrop-130 -j DROP - inet/filter/limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 669 {"conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-374 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-374 - inet/filter/limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 - inet6/filter/limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 - inet/filter/logdrop-131 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-131 -m limit --limit 1/second -j LOG - inet/filter/logdrop-131 -j DROP - inet6/filter/logdrop-131 -j DROP - inet/filter/limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 670 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-375 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-375 - inet/filter/limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 - inet6/filter/limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 - inet/filter/logdrop-132 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-132 -m limit --limit 1/second -j LOG - inet/filter/logdrop-132 -j DROP - inet6/filter/logdrop-132 -j DROP - inet/filter/limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 671 {"conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-376 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-376 - inet/filter/limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 - inet6/filter/limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 - inet/filter/logdrop-133 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-133 -m limit --limit 1/second -j LOG - inet/filter/logdrop-133 -j DROP - inet6/filter/logdrop-133 -j DROP - inet/filter/limit-376 -j ACCEPT - inet6/filter/limit-376 -j ACCEPT - -Filter 672 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 - inet/filter/logdrop-134 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-134 -m limit --limit 1/second -j LOG - inet/filter/logdrop-134 -j DROP - inet6/filter/logdrop-134 -j DROP - -Filter 673 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-378 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-378 - inet/filter/limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 - inet6/filter/limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 - inet/filter/logdrop-135 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-135 -m limit --limit 1/second -j LOG - inet/filter/logdrop-135 -j DROP - inet6/filter/logdrop-135 -j DROP - inet/filter/limit-378 -m limit --limit 1/second -j LOG - inet6/filter/limit-378 -m limit --limit 1/second -j LOG - inet/filter/limit-378 -j ACCEPT - inet6/filter/limit-378 -j ACCEPT - -Filter 674 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-379 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-379 - inet/filter/limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 - inet6/filter/limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 - inet/filter/logdrop-136 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-136 -m limit --limit 1/second -j LOG - inet/filter/logdrop-136 -j DROP - inet6/filter/logdrop-136 -j DROP - inet/filter/limit-379 -m limit --limit 1/second -j LOG - inet6/filter/limit-379 -m limit --limit 1/second -j LOG - -Filter 675 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-380 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-380 - inet/filter/limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 - inet6/filter/limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 - inet/filter/logdrop-137 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-137 -m limit --limit 1/second -j LOG - inet/filter/logdrop-137 -j DROP - inet6/filter/logdrop-137 -j DROP - inet/filter/limit-380 -j ACCEPT - inet6/filter/limit-380 -j ACCEPT - -Filter 676 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-138 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-138 - inet/filter/logdrop-138 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-138 -m limit --limit 1/second -j LOG - inet/filter/logdrop-138 -j DROP - inet6/filter/logdrop-138 -j DROP - -Filter 677 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-382 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-382 - inet/filter/limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 - inet6/filter/limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 - inet/filter/logdrop-139 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-139 -m limit --limit 1/second -j LOG - inet/filter/logdrop-139 -j DROP - inet6/filter/logdrop-139 -j DROP - inet/filter/limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 678 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-383 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-383 - inet/filter/limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 - inet6/filter/limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 - inet/filter/logdrop-140 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-140 -m limit --limit 1/second -j LOG - inet/filter/logdrop-140 -j DROP - inet6/filter/logdrop-140 -j DROP - inet/filter/limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 679 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-384 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-384 - inet/filter/limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 - inet6/filter/limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 - inet/filter/logdrop-141 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-141 -m limit --limit 1/second -j LOG - inet/filter/logdrop-141 -j DROP - inet6/filter/logdrop-141 -j DROP - inet/filter/limit-384 -m limit --limit 1/second -j LOG - inet6/filter/limit-384 -m limit --limit 1/second -j LOG - inet/filter/limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 680 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-385 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-385 - inet/filter/limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 - inet6/filter/limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 - inet/filter/logdrop-142 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-142 -m limit --limit 1/second -j LOG - inet/filter/logdrop-142 -j DROP - inet6/filter/logdrop-142 -j DROP - inet/filter/limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 681 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-386 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-386 - inet/filter/limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 - inet6/filter/limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 - inet/filter/logdrop-143 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-143 -m limit --limit 1/second -j LOG - inet/filter/logdrop-143 -j DROP - inet6/filter/logdrop-143 -j DROP - inet/filter/limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 682 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-387 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-387 - inet/filter/limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-144 - inet6/filter/limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-144 - inet/filter/logdrop-144 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-144 -m limit --limit 1/second -j LOG - inet/filter/logdrop-144 -j DROP - inet6/filter/logdrop-144 -j DROP - inet/filter/limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 683 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-388 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-388 - inet/filter/limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 - inet6/filter/limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 - inet/filter/logdrop-145 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-145 -m limit --limit 1/second -j LOG - inet/filter/logdrop-145 -j DROP - inet6/filter/logdrop-145 -j DROP - inet/filter/limit-388 -j ACCEPT - inet6/filter/limit-388 -j ACCEPT - -Filter 684 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 - inet/filter/logdrop-146 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-146 -m limit --limit 1/second -j LOG - inet/filter/logdrop-146 -j DROP - inet6/filter/logdrop-146 -j DROP - -Filter 685 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-390 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-390 - inet/filter/limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 - inet6/filter/limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 - inet/filter/logdrop-147 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-147 -m limit --limit 1/second -j LOG - inet/filter/logdrop-147 -j DROP - inet6/filter/logdrop-147 -j DROP - inet/filter/limit-390 -m limit --limit 1/second -j LOG - inet6/filter/limit-390 -m limit --limit 1/second -j LOG - inet/filter/limit-390 -j ACCEPT - inet6/filter/limit-390 -j ACCEPT - -Filter 686 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-391 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-391 - inet/filter/limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 - inet6/filter/limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 - inet/filter/logdrop-148 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-148 -m limit --limit 1/second -j LOG - inet/filter/logdrop-148 -j DROP - inet6/filter/logdrop-148 -j DROP - inet/filter/limit-391 -m limit --limit 1/second -j LOG - inet6/filter/limit-391 -m limit --limit 1/second -j LOG - -Filter 687 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-392 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-392 - inet/filter/limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 - inet6/filter/limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 - inet/filter/logdrop-149 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-149 -m limit --limit 1/second -j LOG - inet/filter/logdrop-149 -j DROP - inet6/filter/logdrop-149 -j DROP - inet/filter/limit-392 -j ACCEPT - inet6/filter/limit-392 -j ACCEPT - -Filter 688 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-150 - inet/filter/logdrop-150 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-150 -m limit --limit 1/second -j LOG - inet/filter/logdrop-150 -j DROP - inet6/filter/logdrop-150 -j DROP - -Filter 689 {"conn-limit":{"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-394 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-394 - inet/filter/limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 - inet6/filter/limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 - inet/filter/logdrop-151 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-151 -m limit --limit 1/second -j LOG - inet/filter/logdrop-151 -j DROP - inet6/filter/logdrop-151 -j DROP - inet/filter/limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-394 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 690 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-395 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-395 - inet/filter/limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 - inet6/filter/limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 - inet/filter/logdrop-152 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-152 -m limit --limit 1/second -j LOG - inet/filter/logdrop-152 -j DROP - inet6/filter/logdrop-152 -j DROP - inet/filter/limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-395 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 691 {"conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-396 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-396 - inet/filter/limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 - inet6/filter/limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 - inet/filter/logdrop-153 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-153 -m limit --limit 1/second -j LOG - inet/filter/logdrop-153 -j DROP - inet6/filter/logdrop-153 -j DROP - inet/filter/limit-396 -m limit --limit 1/second -j LOG - inet6/filter/limit-396 -m limit --limit 1/second -j LOG - inet/filter/limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 692 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-397 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-397 - inet/filter/limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 - inet6/filter/limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 - inet/filter/logdrop-154 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-154 -m limit --limit 1/second -j LOG - inet/filter/logdrop-154 -j DROP - inet6/filter/logdrop-154 -j DROP - inet/filter/limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 693 {"conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-398 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-398 - inet/filter/limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 - inet6/filter/limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 - inet/filter/logdrop-155 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-155 -m limit --limit 1/second -j LOG - inet/filter/logdrop-155 -j DROP - inet6/filter/logdrop-155 -j DROP - inet/filter/limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 694 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-399 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-399 - inet/filter/limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 - inet6/filter/limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 - inet/filter/logdrop-156 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-156 -m limit --limit 1/second -j LOG - inet/filter/logdrop-156 -j DROP - inet6/filter/logdrop-156 -j DROP - inet/filter/limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-399 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 695 {"conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-400 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-400 - inet/filter/limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 - inet6/filter/limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 - inet/filter/logdrop-157 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-157 -m limit --limit 1/second -j LOG - inet/filter/logdrop-157 -j DROP - inet6/filter/logdrop-157 -j DROP - inet/filter/limit-400 -j ACCEPT - inet6/filter/limit-400 -j ACCEPT - -Filter 696 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 - inet/filter/logdrop-158 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-158 -m limit --limit 1/second -j LOG - inet/filter/logdrop-158 -j DROP - inet6/filter/logdrop-158 -j DROP - -Filter 697 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-402 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-402 - inet/filter/limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 - inet6/filter/limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 - inet/filter/logdrop-159 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-159 -m limit --limit 1/second -j LOG - inet/filter/logdrop-159 -j DROP - inet6/filter/logdrop-159 -j DROP - inet/filter/limit-402 -m limit --limit 1/second -j LOG - inet6/filter/limit-402 -m limit --limit 1/second -j LOG - inet/filter/limit-402 -j ACCEPT - inet6/filter/limit-402 -j ACCEPT - -Filter 698 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-403 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-403 - inet/filter/limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 - inet6/filter/limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 - inet/filter/logdrop-160 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-160 -m limit --limit 1/second -j LOG - inet/filter/logdrop-160 -j DROP - inet6/filter/logdrop-160 -j DROP - inet/filter/limit-403 -m limit --limit 1/second -j LOG - inet6/filter/limit-403 -m limit --limit 1/second -j LOG - -Filter 699 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-404 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-404 - inet/filter/limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 - inet6/filter/limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 - inet/filter/logdrop-161 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-161 -m limit --limit 1/second -j LOG - inet/filter/logdrop-161 -j DROP - inet6/filter/logdrop-161 -j DROP - inet/filter/limit-404 -j ACCEPT - inet6/filter/limit-404 -j ACCEPT - -Filter 700 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 - inet/filter/logdrop-162 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-162 -m limit --limit 1/second -j LOG - inet/filter/logdrop-162 -j DROP - inet6/filter/logdrop-162 -j DROP - -Filter 701 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-406 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-406 - inet/filter/limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 - inet6/filter/limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 - inet/filter/logdrop-163 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-163 -m limit --limit 1/second -j LOG - inet/filter/logdrop-163 -j DROP - inet6/filter/logdrop-163 -j DROP - inet/filter/limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-406 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 702 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-407 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-407 - inet/filter/limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 - inet6/filter/limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 - inet/filter/logdrop-164 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-164 -m limit --limit 1/second -j LOG - inet/filter/logdrop-164 -j DROP - inet6/filter/logdrop-164 -j DROP - inet/filter/limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-407 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 703 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-408 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-408 - inet/filter/limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 - inet6/filter/limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 - inet/filter/logdrop-165 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-165 -m limit --limit 1/second -j LOG - inet/filter/logdrop-165 -j DROP - inet6/filter/logdrop-165 -j DROP - inet/filter/limit-408 -m limit --limit 1/second -j LOG - inet6/filter/limit-408 -m limit --limit 1/second -j LOG - inet/filter/limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-408 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 704 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-409 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-409 - inet/filter/limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 - inet6/filter/limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 - inet/filter/logdrop-166 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-166 -m limit --limit 1/second -j LOG - inet/filter/logdrop-166 -j DROP - inet6/filter/logdrop-166 -j DROP - inet/filter/limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 705 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-410 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-410 - inet/filter/limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 - inet6/filter/limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 - inet/filter/logdrop-167 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-167 -m limit --limit 1/second -j LOG - inet/filter/logdrop-167 -j DROP - inet6/filter/logdrop-167 -j DROP - inet/filter/limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-410 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 706 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-411 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-411 - inet/filter/limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-168 - inet6/filter/limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-168 - inet/filter/logdrop-168 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-168 -m limit --limit 1/second -j LOG - inet/filter/logdrop-168 -j DROP - inet6/filter/logdrop-168 -j DROP - inet/filter/limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-411 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 707 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-412 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-412 - inet/filter/limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 - inet6/filter/limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 - inet/filter/logdrop-169 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-169 -m limit --limit 1/second -j LOG - inet/filter/logdrop-169 -j DROP - inet6/filter/logdrop-169 -j DROP - inet/filter/limit-412 -j ACCEPT - inet6/filter/limit-412 -j ACCEPT - -Filter 708 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 - inet/filter/logdrop-170 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-170 -m limit --limit 1/second -j LOG - inet/filter/logdrop-170 -j DROP - inet6/filter/logdrop-170 -j DROP - -Filter 709 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-414 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-414 - inet/filter/limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 - inet6/filter/limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 - inet/filter/logdrop-171 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-171 -m limit --limit 1/second -j LOG - inet/filter/logdrop-171 -j DROP - inet6/filter/logdrop-171 -j DROP - inet/filter/limit-414 -m limit --limit 1/second -j LOG - inet6/filter/limit-414 -m limit --limit 1/second -j LOG - inet/filter/limit-414 -j ACCEPT - inet6/filter/limit-414 -j ACCEPT - -Filter 710 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-415 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-415 - inet/filter/limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 - inet6/filter/limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 - inet/filter/logdrop-172 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-172 -m limit --limit 1/second -j LOG - inet/filter/logdrop-172 -j DROP - inet6/filter/logdrop-172 -j DROP - inet/filter/limit-415 -m limit --limit 1/second -j LOG - inet6/filter/limit-415 -m limit --limit 1/second -j LOG - -Filter 711 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-416 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-416 - inet/filter/limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 - inet6/filter/limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 - inet/filter/logdrop-173 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-173 -m limit --limit 1/second -j LOG - inet/filter/logdrop-173 -j DROP - inet6/filter/logdrop-173 -j DROP - inet/filter/limit-416 -j ACCEPT - inet6/filter/limit-416 -j ACCEPT - -Filter 712 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-174 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-174 - inet/filter/logdrop-174 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-174 -m limit --limit 1/second -j LOG - inet/filter/logdrop-174 -j DROP - inet6/filter/logdrop-174 -j DROP - -Filter 713 {"conn-limit":{"log":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-418 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-418 - inet/filter/limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 714 {"action":"pass","conn-limit":{"log":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-419 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-419 - inet/filter/limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 715 {"conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-420 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-420 - inet/filter/limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-420 -m limit --limit 1/second -j LOG - inet6/filter/limit-420 -m limit --limit 1/second -j LOG - inet/filter/limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 716 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-421 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-421 - inet/filter/limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 717 {"conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-422 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-422 - inet/filter/limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 718 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-423 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-423 - inet/filter/limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 719 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-424 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-424 - inet/filter/limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 720 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-425 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-425 - inet/filter/limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 721 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-426 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-426 - inet/filter/limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-426 -m limit --limit 1/second -j LOG - inet6/filter/limit-426 -m limit --limit 1/second -j LOG - inet/filter/limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 722 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-427 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-427 - inet/filter/limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 723 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-428 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-428 - inet/filter/limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 724 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-429 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-429 - inet/filter/limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 725 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-430 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-430 - inet/filter/limit-430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-430 -j ACCEPT - inet6/filter/limit-430 -j ACCEPT - -Filter 726 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 727 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-432 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-432 - inet/filter/limit-432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-432 -m limit --limit 1/second -j LOG - inet6/filter/limit-432 -m limit --limit 1/second -j LOG - inet/filter/limit-432 -j ACCEPT - inet6/filter/limit-432 -j ACCEPT - -Filter 728 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-433 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-433 - inet/filter/limit-433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-433 -m limit --limit 1/second -j LOG - inet6/filter/limit-433 -m limit --limit 1/second -j LOG - -Filter 729 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-434 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-434 - inet/filter/limit-434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-434 -j ACCEPT - inet6/filter/limit-434 -j ACCEPT - -Filter 730 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 731 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-436 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-436 - inet/filter/limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 732 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-437 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-437 - inet/filter/limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 733 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-438 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-438 - inet/filter/limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-438 -m limit --limit 1/second -j LOG - inet6/filter/limit-438 -m limit --limit 1/second -j LOG - inet/filter/limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 734 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-439 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-439 - inet/filter/limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 735 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-440 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-440 - inet/filter/limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 736 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-441 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-441 - inet/filter/limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 737 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-442 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-442 - inet/filter/limit-442 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-442 -j ACCEPT - inet6/filter/limit-442 -j ACCEPT - -Filter 738 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 739 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-444 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-444 - inet/filter/limit-444 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-444 -m limit --limit 1/second -j LOG - inet6/filter/limit-444 -m limit --limit 1/second -j LOG - inet/filter/limit-444 -j ACCEPT - inet6/filter/limit-444 -j ACCEPT - -Filter 740 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-445 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-445 - inet/filter/limit-445 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-445 -m limit --limit 1/second -j LOG - inet6/filter/limit-445 -m limit --limit 1/second -j LOG - -Filter 741 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-446 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-446 - inet/filter/limit-446 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-446 -j ACCEPT - inet6/filter/limit-446 -j ACCEPT - -Filter 742 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 743 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-448 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-448 - inet/filter/limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-448 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-448 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 744 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-449 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-449 - inet/filter/limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-449 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-449 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 745 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-450 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-450 - inet/filter/limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-450 -m limit --limit 1/second -j LOG - inet6/filter/limit-450 -m limit --limit 1/second -j LOG - inet/filter/limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-450 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 746 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-451 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-451 - inet/filter/limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-451 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-451 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 747 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-452 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-452 - inet/filter/limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-452 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-452 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 748 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-453 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-453 - inet/filter/limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-453 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-453 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 749 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-454 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-454 - inet/filter/limit-454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-454 -j ACCEPT - inet6/filter/limit-454 -j ACCEPT - -Filter 750 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 751 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-456 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-456 - inet/filter/limit-456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-456 -m limit --limit 1/second -j LOG - inet6/filter/limit-456 -m limit --limit 1/second -j LOG - inet/filter/limit-456 -j ACCEPT - inet6/filter/limit-456 -j ACCEPT - -Filter 752 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-457 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-457 - inet/filter/limit-457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-457 -m limit --limit 1/second -j LOG - inet6/filter/limit-457 -m limit --limit 1/second -j LOG - -Filter 753 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-458 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-458 - inet/filter/limit-458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-458 -j ACCEPT - inet6/filter/limit-458 -j ACCEPT - -Filter 754 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 755 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-460 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-460 - inet/filter/limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 756 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-461 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-461 - inet/filter/limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-461 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 757 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-462 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-462 - inet/filter/limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-462 -m limit --limit 1/second -j LOG - inet6/filter/limit-462 -m limit --limit 1/second -j LOG - inet/filter/limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-462 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 758 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-463 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-463 - inet/filter/limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-463 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 759 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-464 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-464 - inet/filter/limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-464 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 760 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-465 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-465 - inet/filter/limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-465 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 761 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-466 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-466 - inet/filter/limit-466 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-466 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-466 -j ACCEPT - inet6/filter/limit-466 -j ACCEPT - -Filter 762 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 763 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-468 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-468 - inet/filter/limit-468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-468 -m limit --limit 1/second -j LOG - inet6/filter/limit-468 -m limit --limit 1/second -j LOG - inet/filter/limit-468 -j ACCEPT - inet6/filter/limit-468 -j ACCEPT - -Filter 764 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-469 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-469 - inet/filter/limit-469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-469 -m limit --limit 1/second -j LOG - inet6/filter/limit-469 -m limit --limit 1/second -j LOG - -Filter 765 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-470 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-470 - inet/filter/limit-470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-470 -j ACCEPT - inet6/filter/limit-470 -j ACCEPT - -Filter 766 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 767 {"conn-limit":{"log":"none"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-472 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-472 - inet/filter/limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 768 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-473 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-473 - inet/filter/limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 769 {"conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-474 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-474 - inet/filter/limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-474 -m limit --limit 1/second -j LOG - inet6/filter/limit-474 -m limit --limit 1/second -j LOG - inet/filter/limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 770 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-475 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-475 - inet/filter/limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 771 {"conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-476 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-476 - inet/filter/limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 772 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-477 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-477 - inet/filter/limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 773 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-478 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-478 - inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 774 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-479 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-479 - inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 775 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-480 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-480 - inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-480 -m limit --limit 1/second -j LOG - inet6/filter/limit-480 -m limit --limit 1/second -j LOG - inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 776 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-481 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-481 - inet/filter/limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 777 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-482 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-482 - inet/filter/limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 778 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-483 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-483 - inet/filter/limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 779 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-484 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-484 - inet/filter/limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-484 -j ACCEPT - inet6/filter/limit-484 -j ACCEPT - -Filter 780 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 781 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-486 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-486 - inet/filter/limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-486 -m limit --limit 1/second -j LOG - inet6/filter/limit-486 -m limit --limit 1/second -j LOG - inet/filter/limit-486 -j ACCEPT - inet6/filter/limit-486 -j ACCEPT - -Filter 782 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-487 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-487 - inet/filter/limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-487 -m limit --limit 1/second -j LOG - inet6/filter/limit-487 -m limit --limit 1/second -j LOG - -Filter 783 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-488 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-488 - inet/filter/limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-488 -j ACCEPT - inet6/filter/limit-488 -j ACCEPT - -Filter 784 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 785 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-490 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-490 - inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 786 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-491 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-491 - inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 787 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-492 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-492 - inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-492 -m limit --limit 1/second -j LOG - inet6/filter/limit-492 -m limit --limit 1/second -j LOG - inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 788 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-493 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-493 - inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 789 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-494 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-494 - inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 790 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-495 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-495 - inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 791 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-496 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-496 - inet/filter/limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-496 -j ACCEPT - inet6/filter/limit-496 -j ACCEPT - -Filter 792 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 793 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-498 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-498 - inet/filter/limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-498 -m limit --limit 1/second -j LOG - inet6/filter/limit-498 -m limit --limit 1/second -j LOG - inet/filter/limit-498 -j ACCEPT - inet6/filter/limit-498 -j ACCEPT - -Filter 794 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-499 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-499 - inet/filter/limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-499 -m limit --limit 1/second -j LOG - inet6/filter/limit-499 -m limit --limit 1/second -j LOG - -Filter 795 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-500 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-500 - inet/filter/limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-500 -j ACCEPT - inet6/filter/limit-500 -j ACCEPT - -Filter 796 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 797 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-502 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-502 - inet/filter/limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-502 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-502 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 798 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-503 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-503 - inet/filter/limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-503 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-503 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 799 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-504 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-504 - inet/filter/limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-504 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-504 -m limit --limit 1/second -j LOG - inet6/filter/limit-504 -m limit --limit 1/second -j LOG - inet/filter/limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-504 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 800 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-505 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-505 - inet/filter/limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-505 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-505 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 801 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-506 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-506 - inet/filter/limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-506 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-506 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 802 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-507 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-507 - inet/filter/limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-507 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-507 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 803 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-508 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-508 - inet/filter/limit-508 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-508 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-508 -j ACCEPT - inet6/filter/limit-508 -j ACCEPT - -Filter 804 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 805 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-510 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-510 - inet/filter/limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-510 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-510 -m limit --limit 1/second -j LOG - inet6/filter/limit-510 -m limit --limit 1/second -j LOG - inet/filter/limit-510 -j ACCEPT - inet6/filter/limit-510 -j ACCEPT - -Filter 806 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-511 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-511 - inet/filter/limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-511 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-511 -m limit --limit 1/second -j LOG - inet6/filter/limit-511 -m limit --limit 1/second -j LOG - -Filter 807 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-512 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-512 - inet/filter/limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-512 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-512 -j ACCEPT - inet6/filter/limit-512 -j ACCEPT - -Filter 808 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 809 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-514 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-514 - inet/filter/limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-514 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 810 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-515 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-515 - inet/filter/limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-515 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 811 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-516 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-516 - inet/filter/limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-516 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-516 -m limit --limit 1/second -j LOG - inet6/filter/limit-516 -m limit --limit 1/second -j LOG - inet/filter/limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-516 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 812 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-517 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-517 - inet/filter/limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-517 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-517 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 813 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-518 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-518 - inet/filter/limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-518 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-518 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 814 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-519 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-519 - inet/filter/limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-519 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-519 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 815 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-520 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-520 - inet/filter/limit-520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-520 -j ACCEPT - inet6/filter/limit-520 -j ACCEPT - -Filter 816 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 817 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-522 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-522 - inet/filter/limit-522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-522 -m limit --limit 1/second -j LOG - inet6/filter/limit-522 -m limit --limit 1/second -j LOG - inet/filter/limit-522 -j ACCEPT - inet6/filter/limit-522 -j ACCEPT - -Filter 818 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-523 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-523 - inet/filter/limit-523 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-523 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-523 -m limit --limit 1/second -j LOG - inet6/filter/limit-523 -m limit --limit 1/second -j LOG - -Filter 819 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-524 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-524 - inet/filter/limit-524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-524 -j ACCEPT - inet6/filter/limit-524 -j ACCEPT - -Filter 820 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 821 {"conn-limit":{"interval":5},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-526 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-526 - inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 - inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 - inet/filter/logdrop-175 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-175 -m limit --limit 1/second -j LOG - inet/filter/logdrop-175 -j DROP - inet6/filter/logdrop-175 -j DROP - inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 822 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-527 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-527 - inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 - inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 - inet/filter/logdrop-176 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-176 -m limit --limit 1/second -j LOG - inet/filter/logdrop-176 -j DROP - inet6/filter/logdrop-176 -j DROP - inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 823 {"conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-528 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-528 - inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 - inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 - inet/filter/logdrop-177 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-177 -m limit --limit 1/second -j LOG - inet/filter/logdrop-177 -j DROP - inet6/filter/logdrop-177 -j DROP - inet/filter/limit-528 -m limit --limit 1/second -j LOG - inet6/filter/limit-528 -m limit --limit 1/second -j LOG - inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 824 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-529 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-529 - inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 - inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 - inet/filter/logdrop-178 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-178 -m limit --limit 1/second -j LOG - inet/filter/logdrop-178 -j DROP - inet6/filter/logdrop-178 -j DROP - inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 825 {"conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-530 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-530 - inet/filter/limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 - inet6/filter/limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 - inet/filter/logdrop-179 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-179 -m limit --limit 1/second -j LOG - inet/filter/logdrop-179 -j DROP - inet6/filter/logdrop-179 -j DROP - inet/filter/limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 826 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-531 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-531 - inet/filter/limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 - inet6/filter/limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 - inet/filter/logdrop-180 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-180 -m limit --limit 1/second -j LOG - inet/filter/logdrop-180 -j DROP - inet6/filter/logdrop-180 -j DROP - inet/filter/limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 827 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-532 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-532 - inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 - inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 - inet/filter/logdrop-181 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-181 -m limit --limit 1/second -j LOG - inet/filter/logdrop-181 -j DROP - inet6/filter/logdrop-181 -j DROP - inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 828 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-533 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-533 - inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 - inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 - inet/filter/logdrop-182 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-182 -m limit --limit 1/second -j LOG - inet/filter/logdrop-182 -j DROP - inet6/filter/logdrop-182 -j DROP - inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 829 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-534 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-534 - inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 - inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 - inet/filter/logdrop-183 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-183 -m limit --limit 1/second -j LOG - inet/filter/logdrop-183 -j DROP - inet6/filter/logdrop-183 -j DROP - inet/filter/limit-534 -m limit --limit 1/second -j LOG - inet6/filter/limit-534 -m limit --limit 1/second -j LOG - inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 830 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-535 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-535 - inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 - inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 - inet/filter/logdrop-184 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-184 -m limit --limit 1/second -j LOG - inet/filter/logdrop-184 -j DROP - inet6/filter/logdrop-184 -j DROP - inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 831 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-536 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-536 - inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 - inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 - inet/filter/logdrop-185 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-185 -m limit --limit 1/second -j LOG - inet/filter/logdrop-185 -j DROP - inet6/filter/logdrop-185 -j DROP - inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 832 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-537 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-537 - inet/filter/limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-186 - inet6/filter/limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-186 - inet/filter/logdrop-186 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-186 -m limit --limit 1/second -j LOG - inet/filter/logdrop-186 -j DROP - inet6/filter/logdrop-186 -j DROP - inet/filter/limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 833 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-538 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-538 - inet/filter/limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 - inet6/filter/limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 - inet/filter/logdrop-187 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-187 -m limit --limit 1/second -j LOG - inet/filter/logdrop-187 -j DROP - inet6/filter/logdrop-187 -j DROP - inet/filter/limit-538 -j ACCEPT - inet6/filter/limit-538 -j ACCEPT - -Filter 834 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 - inet/filter/logdrop-188 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-188 -m limit --limit 1/second -j LOG - inet/filter/logdrop-188 -j DROP - inet6/filter/logdrop-188 -j DROP - -Filter 835 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-540 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-540 - inet/filter/limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 - inet6/filter/limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 - inet/filter/logdrop-189 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-189 -m limit --limit 1/second -j LOG - inet/filter/logdrop-189 -j DROP - inet6/filter/logdrop-189 -j DROP - inet/filter/limit-540 -m limit --limit 1/second -j LOG - inet6/filter/limit-540 -m limit --limit 1/second -j LOG - inet/filter/limit-540 -j ACCEPT - inet6/filter/limit-540 -j ACCEPT - -Filter 836 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-541 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-541 - inet/filter/limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 - inet6/filter/limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 - inet/filter/logdrop-190 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-190 -m limit --limit 1/second -j LOG - inet/filter/logdrop-190 -j DROP - inet6/filter/logdrop-190 -j DROP - inet/filter/limit-541 -m limit --limit 1/second -j LOG - inet6/filter/limit-541 -m limit --limit 1/second -j LOG - -Filter 837 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-542 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-542 - inet/filter/limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 - inet6/filter/limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 - inet/filter/logdrop-191 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-191 -m limit --limit 1/second -j LOG - inet/filter/logdrop-191 -j DROP - inet6/filter/logdrop-191 -j DROP - inet/filter/limit-542 -j ACCEPT - inet6/filter/limit-542 -j ACCEPT - -Filter 838 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-192 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-192 - inet/filter/logdrop-192 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-192 -m limit --limit 1/second -j LOG - inet/filter/logdrop-192 -j DROP - inet6/filter/logdrop-192 -j DROP - -Filter 839 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-544 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-544 - inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 - inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 - inet/filter/logdrop-193 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-193 -m limit --limit 1/second -j LOG - inet/filter/logdrop-193 -j DROP - inet6/filter/logdrop-193 -j DROP - inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 840 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-545 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-545 - inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 - inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 - inet/filter/logdrop-194 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-194 -m limit --limit 1/second -j LOG - inet/filter/logdrop-194 -j DROP - inet6/filter/logdrop-194 -j DROP - inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 841 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-546 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-546 - inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 - inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 - inet/filter/logdrop-195 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-195 -m limit --limit 1/second -j LOG - inet/filter/logdrop-195 -j DROP - inet6/filter/logdrop-195 -j DROP - inet/filter/limit-546 -m limit --limit 1/second -j LOG - inet6/filter/limit-546 -m limit --limit 1/second -j LOG - inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 842 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-547 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-547 - inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 - inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 - inet/filter/logdrop-196 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-196 -m limit --limit 1/second -j LOG - inet/filter/logdrop-196 -j DROP - inet6/filter/logdrop-196 -j DROP - inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 843 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-548 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-548 - inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 - inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 - inet/filter/logdrop-197 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-197 -m limit --limit 1/second -j LOG - inet/filter/logdrop-197 -j DROP - inet6/filter/logdrop-197 -j DROP - inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 844 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-549 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-549 - inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-198 - inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-198 - inet/filter/logdrop-198 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-198 -m limit --limit 1/second -j LOG - inet/filter/logdrop-198 -j DROP - inet6/filter/logdrop-198 -j DROP - inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 845 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-550 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-550 - inet/filter/limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 - inet6/filter/limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 - inet/filter/logdrop-199 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-199 -m limit --limit 1/second -j LOG - inet/filter/logdrop-199 -j DROP - inet6/filter/logdrop-199 -j DROP - inet/filter/limit-550 -j ACCEPT - inet6/filter/limit-550 -j ACCEPT - -Filter 846 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 - inet/filter/logdrop-200 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-200 -m limit --limit 1/second -j LOG - inet/filter/logdrop-200 -j DROP - inet6/filter/logdrop-200 -j DROP - -Filter 847 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-552 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-552 - inet/filter/limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 - inet6/filter/limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 - inet/filter/logdrop-201 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-201 -m limit --limit 1/second -j LOG - inet/filter/logdrop-201 -j DROP - inet6/filter/logdrop-201 -j DROP - inet/filter/limit-552 -m limit --limit 1/second -j LOG - inet6/filter/limit-552 -m limit --limit 1/second -j LOG - inet/filter/limit-552 -j ACCEPT - inet6/filter/limit-552 -j ACCEPT - -Filter 848 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-553 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-553 - inet/filter/limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 - inet6/filter/limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 - inet/filter/logdrop-202 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-202 -m limit --limit 1/second -j LOG - inet/filter/logdrop-202 -j DROP - inet6/filter/logdrop-202 -j DROP - inet/filter/limit-553 -m limit --limit 1/second -j LOG - inet6/filter/limit-553 -m limit --limit 1/second -j LOG - -Filter 849 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-554 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-554 - inet/filter/limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 - inet6/filter/limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 - inet/filter/logdrop-203 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-203 -m limit --limit 1/second -j LOG - inet/filter/logdrop-203 -j DROP - inet6/filter/logdrop-203 -j DROP - inet/filter/limit-554 -j ACCEPT - inet6/filter/limit-554 -j ACCEPT - -Filter 850 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-204 - inet/filter/logdrop-204 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-204 -m limit --limit 1/second -j LOG - inet/filter/logdrop-204 -j DROP - inet6/filter/logdrop-204 -j DROP - -Filter 851 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-556 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-556 - inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 - inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 - inet/filter/logdrop-205 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-205 -m limit --limit 1/second -j LOG - inet/filter/logdrop-205 -j DROP - inet6/filter/logdrop-205 -j DROP - inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 852 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-557 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-557 - inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 - inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 - inet/filter/logdrop-206 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-206 -m limit --limit 1/second -j LOG - inet/filter/logdrop-206 -j DROP - inet6/filter/logdrop-206 -j DROP - inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 853 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-558 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-558 - inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 - inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 - inet/filter/logdrop-207 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-207 -m limit --limit 1/second -j LOG - inet/filter/logdrop-207 -j DROP - inet6/filter/logdrop-207 -j DROP - inet/filter/limit-558 -m limit --limit 1/second -j LOG - inet6/filter/limit-558 -m limit --limit 1/second -j LOG - inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 854 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-559 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-559 - inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 - inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 - inet/filter/logdrop-208 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-208 -m limit --limit 1/second -j LOG - inet/filter/logdrop-208 -j DROP - inet6/filter/logdrop-208 -j DROP - inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 855 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-560 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-560 - inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 - inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 - inet/filter/logdrop-209 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-209 -m limit --limit 1/second -j LOG - inet/filter/logdrop-209 -j DROP - inet6/filter/logdrop-209 -j DROP - inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 856 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-561 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-561 - inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-210 - inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-210 - inet/filter/logdrop-210 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-210 -m limit --limit 1/second -j LOG - inet/filter/logdrop-210 -j DROP - inet6/filter/logdrop-210 -j DROP - inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 857 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-562 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-562 - inet/filter/limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 - inet6/filter/limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 - inet/filter/logdrop-211 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-211 -m limit --limit 1/second -j LOG - inet/filter/logdrop-211 -j DROP - inet6/filter/logdrop-211 -j DROP - inet/filter/limit-562 -j ACCEPT - inet6/filter/limit-562 -j ACCEPT - -Filter 858 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 - inet/filter/logdrop-212 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-212 -m limit --limit 1/second -j LOG - inet/filter/logdrop-212 -j DROP - inet6/filter/logdrop-212 -j DROP - -Filter 859 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-564 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-564 - inet/filter/limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 - inet6/filter/limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 - inet/filter/logdrop-213 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-213 -m limit --limit 1/second -j LOG - inet/filter/logdrop-213 -j DROP - inet6/filter/logdrop-213 -j DROP - inet/filter/limit-564 -m limit --limit 1/second -j LOG - inet6/filter/limit-564 -m limit --limit 1/second -j LOG - inet/filter/limit-564 -j ACCEPT - inet6/filter/limit-564 -j ACCEPT - -Filter 860 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-565 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-565 - inet/filter/limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 - inet6/filter/limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 - inet/filter/logdrop-214 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-214 -m limit --limit 1/second -j LOG - inet/filter/logdrop-214 -j DROP - inet6/filter/logdrop-214 -j DROP - inet/filter/limit-565 -m limit --limit 1/second -j LOG - inet6/filter/limit-565 -m limit --limit 1/second -j LOG - -Filter 861 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-566 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-566 - inet/filter/limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 - inet6/filter/limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 - inet/filter/logdrop-215 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-215 -m limit --limit 1/second -j LOG - inet/filter/logdrop-215 -j DROP - inet6/filter/logdrop-215 -j DROP - inet/filter/limit-566 -j ACCEPT - inet6/filter/limit-566 -j ACCEPT - -Filter 862 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 - inet/filter/logdrop-216 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-216 -m limit --limit 1/second -j LOG - inet/filter/logdrop-216 -j DROP - inet6/filter/logdrop-216 -j DROP - -Filter 863 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-568 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-568 - inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 - inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 - inet/filter/logdrop-217 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-217 -m limit --limit 1/second -j LOG - inet/filter/logdrop-217 -j DROP - inet6/filter/logdrop-217 -j DROP - inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 864 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-569 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-569 - inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 - inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 - inet/filter/logdrop-218 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-218 -m limit --limit 1/second -j LOG - inet/filter/logdrop-218 -j DROP - inet6/filter/logdrop-218 -j DROP - inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 865 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-570 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-570 - inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 - inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 - inet/filter/logdrop-219 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-219 -m limit --limit 1/second -j LOG - inet/filter/logdrop-219 -j DROP - inet6/filter/logdrop-219 -j DROP - inet/filter/limit-570 -m limit --limit 1/second -j LOG - inet6/filter/limit-570 -m limit --limit 1/second -j LOG - inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 866 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-571 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-571 - inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 - inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 - inet/filter/logdrop-220 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-220 -m limit --limit 1/second -j LOG - inet/filter/logdrop-220 -j DROP - inet6/filter/logdrop-220 -j DROP - inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 867 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-572 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-572 - inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 - inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 - inet/filter/logdrop-221 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-221 -m limit --limit 1/second -j LOG - inet/filter/logdrop-221 -j DROP - inet6/filter/logdrop-221 -j DROP - inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 868 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-573 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-573 - inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-222 - inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-222 - inet/filter/logdrop-222 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-222 -m limit --limit 1/second -j LOG - inet/filter/logdrop-222 -j DROP - inet6/filter/logdrop-222 -j DROP - inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 869 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-574 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-574 - inet/filter/limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 - inet6/filter/limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 - inet/filter/logdrop-223 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-223 -m limit --limit 1/second -j LOG - inet/filter/logdrop-223 -j DROP - inet6/filter/logdrop-223 -j DROP - inet/filter/limit-574 -j ACCEPT - inet6/filter/limit-574 -j ACCEPT - -Filter 870 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 - inet/filter/logdrop-224 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-224 -m limit --limit 1/second -j LOG - inet/filter/logdrop-224 -j DROP - inet6/filter/logdrop-224 -j DROP - -Filter 871 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-576 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-576 - inet/filter/limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 - inet6/filter/limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 - inet/filter/logdrop-225 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-225 -m limit --limit 1/second -j LOG - inet/filter/logdrop-225 -j DROP - inet6/filter/logdrop-225 -j DROP - inet/filter/limit-576 -m limit --limit 1/second -j LOG - inet6/filter/limit-576 -m limit --limit 1/second -j LOG - inet/filter/limit-576 -j ACCEPT - inet6/filter/limit-576 -j ACCEPT - -Filter 872 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-577 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-577 - inet/filter/limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 - inet6/filter/limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 - inet/filter/logdrop-226 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-226 -m limit --limit 1/second -j LOG - inet/filter/logdrop-226 -j DROP - inet6/filter/logdrop-226 -j DROP - inet/filter/limit-577 -m limit --limit 1/second -j LOG - inet6/filter/limit-577 -m limit --limit 1/second -j LOG - -Filter 873 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-578 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-578 - inet/filter/limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 - inet6/filter/limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 - inet/filter/logdrop-227 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-227 -m limit --limit 1/second -j LOG - inet/filter/logdrop-227 -j DROP - inet6/filter/logdrop-227 -j DROP - inet/filter/limit-578 -j ACCEPT - inet6/filter/limit-578 -j ACCEPT - -Filter 874 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-228 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-228 - inet/filter/logdrop-228 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-228 -m limit --limit 1/second -j LOG - inet/filter/logdrop-228 -j DROP - inet6/filter/logdrop-228 -j DROP - -Filter 875 {"conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-580 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-580 - inet/filter/limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 876 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-581 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-581 - inet/filter/limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 877 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-582 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-582 - inet/filter/limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-582 -m limit --limit 1/second -j LOG - inet6/filter/limit-582 -m limit --limit 1/second -j LOG - inet/filter/limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 878 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-583 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-583 - inet/filter/limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 879 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-584 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-584 - inet/filter/limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 880 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-585 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-585 - inet/filter/limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 881 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-586 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-586 - inet/filter/limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 882 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-587 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-587 - inet/filter/limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 883 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-588 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-588 - inet/filter/limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-588 -m limit --limit 1/second -j LOG - inet6/filter/limit-588 -m limit --limit 1/second -j LOG - inet/filter/limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 884 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-589 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-589 - inet/filter/limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 885 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-590 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-590 - inet/filter/limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 886 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-591 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-591 - inet/filter/limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 887 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-592 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-592 - inet/filter/limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-592 -j ACCEPT - inet6/filter/limit-592 -j ACCEPT - -Filter 888 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 889 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-594 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-594 - inet/filter/limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-594 -m limit --limit 1/second -j LOG - inet6/filter/limit-594 -m limit --limit 1/second -j LOG - inet/filter/limit-594 -j ACCEPT - inet6/filter/limit-594 -j ACCEPT - -Filter 890 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-595 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-595 - inet/filter/limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-595 -m limit --limit 1/second -j LOG - inet6/filter/limit-595 -m limit --limit 1/second -j LOG - -Filter 891 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-596 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-596 - inet/filter/limit-596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-596 -j ACCEPT - inet6/filter/limit-596 -j ACCEPT - -Filter 892 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 893 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-598 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-598 - inet/filter/limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 894 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-599 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-599 - inet/filter/limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 895 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-600 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-600 - inet/filter/limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-600 -m limit --limit 1/second -j LOG - inet6/filter/limit-600 -m limit --limit 1/second -j LOG - inet/filter/limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 896 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-601 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-601 - inet/filter/limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 897 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-602 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-602 - inet/filter/limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 898 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-603 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-603 - inet/filter/limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 899 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-604 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-604 - inet/filter/limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-604 -j ACCEPT - inet6/filter/limit-604 -j ACCEPT - -Filter 900 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 901 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-606 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-606 - inet/filter/limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-606 -m limit --limit 1/second -j LOG - inet6/filter/limit-606 -m limit --limit 1/second -j LOG - inet/filter/limit-606 -j ACCEPT - inet6/filter/limit-606 -j ACCEPT - -Filter 902 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-607 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-607 - inet/filter/limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-607 -m limit --limit 1/second -j LOG - inet6/filter/limit-607 -m limit --limit 1/second -j LOG - -Filter 903 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-608 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-608 - inet/filter/limit-608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-608 -j ACCEPT - inet6/filter/limit-608 -j ACCEPT - -Filter 904 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 905 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-610 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-610 - inet/filter/limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-610 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-610 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 906 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-611 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-611 - inet/filter/limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-611 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-611 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 907 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-612 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-612 - inet/filter/limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-612 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-612 -m limit --limit 1/second -j LOG - inet6/filter/limit-612 -m limit --limit 1/second -j LOG - inet/filter/limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-612 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 908 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-613 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-613 - inet/filter/limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-613 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-613 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 909 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-614 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-614 - inet/filter/limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-614 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-614 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 910 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-615 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-615 - inet/filter/limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-615 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-615 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 911 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-616 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-616 - inet/filter/limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-616 -j ACCEPT - inet6/filter/limit-616 -j ACCEPT - -Filter 912 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 913 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-618 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-618 - inet/filter/limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-618 -m limit --limit 1/second -j LOG - inet6/filter/limit-618 -m limit --limit 1/second -j LOG - inet/filter/limit-618 -j ACCEPT - inet6/filter/limit-618 -j ACCEPT - -Filter 914 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-619 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-619 - inet/filter/limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-619 -m limit --limit 1/second -j LOG - inet6/filter/limit-619 -m limit --limit 1/second -j LOG - -Filter 915 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-620 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-620 - inet/filter/limit-620 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-620 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-620 -j ACCEPT - inet6/filter/limit-620 -j ACCEPT - -Filter 916 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 917 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-622 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-622 - inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 918 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-623 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-623 - inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 919 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-624 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-624 - inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-624 -m limit --limit 1/second -j LOG - inet6/filter/limit-624 -m limit --limit 1/second -j LOG - inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 920 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-625 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-625 - inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 921 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-626 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-626 - inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 922 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-627 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-627 - inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 923 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-628 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-628 - inet/filter/limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-628 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-628 -j ACCEPT - inet6/filter/limit-628 -j ACCEPT - -Filter 924 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 925 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-630 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-630 - inet/filter/limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-630 -m limit --limit 1/second -j LOG - inet6/filter/limit-630 -m limit --limit 1/second -j LOG - inet/filter/limit-630 -j ACCEPT - inet6/filter/limit-630 -j ACCEPT - -Filter 926 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-631 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-631 - inet/filter/limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-631 -m limit --limit 1/second -j LOG - inet6/filter/limit-631 -m limit --limit 1/second -j LOG - -Filter 927 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-632 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-632 - inet/filter/limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-632 -j ACCEPT - inet6/filter/limit-632 -j ACCEPT - -Filter 928 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 929 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-634 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-634 - inet/filter/limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 930 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-635 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-635 - inet/filter/limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 931 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-636 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-636 - inet/filter/limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-636 -m limit --limit 1/second -j LOG - inet6/filter/limit-636 -m limit --limit 1/second -j LOG - inet/filter/limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 932 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-637 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-637 - inet/filter/limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 933 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-638 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-638 - inet/filter/limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 934 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-639 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-639 - inet/filter/limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 935 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-640 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-640 - inet/filter/limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 936 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-641 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-641 - inet/filter/limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 937 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-642 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-642 - inet/filter/limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-642 -m limit --limit 1/second -j LOG - inet6/filter/limit-642 -m limit --limit 1/second -j LOG - inet/filter/limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 938 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-643 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-643 - inet/filter/limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 939 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-644 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-644 - inet/filter/limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 940 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-645 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-645 - inet/filter/limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 941 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-646 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-646 - inet/filter/limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-646 -j ACCEPT - inet6/filter/limit-646 -j ACCEPT - -Filter 942 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 943 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-648 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-648 - inet/filter/limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-648 -m limit --limit 1/second -j LOG - inet6/filter/limit-648 -m limit --limit 1/second -j LOG - inet/filter/limit-648 -j ACCEPT - inet6/filter/limit-648 -j ACCEPT - -Filter 944 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-649 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-649 - inet/filter/limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-649 -m limit --limit 1/second -j LOG - inet6/filter/limit-649 -m limit --limit 1/second -j LOG - -Filter 945 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-650 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-650 - inet/filter/limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-650 -j ACCEPT - inet6/filter/limit-650 -j ACCEPT - -Filter 946 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 947 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-652 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-652 - inet/filter/limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 948 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-653 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-653 - inet/filter/limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 949 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-654 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-654 - inet/filter/limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-654 -m limit --limit 1/second -j LOG - inet6/filter/limit-654 -m limit --limit 1/second -j LOG - inet/filter/limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 950 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-655 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-655 - inet/filter/limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 951 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-656 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-656 - inet/filter/limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - -Filter 952 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-657 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-657 - inet/filter/limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 953 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-658 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-658 - inet/filter/limit-658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-658 -j ACCEPT - inet6/filter/limit-658 -j ACCEPT - -Filter 954 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 955 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-660 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-660 - inet/filter/limit-660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-660 -m limit --limit 1/second -j LOG - inet6/filter/limit-660 -m limit --limit 1/second -j LOG - inet/filter/limit-660 -j ACCEPT - inet6/filter/limit-660 -j ACCEPT - -Filter 956 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-661 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-661 - inet/filter/limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-661 -m limit --limit 1/second -j LOG - inet6/filter/limit-661 -m limit --limit 1/second -j LOG - -Filter 957 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-662 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-662 - inet/filter/limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-662 -j ACCEPT - inet6/filter/limit-662 -j ACCEPT - -Filter 958 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 959 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-664 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-664 - inet/filter/limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-664 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-664 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 960 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-665 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-665 - inet/filter/limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-665 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-665 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 961 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-666 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-666 - inet/filter/limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-666 -m limit --limit 1/second -j LOG - inet6/filter/limit-666 -m limit --limit 1/second -j LOG - inet/filter/limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-666 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 962 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-667 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-667 - inet/filter/limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-667 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 963 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-668 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-668 - inet/filter/limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-668 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - -Filter 964 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-669 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-669 - inet/filter/limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-669 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 965 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-670 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-670 - inet/filter/limit-670 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-670 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-670 -j ACCEPT - inet6/filter/limit-670 -j ACCEPT - -Filter 966 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 967 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-672 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-672 - inet/filter/limit-672 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-672 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-672 -m limit --limit 1/second -j LOG - inet6/filter/limit-672 -m limit --limit 1/second -j LOG - inet/filter/limit-672 -j ACCEPT - inet6/filter/limit-672 -j ACCEPT - -Filter 968 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-673 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-673 - inet/filter/limit-673 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-673 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-673 -m limit --limit 1/second -j LOG - inet6/filter/limit-673 -m limit --limit 1/second -j LOG - -Filter 969 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-674 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-674 - inet/filter/limit-674 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-674 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-674 -j ACCEPT - inet6/filter/limit-674 -j ACCEPT - -Filter 970 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 971 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-676 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-676 - inet/filter/limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-676 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-676 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 972 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-677 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-677 - inet/filter/limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-677 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-677 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 973 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-678 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-678 - inet/filter/limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-678 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-678 -m limit --limit 1/second -j LOG - inet6/filter/limit-678 -m limit --limit 1/second -j LOG - inet/filter/limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-678 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 974 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-679 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-679 - inet/filter/limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-679 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-679 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 975 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-680 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-680 - inet/filter/limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-680 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-680 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - -Filter 976 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-681 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-681 - inet/filter/limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-681 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-681 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 977 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-682 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-682 - inet/filter/limit-682 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-682 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-682 -j ACCEPT - inet6/filter/limit-682 -j ACCEPT - -Filter 978 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 979 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-684 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-684 - inet/filter/limit-684 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-684 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-684 -m limit --limit 1/second -j LOG - inet6/filter/limit-684 -m limit --limit 1/second -j LOG - inet/filter/limit-684 -j ACCEPT - inet6/filter/limit-684 -j ACCEPT - -Filter 980 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-685 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-685 - inet/filter/limit-685 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-685 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-685 -m limit --limit 1/second -j LOG - inet6/filter/limit-685 -m limit --limit 1/second -j LOG - -Filter 981 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-686 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-686 - inet/filter/limit-686 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-686 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-686 -j ACCEPT - inet6/filter/limit-686 -j ACCEPT - -Filter 982 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 983 {"conn-limit":150,"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-688 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-688 - inet/filter/limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-688 -j ACCEPT - inet6/filter/limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-688 -j ACCEPT - inet/filter/limit-688 -m limit --limit 1/second -j LOG - inet6/filter/limit-688 -m limit --limit 1/second -j LOG - inet/filter/limit-688 -j DROP - inet6/filter/limit-688 -j DROP - -Filter 984 {"action":"pass","conn-limit":150,"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-689 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-689 - inet/filter/limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-689 -j RETURN - inet6/filter/limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-689 -j RETURN - inet/filter/limit-689 -m limit --limit 1/second -j LOG - inet6/filter/limit-689 -m limit --limit 1/second -j LOG - inet/filter/limit-689 -j DROP - inet6/filter/limit-689 -j DROP - -Filter 985 {"conn-limit":150,"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-690 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-690 - inet/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j logaccept-70 - inet6/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j logaccept-70 - inet/filter/logaccept-70 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-70 -m limit --limit 1/second -j LOG - inet/filter/logaccept-70 -j ACCEPT - inet6/filter/logaccept-70 -j ACCEPT - inet/filter/limit-690 -m limit --limit 1/second -j LOG - inet6/filter/limit-690 -m limit --limit 1/second -j LOG - inet/filter/limit-690 -j DROP - inet6/filter/limit-690 -j DROP - -Filter 986 {"conn-limit":150,"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-691 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-691 - inet/filter/limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-691 -j ACCEPT - inet6/filter/limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-691 -j ACCEPT - inet/filter/limit-691 -m limit --limit 1/second -j LOG - inet6/filter/limit-691 -m limit --limit 1/second -j LOG - inet/filter/limit-691 -j DROP - inet6/filter/limit-691 -j DROP - -Filter 987 {"conn-limit":{"count":150},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-692 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-692 - inet/filter/limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-692 -j ACCEPT - inet6/filter/limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-692 -j ACCEPT - inet/filter/limit-692 -m limit --limit 1/second -j LOG - inet6/filter/limit-692 -m limit --limit 1/second -j LOG - inet/filter/limit-692 -j DROP - inet6/filter/limit-692 -j DROP - -Filter 988 {"action":"pass","conn-limit":{"count":150},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-693 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-693 - inet/filter/limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-693 -j RETURN - inet6/filter/limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-693 -j RETURN - inet/filter/limit-693 -m limit --limit 1/second -j LOG - inet6/filter/limit-693 -m limit --limit 1/second -j LOG - inet/filter/limit-693 -j DROP - inet6/filter/limit-693 -j DROP - -Filter 989 {"conn-limit":{"count":150},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-694 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-694 - inet/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j logaccept-71 - inet6/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j logaccept-71 - inet/filter/logaccept-71 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-71 -m limit --limit 1/second -j LOG - inet/filter/logaccept-71 -j ACCEPT - inet6/filter/logaccept-71 -j ACCEPT - inet/filter/limit-694 -m limit --limit 1/second -j LOG - inet6/filter/limit-694 -m limit --limit 1/second -j LOG - inet/filter/limit-694 -j DROP - inet6/filter/limit-694 -j DROP - -Filter 990 {"conn-limit":{"count":150},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-695 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-695 - inet/filter/limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-695 -j ACCEPT - inet6/filter/limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-695 -j ACCEPT - inet/filter/limit-695 -m limit --limit 1/second -j LOG - inet6/filter/limit-695 -m limit --limit 1/second -j LOG - inet/filter/limit-695 -j DROP - inet6/filter/limit-695 -j DROP - -Filter 991 {"conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-696 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-696 - inet/filter/limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-696 -j ACCEPT - inet6/filter/limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-696 -j ACCEPT - inet/filter/limit-696 -j DROP - inet6/filter/limit-696 -j DROP - -Filter 992 {"action":"pass","conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-697 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-697 - inet/filter/limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-697 -j RETURN - inet6/filter/limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-697 -j RETURN - inet/filter/limit-697 -j DROP - inet6/filter/limit-697 -j DROP - -Filter 993 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-698 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-698 - inet/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j logaccept-72 - inet6/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j logaccept-72 - inet/filter/logaccept-72 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-72 -m limit --limit 1/second -j LOG - inet/filter/logaccept-72 -j ACCEPT - inet6/filter/logaccept-72 -j ACCEPT - inet/filter/limit-698 -j DROP - inet6/filter/limit-698 -j DROP - -Filter 994 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-699 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-699 - inet/filter/limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-699 -j ACCEPT - inet6/filter/limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-699 -j ACCEPT - inet/filter/limit-699 -j DROP - inet6/filter/limit-699 -j DROP - -Filter 995 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-700 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-700 - inet/filter/limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-700 -j ACCEPT - inet6/filter/limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-700 -j ACCEPT - inet/filter/limit-700 -j DROP - inet6/filter/limit-700 -j DROP - -Filter 996 {"action":"pass","conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-701 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-701 - inet/filter/limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-701 -j RETURN - inet6/filter/limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-701 -j RETURN - inet/filter/limit-701 -j DROP - inet6/filter/limit-701 -j DROP - -Filter 997 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-702 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-702 - inet/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j logaccept-73 - inet6/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j logaccept-73 - inet/filter/logaccept-73 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-73 -m limit --limit 1/second -j LOG - inet/filter/logaccept-73 -j ACCEPT - inet6/filter/logaccept-73 -j ACCEPT - inet/filter/limit-702 -j DROP - inet6/filter/limit-702 -j DROP - -Filter 998 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-703 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-703 - inet/filter/limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-703 -j ACCEPT - inet6/filter/limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-703 -j ACCEPT - inet/filter/limit-703 -j DROP - inet6/filter/limit-703 -j DROP - -Filter 999 {"conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-704 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-704 - inet/filter/limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-704 -j ACCEPT - inet6/filter/limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-704 -j ACCEPT - inet/filter/limit-704 -m limit --limit 1/second -j LOG - inet6/filter/limit-704 -m limit --limit 1/second -j LOG - inet/filter/limit-704 -j DROP - inet6/filter/limit-704 -j DROP - -Filter 1000 {"action":"pass","conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-705 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-705 - inet/filter/limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-705 -j RETURN - inet6/filter/limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-705 -j RETURN - inet/filter/limit-705 -m limit --limit 1/second -j LOG - inet6/filter/limit-705 -m limit --limit 1/second -j LOG - inet/filter/limit-705 -j DROP - inet6/filter/limit-705 -j DROP - -Filter 1001 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-706 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-706 - inet/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j logaccept-74 - inet6/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j logaccept-74 - inet/filter/logaccept-74 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-74 -m limit --limit 1/second -j LOG - inet/filter/logaccept-74 -j ACCEPT - inet6/filter/logaccept-74 -j ACCEPT - inet/filter/limit-706 -m limit --limit 1/second -j LOG - inet6/filter/limit-706 -m limit --limit 1/second -j LOG - inet/filter/limit-706 -j DROP - inet6/filter/limit-706 -j DROP - -Filter 1002 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-707 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-707 - inet/filter/limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-707 -j ACCEPT - inet6/filter/limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-707 -j ACCEPT - inet/filter/limit-707 -m limit --limit 1/second -j LOG - inet6/filter/limit-707 -m limit --limit 1/second -j LOG - inet/filter/limit-707 -j DROP - inet6/filter/limit-707 -j DROP - -Filter 1003 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-708 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-708 - inet/filter/limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-708 -j ACCEPT - inet6/filter/limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-708 -j ACCEPT - inet/filter/limit-708 -j DROP - inet6/filter/limit-708 -j DROP - -Filter 1004 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-709 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-709 - inet/filter/limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-709 -j RETURN - inet6/filter/limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-709 -j RETURN - inet/filter/limit-709 -j DROP - inet6/filter/limit-709 -j DROP - -Filter 1005 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-710 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-710 - inet/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j logaccept-75 - inet6/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j logaccept-75 - inet/filter/logaccept-75 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-75 -m limit --limit 1/second -j LOG - inet/filter/logaccept-75 -j ACCEPT - inet6/filter/logaccept-75 -j ACCEPT - inet/filter/limit-710 -j DROP - inet6/filter/limit-710 -j DROP - -Filter 1006 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-711 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-711 - inet/filter/limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-711 -j ACCEPT - inet6/filter/limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-711 -j ACCEPT - inet/filter/limit-711 -j DROP - inet6/filter/limit-711 -j DROP - -Filter 1007 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-712 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-712 - inet/filter/limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-712 -j ACCEPT - inet6/filter/limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-712 -j ACCEPT - inet/filter/limit-712 -j DROP - inet6/filter/limit-712 -j DROP - -Filter 1008 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-713 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-713 - inet/filter/limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-713 -j RETURN - inet6/filter/limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-713 -j RETURN - inet/filter/limit-713 -j DROP - inet6/filter/limit-713 -j DROP - -Filter 1009 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-714 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-714 - inet/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j logaccept-76 - inet6/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j logaccept-76 - inet/filter/logaccept-76 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-76 -m limit --limit 1/second -j LOG - inet/filter/logaccept-76 -j ACCEPT - inet6/filter/logaccept-76 -j ACCEPT - inet/filter/limit-714 -j DROP - inet6/filter/limit-714 -j DROP - -Filter 1010 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-715 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-715 - inet/filter/limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-715 -j ACCEPT - inet6/filter/limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-715 -j ACCEPT - inet/filter/limit-715 -j DROP - inet6/filter/limit-715 -j DROP - -Filter 1011 {"flow-limit":1} -(filter-limit) - inet/filter/FORWARD -j limit-716 - inet6/filter/FORWARD -j limit-716 - inet/filter/INPUT -j limit-716 - inet6/filter/INPUT -j limit-716 - inet/filter/OUTPUT -j limit-716 - inet6/filter/OUTPUT -j limit-716 - inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 - inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 - inet/filter/logdrop-229 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-229 -m limit --limit 1/second -j LOG - inet/filter/logdrop-229 -j DROP - inet6/filter/logdrop-229 -j DROP - inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1012 {"action":"pass","flow-limit":1} -(filter-limit) - inet/filter/FORWARD -j limit-717 - inet6/filter/FORWARD -j limit-717 - inet/filter/INPUT -j limit-717 - inet6/filter/INPUT -j limit-717 - inet/filter/OUTPUT -j limit-717 - inet6/filter/OUTPUT -j limit-717 - inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 - inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 - inet/filter/logdrop-230 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-230 -m limit --limit 1/second -j LOG - inet/filter/logdrop-230 -j DROP - inet6/filter/logdrop-230 -j DROP - inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1013 {"flow-limit":1,"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-718 - inet6/filter/FORWARD -j limit-718 - inet/filter/INPUT -j limit-718 - inet6/filter/INPUT -j limit-718 - inet/filter/OUTPUT -j limit-718 - inet6/filter/OUTPUT -j limit-718 - inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 - inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 - inet/filter/logdrop-231 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-231 -m limit --limit 1/second -j LOG - inet/filter/logdrop-231 -j DROP - inet6/filter/logdrop-231 -j DROP - inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-0 - inet6/filter/FORWARD -j logaccept-final-0 - inet/filter/INPUT -j logaccept-final-0 - inet6/filter/INPUT -j logaccept-final-0 - inet/filter/OUTPUT -j logaccept-final-0 - inet6/filter/OUTPUT -j logaccept-final-0 - inet/filter/logaccept-final-0 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-0 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-0 -j ACCEPT - inet6/filter/logaccept-final-0 -j ACCEPT - -Filter 1014 {"action":"pass","flow-limit":1,"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-719 - inet6/filter/FORWARD -j limit-719 - inet/filter/INPUT -j limit-719 - inet6/filter/INPUT -j limit-719 - inet/filter/OUTPUT -j limit-719 - inet6/filter/OUTPUT -j limit-719 - inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 - inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 - inet/filter/logdrop-232 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-232 -m limit --limit 1/second -j LOG - inet/filter/logdrop-232 -j DROP - inet6/filter/logdrop-232 -j DROP - inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1015 {"flow-limit":1,"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-720 - inet6/filter/FORWARD -j limit-720 - inet/filter/INPUT -j limit-720 - inet6/filter/INPUT -j limit-720 - inet/filter/OUTPUT -j limit-720 - inet6/filter/OUTPUT -j limit-720 - inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 - inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 - inet/filter/logdrop-233 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-233 -m limit --limit 1/second -j LOG - inet/filter/logdrop-233 -j DROP - inet6/filter/logdrop-233 -j DROP - inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1016 {"action":"pass","flow-limit":1,"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-721 - inet6/filter/FORWARD -j limit-721 - inet/filter/INPUT -j limit-721 - inet6/filter/INPUT -j limit-721 - inet/filter/OUTPUT -j limit-721 - inet6/filter/OUTPUT -j limit-721 - inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 - inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 - inet/filter/logdrop-234 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-234 -m limit --limit 1/second -j LOG - inet/filter/logdrop-234 -j DROP - inet6/filter/logdrop-234 -j DROP - inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1017 {"flow-limit":{}} -(filter-limit) - inet/filter/FORWARD -j limit-722 - inet6/filter/FORWARD -j limit-722 - inet/filter/INPUT -j limit-722 - inet6/filter/INPUT -j limit-722 - inet/filter/OUTPUT -j limit-722 - inet6/filter/OUTPUT -j limit-722 - inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 - inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 - inet/filter/logdrop-235 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-235 -m limit --limit 1/second -j LOG - inet/filter/logdrop-235 -j DROP - inet6/filter/logdrop-235 -j DROP - inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1018 {"action":"pass","flow-limit":{}} -(filter-limit) - inet/filter/FORWARD -j limit-723 - inet6/filter/FORWARD -j limit-723 - inet/filter/INPUT -j limit-723 - inet6/filter/INPUT -j limit-723 - inet/filter/OUTPUT -j limit-723 - inet6/filter/OUTPUT -j limit-723 - inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 - inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 - inet/filter/logdrop-236 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-236 -m limit --limit 1/second -j LOG - inet/filter/logdrop-236 -j DROP - inet6/filter/logdrop-236 -j DROP - inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1019 {"flow-limit":{},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-724 - inet6/filter/FORWARD -j limit-724 - inet/filter/INPUT -j limit-724 - inet6/filter/INPUT -j limit-724 - inet/filter/OUTPUT -j limit-724 - inet6/filter/OUTPUT -j limit-724 - inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 - inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 - inet/filter/logdrop-237 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-237 -m limit --limit 1/second -j LOG - inet/filter/logdrop-237 -j DROP - inet6/filter/logdrop-237 -j DROP - inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-1 - inet6/filter/FORWARD -j logaccept-final-1 - inet/filter/INPUT -j logaccept-final-1 - inet6/filter/INPUT -j logaccept-final-1 - inet/filter/OUTPUT -j logaccept-final-1 - inet6/filter/OUTPUT -j logaccept-final-1 - inet/filter/logaccept-final-1 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-1 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-1 -j ACCEPT - inet6/filter/logaccept-final-1 -j ACCEPT - -Filter 1020 {"action":"pass","flow-limit":{},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-725 - inet6/filter/FORWARD -j limit-725 - inet/filter/INPUT -j limit-725 - inet6/filter/INPUT -j limit-725 - inet/filter/OUTPUT -j limit-725 - inet6/filter/OUTPUT -j limit-725 - inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 - inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 - inet/filter/logdrop-238 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-238 -m limit --limit 1/second -j LOG - inet/filter/logdrop-238 -j DROP - inet6/filter/logdrop-238 -j DROP - inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1021 {"flow-limit":{},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-726 - inet6/filter/FORWARD -j limit-726 - inet/filter/INPUT -j limit-726 - inet6/filter/INPUT -j limit-726 - inet/filter/OUTPUT -j limit-726 - inet6/filter/OUTPUT -j limit-726 - inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 - inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 - inet/filter/logdrop-239 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-239 -m limit --limit 1/second -j LOG - inet/filter/logdrop-239 -j DROP - inet6/filter/logdrop-239 -j DROP - inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1022 {"action":"pass","flow-limit":{},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-727 - inet6/filter/FORWARD -j limit-727 - inet/filter/INPUT -j limit-727 - inet6/filter/INPUT -j limit-727 - inet/filter/OUTPUT -j limit-727 - inet6/filter/OUTPUT -j limit-727 - inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 - inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 - inet/filter/logdrop-240 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-240 -m limit --limit 1/second -j LOG - inet/filter/logdrop-240 -j DROP - inet6/filter/logdrop-240 -j DROP - inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1023 {"flow-limit":{"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-728 - inet6/filter/FORWARD -j limit-728 - inet/filter/INPUT -j limit-728 - inet6/filter/INPUT -j limit-728 - inet/filter/OUTPUT -j limit-728 - inet6/filter/OUTPUT -j limit-728 - inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 - inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 - inet/filter/logdrop-241 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-241 -m limit --limit 1/second -j LOG - inet/filter/logdrop-241 -j DROP - inet6/filter/logdrop-241 -j DROP - inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1024 {"action":"pass","flow-limit":{"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-729 - inet6/filter/FORWARD -j limit-729 - inet/filter/INPUT -j limit-729 - inet6/filter/INPUT -j limit-729 - inet/filter/OUTPUT -j limit-729 - inet6/filter/OUTPUT -j limit-729 - inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 - inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 - inet/filter/logdrop-242 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-242 -m limit --limit 1/second -j LOG - inet/filter/logdrop-242 -j DROP - inet6/filter/logdrop-242 -j DROP - inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1025 {"flow-limit":{"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-730 - inet6/filter/FORWARD -j limit-730 - inet/filter/INPUT -j limit-730 - inet6/filter/INPUT -j limit-730 - inet/filter/OUTPUT -j limit-730 - inet6/filter/OUTPUT -j limit-730 - inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 - inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 - inet/filter/logdrop-243 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-243 -m limit --limit 1/second -j LOG - inet/filter/logdrop-243 -j DROP - inet6/filter/logdrop-243 -j DROP - inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-2 - inet6/filter/FORWARD -j logaccept-final-2 - inet/filter/INPUT -j logaccept-final-2 - inet6/filter/INPUT -j logaccept-final-2 - inet/filter/OUTPUT -j logaccept-final-2 - inet6/filter/OUTPUT -j logaccept-final-2 - inet/filter/logaccept-final-2 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-2 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-2 -j ACCEPT - inet6/filter/logaccept-final-2 -j ACCEPT - -Filter 1026 {"action":"pass","flow-limit":{"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-731 - inet6/filter/FORWARD -j limit-731 - inet/filter/INPUT -j limit-731 - inet6/filter/INPUT -j limit-731 - inet/filter/OUTPUT -j limit-731 - inet6/filter/OUTPUT -j limit-731 - inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 - inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 - inet/filter/logdrop-244 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-244 -m limit --limit 1/second -j LOG - inet/filter/logdrop-244 -j DROP - inet6/filter/logdrop-244 -j DROP - inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1027 {"flow-limit":{"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-732 - inet6/filter/FORWARD -j limit-732 - inet/filter/INPUT -j limit-732 - inet6/filter/INPUT -j limit-732 - inet/filter/OUTPUT -j limit-732 - inet6/filter/OUTPUT -j limit-732 - inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 - inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 - inet/filter/logdrop-245 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-245 -m limit --limit 1/second -j LOG - inet/filter/logdrop-245 -j DROP - inet6/filter/logdrop-245 -j DROP - inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1028 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-733 - inet6/filter/FORWARD -j limit-733 - inet/filter/INPUT -j limit-733 - inet6/filter/INPUT -j limit-733 - inet/filter/OUTPUT -j limit-733 - inet6/filter/OUTPUT -j limit-733 - inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-246 - inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-246 - inet/filter/logdrop-246 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-246 -m limit --limit 1/second -j LOG - inet/filter/logdrop-246 -j DROP - inet6/filter/logdrop-246 -j DROP - inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1029 {"flow-limit":{"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-734 - inet6/filter/FORWARD -j limit-734 - inet/filter/INPUT -j limit-734 - inet6/filter/INPUT -j limit-734 - inet/filter/OUTPUT -j limit-734 - inet6/filter/OUTPUT -j limit-734 - inet/filter/limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 - inet6/filter/limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 - inet/filter/logdrop-247 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-247 -m limit --limit 1/second -j LOG - inet/filter/logdrop-247 -j DROP - inet6/filter/logdrop-247 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1030 {"action":"pass","flow-limit":{"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-735 - inet6/filter/FORWARD -j limit-735 - inet/filter/INPUT -j limit-735 - inet6/filter/INPUT -j limit-735 - inet/filter/OUTPUT -j limit-735 - inet6/filter/OUTPUT -j limit-735 - inet/filter/limit-735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 - inet6/filter/limit-735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 - inet/filter/logdrop-248 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-248 -m limit --limit 1/second -j LOG - inet/filter/logdrop-248 -j DROP - inet6/filter/logdrop-248 -j DROP - -Filter 1031 {"flow-limit":{"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-736 - inet6/filter/FORWARD -j limit-736 - inet/filter/INPUT -j limit-736 - inet6/filter/INPUT -j limit-736 - inet/filter/OUTPUT -j limit-736 - inet6/filter/OUTPUT -j limit-736 - inet/filter/limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 - inet6/filter/limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 - inet/filter/logdrop-249 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-249 -m limit --limit 1/second -j LOG - inet/filter/logdrop-249 -j DROP - inet6/filter/logdrop-249 -j DROP - inet/filter/FORWARD -j logaccept-final-3 - inet6/filter/FORWARD -j logaccept-final-3 - inet/filter/INPUT -j logaccept-final-3 - inet6/filter/INPUT -j logaccept-final-3 - inet/filter/OUTPUT -j logaccept-final-3 - inet6/filter/OUTPUT -j logaccept-final-3 - inet/filter/logaccept-final-3 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-3 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-3 -j ACCEPT - inet6/filter/logaccept-final-3 -j ACCEPT - -Filter 1032 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-737 - inet6/filter/FORWARD -j limit-737 - inet/filter/INPUT -j limit-737 - inet6/filter/INPUT -j limit-737 - inet/filter/OUTPUT -j limit-737 - inet6/filter/OUTPUT -j limit-737 - inet/filter/limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 - inet6/filter/limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 - inet/filter/logdrop-250 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-250 -m limit --limit 1/second -j LOG - inet/filter/logdrop-250 -j DROP - inet6/filter/logdrop-250 -j DROP - inet/filter/limit-737 -m limit --limit 1/second -j LOG - inet6/filter/limit-737 -m limit --limit 1/second -j LOG - -Filter 1033 {"flow-limit":{"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-738 - inet6/filter/FORWARD -j limit-738 - inet/filter/INPUT -j limit-738 - inet6/filter/INPUT -j limit-738 - inet/filter/OUTPUT -j limit-738 - inet6/filter/OUTPUT -j limit-738 - inet/filter/limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 - inet6/filter/limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 - inet/filter/logdrop-251 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-251 -m limit --limit 1/second -j LOG - inet/filter/logdrop-251 -j DROP - inet6/filter/logdrop-251 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1034 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-739 - inet6/filter/FORWARD -j limit-739 - inet/filter/INPUT -j limit-739 - inet6/filter/INPUT -j limit-739 - inet/filter/OUTPUT -j limit-739 - inet6/filter/OUTPUT -j limit-739 - inet/filter/limit-739 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 - inet6/filter/limit-739 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-252 - inet/filter/logdrop-252 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-252 -m limit --limit 1/second -j LOG - inet/filter/logdrop-252 -j DROP - inet6/filter/logdrop-252 -j DROP - -Filter 1035 {"flow-limit":{"addr":"dest","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-740 - inet6/filter/FORWARD -j limit-740 - inet/filter/INPUT -j limit-740 - inet6/filter/INPUT -j limit-740 - inet/filter/OUTPUT -j limit-740 - inet6/filter/OUTPUT -j limit-740 - inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 - inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 - inet/filter/logdrop-253 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-253 -m limit --limit 1/second -j LOG - inet/filter/logdrop-253 -j DROP - inet6/filter/logdrop-253 -j DROP - inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1036 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-741 - inet6/filter/FORWARD -j limit-741 - inet/filter/INPUT -j limit-741 - inet6/filter/INPUT -j limit-741 - inet/filter/OUTPUT -j limit-741 - inet6/filter/OUTPUT -j limit-741 - inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 - inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 - inet/filter/logdrop-254 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-254 -m limit --limit 1/second -j LOG - inet/filter/logdrop-254 -j DROP - inet6/filter/logdrop-254 -j DROP - inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1037 {"flow-limit":{"addr":"dest","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-742 - inet6/filter/FORWARD -j limit-742 - inet/filter/INPUT -j limit-742 - inet6/filter/INPUT -j limit-742 - inet/filter/OUTPUT -j limit-742 - inet6/filter/OUTPUT -j limit-742 - inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 - inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 - inet/filter/logdrop-255 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-255 -m limit --limit 1/second -j LOG - inet/filter/logdrop-255 -j DROP - inet6/filter/logdrop-255 -j DROP - inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-4 - inet6/filter/FORWARD -j logaccept-final-4 - inet/filter/INPUT -j logaccept-final-4 - inet6/filter/INPUT -j logaccept-final-4 - inet/filter/OUTPUT -j logaccept-final-4 - inet6/filter/OUTPUT -j logaccept-final-4 - inet/filter/logaccept-final-4 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-4 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-4 -j ACCEPT - inet6/filter/logaccept-final-4 -j ACCEPT - -Filter 1038 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-743 - inet6/filter/FORWARD -j limit-743 - inet/filter/INPUT -j limit-743 - inet6/filter/INPUT -j limit-743 - inet/filter/OUTPUT -j limit-743 - inet6/filter/OUTPUT -j limit-743 - inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 - inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 - inet/filter/logdrop-256 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-256 -m limit --limit 1/second -j LOG - inet/filter/logdrop-256 -j DROP - inet6/filter/logdrop-256 -j DROP - inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1039 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-744 - inet6/filter/FORWARD -j limit-744 - inet/filter/INPUT -j limit-744 - inet6/filter/INPUT -j limit-744 - inet/filter/OUTPUT -j limit-744 - inet6/filter/OUTPUT -j limit-744 - inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 - inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 - inet/filter/logdrop-257 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-257 -m limit --limit 1/second -j LOG - inet/filter/logdrop-257 -j DROP - inet6/filter/logdrop-257 -j DROP - inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1040 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-745 - inet6/filter/FORWARD -j limit-745 - inet/filter/INPUT -j limit-745 - inet6/filter/INPUT -j limit-745 - inet/filter/OUTPUT -j limit-745 - inet6/filter/OUTPUT -j limit-745 - inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-258 - inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-258 - inet/filter/logdrop-258 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-258 -m limit --limit 1/second -j LOG - inet/filter/logdrop-258 -j DROP - inet6/filter/logdrop-258 -j DROP - inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1041 {"flow-limit":{"addr":"dest","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-746 - inet6/filter/FORWARD -j limit-746 - inet/filter/INPUT -j limit-746 - inet6/filter/INPUT -j limit-746 - inet/filter/OUTPUT -j limit-746 - inet6/filter/OUTPUT -j limit-746 - inet/filter/limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 - inet6/filter/limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 - inet/filter/logdrop-259 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-259 -m limit --limit 1/second -j LOG - inet/filter/logdrop-259 -j DROP - inet6/filter/logdrop-259 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1042 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-747 - inet6/filter/FORWARD -j limit-747 - inet/filter/INPUT -j limit-747 - inet6/filter/INPUT -j limit-747 - inet/filter/OUTPUT -j limit-747 - inet6/filter/OUTPUT -j limit-747 - inet/filter/limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 - inet6/filter/limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 - inet/filter/logdrop-260 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-260 -m limit --limit 1/second -j LOG - inet/filter/logdrop-260 -j DROP - inet6/filter/logdrop-260 -j DROP - -Filter 1043 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-748 - inet6/filter/FORWARD -j limit-748 - inet/filter/INPUT -j limit-748 - inet6/filter/INPUT -j limit-748 - inet/filter/OUTPUT -j limit-748 - inet6/filter/OUTPUT -j limit-748 - inet/filter/limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 - inet6/filter/limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 - inet/filter/logdrop-261 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-261 -m limit --limit 1/second -j LOG - inet/filter/logdrop-261 -j DROP - inet6/filter/logdrop-261 -j DROP - inet/filter/FORWARD -j logaccept-final-5 - inet6/filter/FORWARD -j logaccept-final-5 - inet/filter/INPUT -j logaccept-final-5 - inet6/filter/INPUT -j logaccept-final-5 - inet/filter/OUTPUT -j logaccept-final-5 - inet6/filter/OUTPUT -j logaccept-final-5 - inet/filter/logaccept-final-5 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-5 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-5 -j ACCEPT - inet6/filter/logaccept-final-5 -j ACCEPT - -Filter 1044 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-749 - inet6/filter/FORWARD -j limit-749 - inet/filter/INPUT -j limit-749 - inet6/filter/INPUT -j limit-749 - inet/filter/OUTPUT -j limit-749 - inet6/filter/OUTPUT -j limit-749 - inet/filter/limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 - inet6/filter/limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 - inet/filter/logdrop-262 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-262 -m limit --limit 1/second -j LOG - inet/filter/logdrop-262 -j DROP - inet6/filter/logdrop-262 -j DROP - inet/filter/limit-749 -m limit --limit 1/second -j LOG - inet6/filter/limit-749 -m limit --limit 1/second -j LOG - -Filter 1045 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-750 - inet6/filter/FORWARD -j limit-750 - inet/filter/INPUT -j limit-750 - inet6/filter/INPUT -j limit-750 - inet/filter/OUTPUT -j limit-750 - inet6/filter/OUTPUT -j limit-750 - inet/filter/limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 - inet6/filter/limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 - inet/filter/logdrop-263 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-263 -m limit --limit 1/second -j LOG - inet/filter/logdrop-263 -j DROP - inet6/filter/logdrop-263 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1046 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-751 - inet6/filter/FORWARD -j limit-751 - inet/filter/INPUT -j limit-751 - inet6/filter/INPUT -j limit-751 - inet/filter/OUTPUT -j limit-751 - inet6/filter/OUTPUT -j limit-751 - inet/filter/limit-751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-264 - inet6/filter/limit-751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-264 - inet/filter/logdrop-264 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-264 -m limit --limit 1/second -j LOG - inet/filter/logdrop-264 -j DROP - inet6/filter/logdrop-264 -j DROP - -Filter 1047 {"flow-limit":{"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-752 - inet6/filter/FORWARD -j limit-752 - inet/filter/INPUT -j limit-752 - inet6/filter/INPUT -j limit-752 - inet/filter/OUTPUT -j limit-752 - inet6/filter/OUTPUT -j limit-752 - inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 - inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 - inet/filter/logdrop-265 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-265 -m limit --limit 1/second -j LOG - inet/filter/logdrop-265 -j DROP - inet6/filter/logdrop-265 -j DROP - inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1048 {"action":"pass","flow-limit":{"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-753 - inet6/filter/FORWARD -j limit-753 - inet/filter/INPUT -j limit-753 - inet6/filter/INPUT -j limit-753 - inet/filter/OUTPUT -j limit-753 - inet6/filter/OUTPUT -j limit-753 - inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 - inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 - inet/filter/logdrop-266 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-266 -m limit --limit 1/second -j LOG - inet/filter/logdrop-266 -j DROP - inet6/filter/logdrop-266 -j DROP - inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 1049 {"flow-limit":{"name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-754 - inet6/filter/FORWARD -j limit-754 - inet/filter/INPUT -j limit-754 - inet6/filter/INPUT -j limit-754 - inet/filter/OUTPUT -j limit-754 - inet6/filter/OUTPUT -j limit-754 - inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 - inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 - inet/filter/logdrop-267 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-267 -m limit --limit 1/second -j LOG - inet/filter/logdrop-267 -j DROP - inet6/filter/logdrop-267 -j DROP - inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-6 - inet6/filter/FORWARD -j logaccept-final-6 - inet/filter/INPUT -j logaccept-final-6 - inet6/filter/INPUT -j logaccept-final-6 - inet/filter/OUTPUT -j logaccept-final-6 - inet6/filter/OUTPUT -j logaccept-final-6 - inet/filter/logaccept-final-6 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-6 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-6 -j ACCEPT - inet6/filter/logaccept-final-6 -j ACCEPT - -Filter 1050 {"action":"pass","flow-limit":{"name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-755 - inet6/filter/FORWARD -j limit-755 - inet/filter/INPUT -j limit-755 - inet6/filter/INPUT -j limit-755 - inet/filter/OUTPUT -j limit-755 - inet6/filter/OUTPUT -j limit-755 - inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 - inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 - inet/filter/logdrop-268 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-268 -m limit --limit 1/second -j LOG - inet/filter/logdrop-268 -j DROP - inet6/filter/logdrop-268 -j DROP - inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 1051 {"flow-limit":{"name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-756 - inet6/filter/FORWARD -j limit-756 - inet/filter/INPUT -j limit-756 - inet6/filter/INPUT -j limit-756 - inet/filter/OUTPUT -j limit-756 - inet6/filter/OUTPUT -j limit-756 - inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 - inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 - inet/filter/logdrop-269 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-269 -m limit --limit 1/second -j LOG - inet/filter/logdrop-269 -j DROP - inet6/filter/logdrop-269 -j DROP - inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1052 {"action":"pass","flow-limit":{"name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-757 - inet6/filter/FORWARD -j limit-757 - inet/filter/INPUT -j limit-757 - inet6/filter/INPUT -j limit-757 - inet/filter/OUTPUT -j limit-757 - inet6/filter/OUTPUT -j limit-757 - inet/filter/limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-270 - inet6/filter/limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-270 - inet/filter/logdrop-270 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-270 -m limit --limit 1/second -j LOG - inet/filter/logdrop-270 -j DROP - inet6/filter/logdrop-270 -j DROP - inet/filter/limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-757 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 1053 {"flow-limit":{"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-758 - inet6/filter/FORWARD -j limit-758 - inet/filter/INPUT -j limit-758 - inet6/filter/INPUT -j limit-758 - inet/filter/OUTPUT -j limit-758 - inet6/filter/OUTPUT -j limit-758 - inet/filter/limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 - inet6/filter/limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 - inet/filter/logdrop-271 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-271 -m limit --limit 1/second -j LOG - inet/filter/logdrop-271 -j DROP - inet6/filter/logdrop-271 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1054 {"action":"pass","flow-limit":{"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-759 - inet6/filter/FORWARD -j limit-759 - inet/filter/INPUT -j limit-759 - inet6/filter/INPUT -j limit-759 - inet/filter/OUTPUT -j limit-759 - inet6/filter/OUTPUT -j limit-759 - inet/filter/limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 - inet6/filter/limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 - inet/filter/logdrop-272 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-272 -m limit --limit 1/second -j LOG - inet/filter/logdrop-272 -j DROP - inet6/filter/logdrop-272 -j DROP - -Filter 1055 {"flow-limit":{"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-760 - inet6/filter/FORWARD -j limit-760 - inet/filter/INPUT -j limit-760 - inet6/filter/INPUT -j limit-760 - inet/filter/OUTPUT -j limit-760 - inet6/filter/OUTPUT -j limit-760 - inet/filter/limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 - inet6/filter/limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 - inet/filter/logdrop-273 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-273 -m limit --limit 1/second -j LOG - inet/filter/logdrop-273 -j DROP - inet6/filter/logdrop-273 -j DROP - inet/filter/FORWARD -j logaccept-final-7 - inet6/filter/FORWARD -j logaccept-final-7 - inet/filter/INPUT -j logaccept-final-7 - inet6/filter/INPUT -j logaccept-final-7 - inet/filter/OUTPUT -j logaccept-final-7 - inet6/filter/OUTPUT -j logaccept-final-7 - inet/filter/logaccept-final-7 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-7 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-7 -j ACCEPT - inet6/filter/logaccept-final-7 -j ACCEPT - -Filter 1056 {"action":"pass","flow-limit":{"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-761 - inet6/filter/FORWARD -j limit-761 - inet/filter/INPUT -j limit-761 - inet6/filter/INPUT -j limit-761 - inet/filter/OUTPUT -j limit-761 - inet6/filter/OUTPUT -j limit-761 - inet/filter/limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 - inet6/filter/limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 - inet/filter/logdrop-274 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-274 -m limit --limit 1/second -j LOG - inet/filter/logdrop-274 -j DROP - inet6/filter/logdrop-274 -j DROP - inet/filter/limit-761 -m limit --limit 1/second -j LOG - inet6/filter/limit-761 -m limit --limit 1/second -j LOG - -Filter 1057 {"flow-limit":{"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-762 - inet6/filter/FORWARD -j limit-762 - inet/filter/INPUT -j limit-762 - inet6/filter/INPUT -j limit-762 - inet/filter/OUTPUT -j limit-762 - inet6/filter/OUTPUT -j limit-762 - inet/filter/limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 - inet6/filter/limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 - inet/filter/logdrop-275 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-275 -m limit --limit 1/second -j LOG - inet/filter/logdrop-275 -j DROP - inet6/filter/logdrop-275 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1058 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-763 - inet6/filter/FORWARD -j limit-763 - inet/filter/INPUT -j limit-763 - inet6/filter/INPUT -j limit-763 - inet/filter/OUTPUT -j limit-763 - inet6/filter/OUTPUT -j limit-763 - inet/filter/limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 - inet6/filter/limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 - inet/filter/logdrop-276 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-276 -m limit --limit 1/second -j LOG - inet/filter/logdrop-276 -j DROP - inet6/filter/logdrop-276 -j DROP - -Filter 1059 {"flow-limit":{"addr":"dest","name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-764 - inet6/filter/FORWARD -j limit-764 - inet/filter/INPUT -j limit-764 - inet6/filter/INPUT -j limit-764 - inet/filter/OUTPUT -j limit-764 - inet6/filter/OUTPUT -j limit-764 - inet/filter/limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 - inet6/filter/limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 - inet/filter/logdrop-277 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-277 -m limit --limit 1/second -j LOG - inet/filter/logdrop-277 -j DROP - inet6/filter/logdrop-277 -j DROP - inet/filter/limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-764 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1060 {"action":"pass","flow-limit":{"addr":"dest","name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-765 - inet6/filter/FORWARD -j limit-765 - inet/filter/INPUT -j limit-765 - inet6/filter/INPUT -j limit-765 - inet/filter/OUTPUT -j limit-765 - inet6/filter/OUTPUT -j limit-765 - inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 - inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 - inet/filter/logdrop-278 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-278 -m limit --limit 1/second -j LOG - inet/filter/logdrop-278 -j DROP - inet6/filter/logdrop-278 -j DROP - inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 1061 {"flow-limit":{"addr":"dest","name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-766 - inet6/filter/FORWARD -j limit-766 - inet/filter/INPUT -j limit-766 - inet6/filter/INPUT -j limit-766 - inet/filter/OUTPUT -j limit-766 - inet6/filter/OUTPUT -j limit-766 - inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 - inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 - inet/filter/logdrop-279 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-279 -m limit --limit 1/second -j LOG - inet/filter/logdrop-279 -j DROP - inet6/filter/logdrop-279 -j DROP - inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-8 - inet6/filter/FORWARD -j logaccept-final-8 - inet/filter/INPUT -j logaccept-final-8 - inet6/filter/INPUT -j logaccept-final-8 - inet/filter/OUTPUT -j logaccept-final-8 - inet6/filter/OUTPUT -j logaccept-final-8 - inet/filter/logaccept-final-8 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-8 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-8 -j ACCEPT - inet6/filter/logaccept-final-8 -j ACCEPT - -Filter 1062 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-767 - inet6/filter/FORWARD -j limit-767 - inet/filter/INPUT -j limit-767 - inet6/filter/INPUT -j limit-767 - inet/filter/OUTPUT -j limit-767 - inet6/filter/OUTPUT -j limit-767 - inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 - inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 - inet/filter/logdrop-280 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-280 -m limit --limit 1/second -j LOG - inet/filter/logdrop-280 -j DROP - inet6/filter/logdrop-280 -j DROP - inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 1063 {"flow-limit":{"addr":"dest","name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-768 - inet6/filter/FORWARD -j limit-768 - inet/filter/INPUT -j limit-768 - inet6/filter/INPUT -j limit-768 - inet/filter/OUTPUT -j limit-768 - inet6/filter/OUTPUT -j limit-768 - inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 - inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 - inet/filter/logdrop-281 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-281 -m limit --limit 1/second -j LOG - inet/filter/logdrop-281 -j DROP - inet6/filter/logdrop-281 -j DROP - inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1064 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-769 - inet6/filter/FORWARD -j limit-769 - inet/filter/INPUT -j limit-769 - inet6/filter/INPUT -j limit-769 - inet/filter/OUTPUT -j limit-769 - inet6/filter/OUTPUT -j limit-769 - inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-282 - inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-282 - inet/filter/logdrop-282 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-282 -m limit --limit 1/second -j LOG - inet/filter/logdrop-282 -j DROP - inet6/filter/logdrop-282 -j DROP - inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 1065 {"flow-limit":{"addr":"dest","name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-770 - inet6/filter/FORWARD -j limit-770 - inet/filter/INPUT -j limit-770 - inet6/filter/INPUT -j limit-770 - inet/filter/OUTPUT -j limit-770 - inet6/filter/OUTPUT -j limit-770 - inet/filter/limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 - inet6/filter/limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 - inet/filter/logdrop-283 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-283 -m limit --limit 1/second -j LOG - inet/filter/logdrop-283 -j DROP - inet6/filter/logdrop-283 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1066 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-771 - inet6/filter/FORWARD -j limit-771 - inet/filter/INPUT -j limit-771 - inet6/filter/INPUT -j limit-771 - inet/filter/OUTPUT -j limit-771 - inet6/filter/OUTPUT -j limit-771 - inet/filter/limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 - inet6/filter/limit-771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 - inet/filter/logdrop-284 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-284 -m limit --limit 1/second -j LOG - inet/filter/logdrop-284 -j DROP - inet6/filter/logdrop-284 -j DROP - -Filter 1067 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-772 - inet6/filter/FORWARD -j limit-772 - inet/filter/INPUT -j limit-772 - inet6/filter/INPUT -j limit-772 - inet/filter/OUTPUT -j limit-772 - inet6/filter/OUTPUT -j limit-772 - inet/filter/limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 - inet6/filter/limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 - inet/filter/logdrop-285 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-285 -m limit --limit 1/second -j LOG - inet/filter/logdrop-285 -j DROP - inet6/filter/logdrop-285 -j DROP - inet/filter/FORWARD -j logaccept-final-9 - inet6/filter/FORWARD -j logaccept-final-9 - inet/filter/INPUT -j logaccept-final-9 - inet6/filter/INPUT -j logaccept-final-9 - inet/filter/OUTPUT -j logaccept-final-9 - inet6/filter/OUTPUT -j logaccept-final-9 - inet/filter/logaccept-final-9 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-9 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-9 -j ACCEPT - inet6/filter/logaccept-final-9 -j ACCEPT - -Filter 1068 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-773 - inet6/filter/FORWARD -j limit-773 - inet/filter/INPUT -j limit-773 - inet6/filter/INPUT -j limit-773 - inet/filter/OUTPUT -j limit-773 - inet6/filter/OUTPUT -j limit-773 - inet/filter/limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 - inet6/filter/limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 - inet/filter/logdrop-286 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-286 -m limit --limit 1/second -j LOG - inet/filter/logdrop-286 -j DROP - inet6/filter/logdrop-286 -j DROP - inet/filter/limit-773 -m limit --limit 1/second -j LOG - inet6/filter/limit-773 -m limit --limit 1/second -j LOG - -Filter 1069 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-774 - inet6/filter/FORWARD -j limit-774 - inet/filter/INPUT -j limit-774 - inet6/filter/INPUT -j limit-774 - inet/filter/OUTPUT -j limit-774 - inet6/filter/OUTPUT -j limit-774 - inet/filter/limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 - inet6/filter/limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 - inet/filter/logdrop-287 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-287 -m limit --limit 1/second -j LOG - inet/filter/logdrop-287 -j DROP - inet6/filter/logdrop-287 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1070 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-775 - inet6/filter/FORWARD -j limit-775 - inet/filter/INPUT -j limit-775 - inet6/filter/INPUT -j limit-775 - inet/filter/OUTPUT -j limit-775 - inet6/filter/OUTPUT -j limit-775 - inet/filter/limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-288 - inet6/filter/limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-288 - inet/filter/logdrop-288 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-288 -m limit --limit 1/second -j LOG - inet/filter/logdrop-288 -j DROP - inet6/filter/logdrop-288 -j DROP - -Filter 1071 {"flow-limit":{"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-776 - inet6/filter/FORWARD -j limit-776 - inet/filter/INPUT -j limit-776 - inet6/filter/INPUT -j limit-776 - inet/filter/OUTPUT -j limit-776 - inet6/filter/OUTPUT -j limit-776 - inet/filter/limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1072 {"action":"pass","flow-limit":{"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-777 - inet6/filter/FORWARD -j limit-777 - inet/filter/INPUT -j limit-777 - inet6/filter/INPUT -j limit-777 - inet/filter/OUTPUT -j limit-777 - inet6/filter/OUTPUT -j limit-777 - inet/filter/limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1073 {"flow-limit":{"log":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-778 - inet6/filter/FORWARD -j limit-778 - inet/filter/INPUT -j limit-778 - inet6/filter/INPUT -j limit-778 - inet/filter/OUTPUT -j limit-778 - inet6/filter/OUTPUT -j limit-778 - inet/filter/limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-10 - inet6/filter/FORWARD -j logaccept-final-10 - inet/filter/INPUT -j logaccept-final-10 - inet6/filter/INPUT -j logaccept-final-10 - inet/filter/OUTPUT -j logaccept-final-10 - inet6/filter/OUTPUT -j logaccept-final-10 - inet/filter/logaccept-final-10 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-10 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-10 -j ACCEPT - inet6/filter/logaccept-final-10 -j ACCEPT - -Filter 1074 {"action":"pass","flow-limit":{"log":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-779 - inet6/filter/FORWARD -j limit-779 - inet/filter/INPUT -j limit-779 - inet6/filter/INPUT -j limit-779 - inet/filter/OUTPUT -j limit-779 - inet6/filter/OUTPUT -j limit-779 - inet/filter/limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1075 {"flow-limit":{"log":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-780 - inet6/filter/FORWARD -j limit-780 - inet/filter/INPUT -j limit-780 - inet6/filter/INPUT -j limit-780 - inet/filter/OUTPUT -j limit-780 - inet6/filter/OUTPUT -j limit-780 - inet/filter/limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1076 {"action":"pass","flow-limit":{"log":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-781 - inet6/filter/FORWARD -j limit-781 - inet/filter/INPUT -j limit-781 - inet6/filter/INPUT -j limit-781 - inet/filter/OUTPUT -j limit-781 - inet6/filter/OUTPUT -j limit-781 - inet/filter/limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1077 {"flow-limit":{"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-782 - inet6/filter/FORWARD -j limit-782 - inet/filter/INPUT -j limit-782 - inet6/filter/INPUT -j limit-782 - inet/filter/OUTPUT -j limit-782 - inet6/filter/OUTPUT -j limit-782 - inet/filter/limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1078 {"action":"pass","flow-limit":{"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-783 - inet6/filter/FORWARD -j limit-783 - inet/filter/INPUT -j limit-783 - inet6/filter/INPUT -j limit-783 - inet/filter/OUTPUT -j limit-783 - inet6/filter/OUTPUT -j limit-783 - inet/filter/limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1079 {"flow-limit":{"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-784 - inet6/filter/FORWARD -j limit-784 - inet/filter/INPUT -j limit-784 - inet6/filter/INPUT -j limit-784 - inet/filter/OUTPUT -j limit-784 - inet6/filter/OUTPUT -j limit-784 - inet/filter/limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-11 - inet6/filter/FORWARD -j logaccept-final-11 - inet/filter/INPUT -j logaccept-final-11 - inet6/filter/INPUT -j logaccept-final-11 - inet/filter/OUTPUT -j logaccept-final-11 - inet6/filter/OUTPUT -j logaccept-final-11 - inet/filter/logaccept-final-11 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-11 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-11 -j ACCEPT - inet6/filter/logaccept-final-11 -j ACCEPT - -Filter 1080 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-785 - inet6/filter/FORWARD -j limit-785 - inet/filter/INPUT -j limit-785 - inet6/filter/INPUT -j limit-785 - inet/filter/OUTPUT -j limit-785 - inet6/filter/OUTPUT -j limit-785 - inet/filter/limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1081 {"flow-limit":{"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-786 - inet6/filter/FORWARD -j limit-786 - inet/filter/INPUT -j limit-786 - inet6/filter/INPUT -j limit-786 - inet/filter/OUTPUT -j limit-786 - inet6/filter/OUTPUT -j limit-786 - inet/filter/limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1082 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-787 - inet6/filter/FORWARD -j limit-787 - inet/filter/INPUT -j limit-787 - inet6/filter/INPUT -j limit-787 - inet/filter/OUTPUT -j limit-787 - inet6/filter/OUTPUT -j limit-787 - inet/filter/limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1083 {"flow-limit":{"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-788 - inet6/filter/FORWARD -j limit-788 - inet/filter/INPUT -j limit-788 - inet6/filter/INPUT -j limit-788 - inet/filter/OUTPUT -j limit-788 - inet6/filter/OUTPUT -j limit-788 - inet/filter/limit-788 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1084 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-789 - inet6/filter/FORWARD -j limit-789 - inet/filter/INPUT -j limit-789 - inet6/filter/INPUT -j limit-789 - inet/filter/OUTPUT -j limit-789 - inet6/filter/OUTPUT -j limit-789 - inet/filter/limit-789 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1085 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-790 - inet6/filter/FORWARD -j limit-790 - inet/filter/INPUT -j limit-790 - inet6/filter/INPUT -j limit-790 - inet/filter/OUTPUT -j limit-790 - inet6/filter/OUTPUT -j limit-790 - inet/filter/limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-12 - inet6/filter/FORWARD -j logaccept-final-12 - inet/filter/INPUT -j logaccept-final-12 - inet6/filter/INPUT -j logaccept-final-12 - inet/filter/OUTPUT -j logaccept-final-12 - inet6/filter/OUTPUT -j logaccept-final-12 - inet/filter/logaccept-final-12 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-12 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-12 -j ACCEPT - inet6/filter/logaccept-final-12 -j ACCEPT - -Filter 1086 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-791 - inet6/filter/FORWARD -j limit-791 - inet/filter/INPUT -j limit-791 - inet6/filter/INPUT -j limit-791 - inet/filter/OUTPUT -j limit-791 - inet6/filter/OUTPUT -j limit-791 - inet/filter/limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-791 -m limit --limit 1/second -j LOG - inet6/filter/limit-791 -m limit --limit 1/second -j LOG - -Filter 1087 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-792 - inet6/filter/FORWARD -j limit-792 - inet/filter/INPUT -j limit-792 - inet6/filter/INPUT -j limit-792 - inet/filter/OUTPUT -j limit-792 - inet6/filter/OUTPUT -j limit-792 - inet/filter/limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1088 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-793 - inet6/filter/FORWARD -j limit-793 - inet/filter/INPUT -j limit-793 - inet6/filter/INPUT -j limit-793 - inet/filter/OUTPUT -j limit-793 - inet6/filter/OUTPUT -j limit-793 - inet/filter/limit-793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1089 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-794 - inet6/filter/FORWARD -j limit-794 - inet/filter/INPUT -j limit-794 - inet6/filter/INPUT -j limit-794 - inet/filter/OUTPUT -j limit-794 - inet6/filter/OUTPUT -j limit-794 - inet/filter/limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1090 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-795 - inet6/filter/FORWARD -j limit-795 - inet/filter/INPUT -j limit-795 - inet6/filter/INPUT -j limit-795 - inet/filter/OUTPUT -j limit-795 - inet6/filter/OUTPUT -j limit-795 - inet/filter/limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1091 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-796 - inet6/filter/FORWARD -j limit-796 - inet/filter/INPUT -j limit-796 - inet6/filter/INPUT -j limit-796 - inet/filter/OUTPUT -j limit-796 - inet6/filter/OUTPUT -j limit-796 - inet/filter/limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-13 - inet6/filter/FORWARD -j logaccept-final-13 - inet/filter/INPUT -j logaccept-final-13 - inet6/filter/INPUT -j logaccept-final-13 - inet/filter/OUTPUT -j logaccept-final-13 - inet6/filter/OUTPUT -j logaccept-final-13 - inet/filter/logaccept-final-13 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-13 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-13 -j ACCEPT - inet6/filter/logaccept-final-13 -j ACCEPT - -Filter 1092 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-797 - inet6/filter/FORWARD -j limit-797 - inet/filter/INPUT -j limit-797 - inet6/filter/INPUT -j limit-797 - inet/filter/OUTPUT -j limit-797 - inet6/filter/OUTPUT -j limit-797 - inet/filter/limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1093 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-798 - inet6/filter/FORWARD -j limit-798 - inet/filter/INPUT -j limit-798 - inet6/filter/INPUT -j limit-798 - inet/filter/OUTPUT -j limit-798 - inet6/filter/OUTPUT -j limit-798 - inet/filter/limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1094 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-799 - inet6/filter/FORWARD -j limit-799 - inet/filter/INPUT -j limit-799 - inet6/filter/INPUT -j limit-799 - inet/filter/OUTPUT -j limit-799 - inet6/filter/OUTPUT -j limit-799 - inet/filter/limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1095 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-800 - inet6/filter/FORWARD -j limit-800 - inet/filter/INPUT -j limit-800 - inet6/filter/INPUT -j limit-800 - inet/filter/OUTPUT -j limit-800 - inet6/filter/OUTPUT -j limit-800 - inet/filter/limit-800 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1096 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-801 - inet6/filter/FORWARD -j limit-801 - inet/filter/INPUT -j limit-801 - inet6/filter/INPUT -j limit-801 - inet/filter/OUTPUT -j limit-801 - inet6/filter/OUTPUT -j limit-801 - inet/filter/limit-801 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-801 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1097 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-802 - inet6/filter/FORWARD -j limit-802 - inet/filter/INPUT -j limit-802 - inet6/filter/INPUT -j limit-802 - inet/filter/OUTPUT -j limit-802 - inet6/filter/OUTPUT -j limit-802 - inet/filter/limit-802 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-14 - inet6/filter/FORWARD -j logaccept-final-14 - inet/filter/INPUT -j logaccept-final-14 - inet6/filter/INPUT -j logaccept-final-14 - inet/filter/OUTPUT -j logaccept-final-14 - inet6/filter/OUTPUT -j logaccept-final-14 - inet/filter/logaccept-final-14 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-14 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-14 -j ACCEPT - inet6/filter/logaccept-final-14 -j ACCEPT - -Filter 1098 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-803 - inet6/filter/FORWARD -j limit-803 - inet/filter/INPUT -j limit-803 - inet6/filter/INPUT -j limit-803 - inet/filter/OUTPUT -j limit-803 - inet6/filter/OUTPUT -j limit-803 - inet/filter/limit-803 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-803 -m limit --limit 1/second -j LOG - inet6/filter/limit-803 -m limit --limit 1/second -j LOG - -Filter 1099 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-804 - inet6/filter/FORWARD -j limit-804 - inet/filter/INPUT -j limit-804 - inet6/filter/INPUT -j limit-804 - inet/filter/OUTPUT -j limit-804 - inet6/filter/OUTPUT -j limit-804 - inet/filter/limit-804 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1100 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-805 - inet6/filter/FORWARD -j limit-805 - inet/filter/INPUT -j limit-805 - inet6/filter/INPUT -j limit-805 - inet/filter/OUTPUT -j limit-805 - inet6/filter/OUTPUT -j limit-805 - inet/filter/limit-805 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1101 {"flow-limit":{"log":false,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-806 - inet6/filter/FORWARD -j limit-806 - inet/filter/INPUT -j limit-806 - inet6/filter/INPUT -j limit-806 - inet/filter/OUTPUT -j limit-806 - inet6/filter/OUTPUT -j limit-806 - inet/filter/limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-806 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1102 {"action":"pass","flow-limit":{"log":false,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-807 - inet6/filter/FORWARD -j limit-807 - inet/filter/INPUT -j limit-807 - inet6/filter/INPUT -j limit-807 - inet/filter/OUTPUT -j limit-807 - inet6/filter/OUTPUT -j limit-807 - inet/filter/limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-807 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 1103 {"flow-limit":{"log":false,"name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-808 - inet6/filter/FORWARD -j limit-808 - inet/filter/INPUT -j limit-808 - inet6/filter/INPUT -j limit-808 - inet/filter/OUTPUT -j limit-808 - inet6/filter/OUTPUT -j limit-808 - inet/filter/limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-808 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-808 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-15 - inet6/filter/FORWARD -j logaccept-final-15 - inet/filter/INPUT -j logaccept-final-15 - inet6/filter/INPUT -j logaccept-final-15 - inet/filter/OUTPUT -j logaccept-final-15 - inet6/filter/OUTPUT -j logaccept-final-15 - inet/filter/logaccept-final-15 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-15 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-15 -j ACCEPT - inet6/filter/logaccept-final-15 -j ACCEPT - -Filter 1104 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-809 - inet6/filter/FORWARD -j limit-809 - inet/filter/INPUT -j limit-809 - inet6/filter/INPUT -j limit-809 - inet/filter/OUTPUT -j limit-809 - inet6/filter/OUTPUT -j limit-809 - inet/filter/limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-809 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-809 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 1105 {"flow-limit":{"log":false,"name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-810 - inet6/filter/FORWARD -j limit-810 - inet/filter/INPUT -j limit-810 - inet6/filter/INPUT -j limit-810 - inet/filter/OUTPUT -j limit-810 - inet6/filter/OUTPUT -j limit-810 - inet/filter/limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-810 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-810 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1106 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-811 - inet6/filter/FORWARD -j limit-811 - inet/filter/INPUT -j limit-811 - inet6/filter/INPUT -j limit-811 - inet/filter/OUTPUT -j limit-811 - inet6/filter/OUTPUT -j limit-811 - inet/filter/limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-811 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-811 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 1107 {"flow-limit":{"log":false,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-812 - inet6/filter/FORWARD -j limit-812 - inet/filter/INPUT -j limit-812 - inet6/filter/INPUT -j limit-812 - inet/filter/OUTPUT -j limit-812 - inet6/filter/OUTPUT -j limit-812 - inet/filter/limit-812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1108 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-813 - inet6/filter/FORWARD -j limit-813 - inet/filter/INPUT -j limit-813 - inet6/filter/INPUT -j limit-813 - inet/filter/OUTPUT -j limit-813 - inet6/filter/OUTPUT -j limit-813 - inet/filter/limit-813 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-813 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1109 {"flow-limit":{"log":false,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-814 - inet6/filter/FORWARD -j limit-814 - inet/filter/INPUT -j limit-814 - inet6/filter/INPUT -j limit-814 - inet/filter/OUTPUT -j limit-814 - inet6/filter/OUTPUT -j limit-814 - inet/filter/limit-814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-16 - inet6/filter/FORWARD -j logaccept-final-16 - inet/filter/INPUT -j logaccept-final-16 - inet6/filter/INPUT -j logaccept-final-16 - inet/filter/OUTPUT -j logaccept-final-16 - inet6/filter/OUTPUT -j logaccept-final-16 - inet/filter/logaccept-final-16 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-16 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-16 -j ACCEPT - inet6/filter/logaccept-final-16 -j ACCEPT - -Filter 1110 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-815 - inet6/filter/FORWARD -j limit-815 - inet/filter/INPUT -j limit-815 - inet6/filter/INPUT -j limit-815 - inet/filter/OUTPUT -j limit-815 - inet6/filter/OUTPUT -j limit-815 - inet/filter/limit-815 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-815 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-815 -m limit --limit 1/second -j LOG - inet6/filter/limit-815 -m limit --limit 1/second -j LOG - -Filter 1111 {"flow-limit":{"log":false,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-816 - inet6/filter/FORWARD -j limit-816 - inet/filter/INPUT -j limit-816 - inet6/filter/INPUT -j limit-816 - inet/filter/OUTPUT -j limit-816 - inet6/filter/OUTPUT -j limit-816 - inet/filter/limit-816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1112 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-817 - inet6/filter/FORWARD -j limit-817 - inet/filter/INPUT -j limit-817 - inet6/filter/INPUT -j limit-817 - inet/filter/OUTPUT -j limit-817 - inet6/filter/OUTPUT -j limit-817 - inet/filter/limit-817 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-817 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1113 {"flow-limit":{"addr":"dest","log":false,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-818 - inet6/filter/FORWARD -j limit-818 - inet/filter/INPUT -j limit-818 - inet6/filter/INPUT -j limit-818 - inet/filter/OUTPUT -j limit-818 - inet6/filter/OUTPUT -j limit-818 - inet/filter/limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-818 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1114 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-819 - inet6/filter/FORWARD -j limit-819 - inet/filter/INPUT -j limit-819 - inet6/filter/INPUT -j limit-819 - inet/filter/OUTPUT -j limit-819 - inet6/filter/OUTPUT -j limit-819 - inet/filter/limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-819 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 1115 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-820 - inet6/filter/FORWARD -j limit-820 - inet/filter/INPUT -j limit-820 - inet6/filter/INPUT -j limit-820 - inet/filter/OUTPUT -j limit-820 - inet6/filter/OUTPUT -j limit-820 - inet/filter/limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-820 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-17 - inet6/filter/FORWARD -j logaccept-final-17 - inet/filter/INPUT -j logaccept-final-17 - inet6/filter/INPUT -j logaccept-final-17 - inet/filter/OUTPUT -j logaccept-final-17 - inet6/filter/OUTPUT -j logaccept-final-17 - inet/filter/logaccept-final-17 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-17 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-17 -j ACCEPT - inet6/filter/logaccept-final-17 -j ACCEPT - -Filter 1116 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-821 - inet6/filter/FORWARD -j limit-821 - inet/filter/INPUT -j limit-821 - inet6/filter/INPUT -j limit-821 - inet/filter/OUTPUT -j limit-821 - inet6/filter/OUTPUT -j limit-821 - inet/filter/limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 1117 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-822 - inet6/filter/FORWARD -j limit-822 - inet/filter/INPUT -j limit-822 - inet6/filter/INPUT -j limit-822 - inet/filter/OUTPUT -j limit-822 - inet6/filter/OUTPUT -j limit-822 - inet/filter/limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-822 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1118 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-823 - inet6/filter/FORWARD -j limit-823 - inet/filter/INPUT -j limit-823 - inet6/filter/INPUT -j limit-823 - inet/filter/OUTPUT -j limit-823 - inet6/filter/OUTPUT -j limit-823 - inet/filter/limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-823 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 1119 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-824 - inet6/filter/FORWARD -j limit-824 - inet/filter/INPUT -j limit-824 - inet6/filter/INPUT -j limit-824 - inet/filter/OUTPUT -j limit-824 - inet6/filter/OUTPUT -j limit-824 - inet/filter/limit-824 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-824 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1120 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-825 - inet6/filter/FORWARD -j limit-825 - inet/filter/INPUT -j limit-825 - inet6/filter/INPUT -j limit-825 - inet/filter/OUTPUT -j limit-825 - inet6/filter/OUTPUT -j limit-825 - inet/filter/limit-825 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-825 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1121 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-826 - inet6/filter/FORWARD -j limit-826 - inet/filter/INPUT -j limit-826 - inet6/filter/INPUT -j limit-826 - inet/filter/OUTPUT -j limit-826 - inet6/filter/OUTPUT -j limit-826 - inet/filter/limit-826 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-826 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-18 - inet6/filter/FORWARD -j logaccept-final-18 - inet/filter/INPUT -j logaccept-final-18 - inet6/filter/INPUT -j logaccept-final-18 - inet/filter/OUTPUT -j logaccept-final-18 - inet6/filter/OUTPUT -j logaccept-final-18 - inet/filter/logaccept-final-18 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-18 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-18 -j ACCEPT - inet6/filter/logaccept-final-18 -j ACCEPT - -Filter 1122 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-827 - inet6/filter/FORWARD -j limit-827 - inet/filter/INPUT -j limit-827 - inet6/filter/INPUT -j limit-827 - inet/filter/OUTPUT -j limit-827 - inet6/filter/OUTPUT -j limit-827 - inet/filter/limit-827 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-827 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-827 -m limit --limit 1/second -j LOG - inet6/filter/limit-827 -m limit --limit 1/second -j LOG - -Filter 1123 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-828 - inet6/filter/FORWARD -j limit-828 - inet/filter/INPUT -j limit-828 - inet6/filter/INPUT -j limit-828 - inet/filter/OUTPUT -j limit-828 - inet6/filter/OUTPUT -j limit-828 - inet/filter/limit-828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1124 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-829 - inet6/filter/FORWARD -j limit-829 - inet/filter/INPUT -j limit-829 - inet6/filter/INPUT -j limit-829 - inet/filter/OUTPUT -j limit-829 - inet6/filter/OUTPUT -j limit-829 - inet/filter/limit-829 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-829 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1125 {"flow-limit":{"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-830 - inet6/filter/FORWARD -j limit-830 - inet/filter/INPUT -j limit-830 - inet6/filter/INPUT -j limit-830 - inet/filter/OUTPUT -j limit-830 - inet6/filter/OUTPUT -j limit-830 - inet/filter/limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1126 {"action":"pass","flow-limit":{"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-831 - inet6/filter/FORWARD -j limit-831 - inet/filter/INPUT -j limit-831 - inet6/filter/INPUT -j limit-831 - inet/filter/OUTPUT -j limit-831 - inet6/filter/OUTPUT -j limit-831 - inet/filter/limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1127 {"flow-limit":{"log":"none"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-832 - inet6/filter/FORWARD -j limit-832 - inet/filter/INPUT -j limit-832 - inet6/filter/INPUT -j limit-832 - inet/filter/OUTPUT -j limit-832 - inet6/filter/OUTPUT -j limit-832 - inet/filter/limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-19 - inet6/filter/FORWARD -j logaccept-final-19 - inet/filter/INPUT -j logaccept-final-19 - inet6/filter/INPUT -j logaccept-final-19 - inet/filter/OUTPUT -j logaccept-final-19 - inet6/filter/OUTPUT -j logaccept-final-19 - inet/filter/logaccept-final-19 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-19 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-19 -j ACCEPT - inet6/filter/logaccept-final-19 -j ACCEPT - -Filter 1128 {"action":"pass","flow-limit":{"log":"none"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-833 - inet6/filter/FORWARD -j limit-833 - inet/filter/INPUT -j limit-833 - inet6/filter/INPUT -j limit-833 - inet/filter/OUTPUT -j limit-833 - inet6/filter/OUTPUT -j limit-833 - inet/filter/limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1129 {"flow-limit":{"log":"none"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-834 - inet6/filter/FORWARD -j limit-834 - inet/filter/INPUT -j limit-834 - inet6/filter/INPUT -j limit-834 - inet/filter/OUTPUT -j limit-834 - inet6/filter/OUTPUT -j limit-834 - inet/filter/limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1130 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-835 - inet6/filter/FORWARD -j limit-835 - inet/filter/INPUT -j limit-835 - inet6/filter/INPUT -j limit-835 - inet/filter/OUTPUT -j limit-835 - inet6/filter/OUTPUT -j limit-835 - inet/filter/limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1131 {"flow-limit":{"log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-836 - inet6/filter/FORWARD -j limit-836 - inet/filter/INPUT -j limit-836 - inet6/filter/INPUT -j limit-836 - inet/filter/OUTPUT -j limit-836 - inet6/filter/OUTPUT -j limit-836 - inet/filter/limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1132 {"action":"pass","flow-limit":{"log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-837 - inet6/filter/FORWARD -j limit-837 - inet/filter/INPUT -j limit-837 - inet6/filter/INPUT -j limit-837 - inet/filter/OUTPUT -j limit-837 - inet6/filter/OUTPUT -j limit-837 - inet/filter/limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1133 {"flow-limit":{"log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-838 - inet6/filter/FORWARD -j limit-838 - inet/filter/INPUT -j limit-838 - inet6/filter/INPUT -j limit-838 - inet/filter/OUTPUT -j limit-838 - inet6/filter/OUTPUT -j limit-838 - inet/filter/limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-20 - inet6/filter/FORWARD -j logaccept-final-20 - inet/filter/INPUT -j logaccept-final-20 - inet6/filter/INPUT -j logaccept-final-20 - inet/filter/OUTPUT -j logaccept-final-20 - inet6/filter/OUTPUT -j logaccept-final-20 - inet/filter/logaccept-final-20 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-20 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-20 -j ACCEPT - inet6/filter/logaccept-final-20 -j ACCEPT - -Filter 1134 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-839 - inet6/filter/FORWARD -j limit-839 - inet/filter/INPUT -j limit-839 - inet6/filter/INPUT -j limit-839 - inet/filter/OUTPUT -j limit-839 - inet6/filter/OUTPUT -j limit-839 - inet/filter/limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1135 {"flow-limit":{"log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-840 - inet6/filter/FORWARD -j limit-840 - inet/filter/INPUT -j limit-840 - inet6/filter/INPUT -j limit-840 - inet/filter/OUTPUT -j limit-840 - inet6/filter/OUTPUT -j limit-840 - inet/filter/limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1136 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-841 - inet6/filter/FORWARD -j limit-841 - inet/filter/INPUT -j limit-841 - inet6/filter/INPUT -j limit-841 - inet/filter/OUTPUT -j limit-841 - inet6/filter/OUTPUT -j limit-841 - inet/filter/limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1137 {"flow-limit":{"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-842 - inet6/filter/FORWARD -j limit-842 - inet/filter/INPUT -j limit-842 - inet6/filter/INPUT -j limit-842 - inet/filter/OUTPUT -j limit-842 - inet6/filter/OUTPUT -j limit-842 - inet/filter/limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1138 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-843 - inet6/filter/FORWARD -j limit-843 - inet/filter/INPUT -j limit-843 - inet6/filter/INPUT -j limit-843 - inet/filter/OUTPUT -j limit-843 - inet6/filter/OUTPUT -j limit-843 - inet/filter/limit-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1139 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-844 - inet6/filter/FORWARD -j limit-844 - inet/filter/INPUT -j limit-844 - inet6/filter/INPUT -j limit-844 - inet/filter/OUTPUT -j limit-844 - inet6/filter/OUTPUT -j limit-844 - inet/filter/limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-21 - inet6/filter/FORWARD -j logaccept-final-21 - inet/filter/INPUT -j logaccept-final-21 - inet6/filter/INPUT -j logaccept-final-21 - inet/filter/OUTPUT -j logaccept-final-21 - inet6/filter/OUTPUT -j logaccept-final-21 - inet/filter/logaccept-final-21 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-21 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-21 -j ACCEPT - inet6/filter/logaccept-final-21 -j ACCEPT - -Filter 1140 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-845 - inet6/filter/FORWARD -j limit-845 - inet/filter/INPUT -j limit-845 - inet6/filter/INPUT -j limit-845 - inet/filter/OUTPUT -j limit-845 - inet6/filter/OUTPUT -j limit-845 - inet/filter/limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-845 -m limit --limit 1/second -j LOG - inet6/filter/limit-845 -m limit --limit 1/second -j LOG - -Filter 1141 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-846 - inet6/filter/FORWARD -j limit-846 - inet/filter/INPUT -j limit-846 - inet6/filter/INPUT -j limit-846 - inet/filter/OUTPUT -j limit-846 - inet6/filter/OUTPUT -j limit-846 - inet/filter/limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1142 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-847 - inet6/filter/FORWARD -j limit-847 - inet/filter/INPUT -j limit-847 - inet6/filter/INPUT -j limit-847 - inet/filter/OUTPUT -j limit-847 - inet6/filter/OUTPUT -j limit-847 - inet/filter/limit-847 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-847 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1143 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-848 - inet6/filter/FORWARD -j limit-848 - inet/filter/INPUT -j limit-848 - inet6/filter/INPUT -j limit-848 - inet/filter/OUTPUT -j limit-848 - inet6/filter/OUTPUT -j limit-848 - inet/filter/limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1144 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-849 - inet6/filter/FORWARD -j limit-849 - inet/filter/INPUT -j limit-849 - inet6/filter/INPUT -j limit-849 - inet/filter/OUTPUT -j limit-849 - inet6/filter/OUTPUT -j limit-849 - inet/filter/limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1145 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-850 - inet6/filter/FORWARD -j limit-850 - inet/filter/INPUT -j limit-850 - inet6/filter/INPUT -j limit-850 - inet/filter/OUTPUT -j limit-850 - inet6/filter/OUTPUT -j limit-850 - inet/filter/limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-22 - inet6/filter/FORWARD -j logaccept-final-22 - inet/filter/INPUT -j logaccept-final-22 - inet6/filter/INPUT -j logaccept-final-22 - inet/filter/OUTPUT -j logaccept-final-22 - inet6/filter/OUTPUT -j logaccept-final-22 - inet/filter/logaccept-final-22 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-22 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-22 -j ACCEPT - inet6/filter/logaccept-final-22 -j ACCEPT - -Filter 1146 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-851 - inet6/filter/FORWARD -j limit-851 - inet/filter/INPUT -j limit-851 - inet6/filter/INPUT -j limit-851 - inet/filter/OUTPUT -j limit-851 - inet6/filter/OUTPUT -j limit-851 - inet/filter/limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1147 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-852 - inet6/filter/FORWARD -j limit-852 - inet/filter/INPUT -j limit-852 - inet6/filter/INPUT -j limit-852 - inet/filter/OUTPUT -j limit-852 - inet6/filter/OUTPUT -j limit-852 - inet/filter/limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1148 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-853 - inet6/filter/FORWARD -j limit-853 - inet/filter/INPUT -j limit-853 - inet6/filter/INPUT -j limit-853 - inet/filter/OUTPUT -j limit-853 - inet6/filter/OUTPUT -j limit-853 - inet/filter/limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1149 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-854 - inet6/filter/FORWARD -j limit-854 - inet/filter/INPUT -j limit-854 - inet6/filter/INPUT -j limit-854 - inet/filter/OUTPUT -j limit-854 - inet6/filter/OUTPUT -j limit-854 - inet/filter/limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1150 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-855 - inet6/filter/FORWARD -j limit-855 - inet/filter/INPUT -j limit-855 - inet6/filter/INPUT -j limit-855 - inet/filter/OUTPUT -j limit-855 - inet6/filter/OUTPUT -j limit-855 - inet/filter/limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1151 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-856 - inet6/filter/FORWARD -j limit-856 - inet/filter/INPUT -j limit-856 - inet6/filter/INPUT -j limit-856 - inet/filter/OUTPUT -j limit-856 - inet6/filter/OUTPUT -j limit-856 - inet/filter/limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-23 - inet6/filter/FORWARD -j logaccept-final-23 - inet/filter/INPUT -j logaccept-final-23 - inet6/filter/INPUT -j logaccept-final-23 - inet/filter/OUTPUT -j logaccept-final-23 - inet6/filter/OUTPUT -j logaccept-final-23 - inet/filter/logaccept-final-23 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-23 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-23 -j ACCEPT - inet6/filter/logaccept-final-23 -j ACCEPT - -Filter 1152 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-857 - inet6/filter/FORWARD -j limit-857 - inet/filter/INPUT -j limit-857 - inet6/filter/INPUT -j limit-857 - inet/filter/OUTPUT -j limit-857 - inet6/filter/OUTPUT -j limit-857 - inet/filter/limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-857 -m limit --limit 1/second -j LOG - inet6/filter/limit-857 -m limit --limit 1/second -j LOG - -Filter 1153 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-858 - inet6/filter/FORWARD -j limit-858 - inet/filter/INPUT -j limit-858 - inet6/filter/INPUT -j limit-858 - inet/filter/OUTPUT -j limit-858 - inet6/filter/OUTPUT -j limit-858 - inet/filter/limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1154 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-859 - inet6/filter/FORWARD -j limit-859 - inet/filter/INPUT -j limit-859 - inet6/filter/INPUT -j limit-859 - inet/filter/OUTPUT -j limit-859 - inet6/filter/OUTPUT -j limit-859 - inet/filter/limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1155 {"flow-limit":{"log":"none","name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-860 - inet6/filter/FORWARD -j limit-860 - inet/filter/INPUT -j limit-860 - inet6/filter/INPUT -j limit-860 - inet/filter/OUTPUT -j limit-860 - inet6/filter/OUTPUT -j limit-860 - inet/filter/limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-860 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-860 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1156 {"action":"pass","flow-limit":{"log":"none","name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-861 - inet6/filter/FORWARD -j limit-861 - inet/filter/INPUT -j limit-861 - inet6/filter/INPUT -j limit-861 - inet/filter/OUTPUT -j limit-861 - inet6/filter/OUTPUT -j limit-861 - inet/filter/limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-861 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-861 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 1157 {"flow-limit":{"log":"none","name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-862 - inet6/filter/FORWARD -j limit-862 - inet/filter/INPUT -j limit-862 - inet6/filter/INPUT -j limit-862 - inet/filter/OUTPUT -j limit-862 - inet6/filter/OUTPUT -j limit-862 - inet/filter/limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-862 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-862 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-24 - inet6/filter/FORWARD -j logaccept-final-24 - inet/filter/INPUT -j logaccept-final-24 - inet6/filter/INPUT -j logaccept-final-24 - inet/filter/OUTPUT -j logaccept-final-24 - inet6/filter/OUTPUT -j logaccept-final-24 - inet/filter/logaccept-final-24 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-24 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-24 -j ACCEPT - inet6/filter/logaccept-final-24 -j ACCEPT - -Filter 1158 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-863 - inet6/filter/FORWARD -j limit-863 - inet/filter/INPUT -j limit-863 - inet6/filter/INPUT -j limit-863 - inet/filter/OUTPUT -j limit-863 - inet6/filter/OUTPUT -j limit-863 - inet/filter/limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-863 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-863 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 1159 {"flow-limit":{"log":"none","name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-864 - inet6/filter/FORWARD -j limit-864 - inet/filter/INPUT -j limit-864 - inet6/filter/INPUT -j limit-864 - inet/filter/OUTPUT -j limit-864 - inet6/filter/OUTPUT -j limit-864 - inet/filter/limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-864 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-864 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1160 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-865 - inet6/filter/FORWARD -j limit-865 - inet/filter/INPUT -j limit-865 - inet6/filter/INPUT -j limit-865 - inet/filter/OUTPUT -j limit-865 - inet6/filter/OUTPUT -j limit-865 - inet/filter/limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-865 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-865 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 1161 {"flow-limit":{"log":"none","name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-866 - inet6/filter/FORWARD -j limit-866 - inet/filter/INPUT -j limit-866 - inet6/filter/INPUT -j limit-866 - inet/filter/OUTPUT -j limit-866 - inet6/filter/OUTPUT -j limit-866 - inet/filter/limit-866 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-866 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1162 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-867 - inet6/filter/FORWARD -j limit-867 - inet/filter/INPUT -j limit-867 - inet6/filter/INPUT -j limit-867 - inet/filter/OUTPUT -j limit-867 - inet6/filter/OUTPUT -j limit-867 - inet/filter/limit-867 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-867 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1163 {"flow-limit":{"log":"none","name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-868 - inet6/filter/FORWARD -j limit-868 - inet/filter/INPUT -j limit-868 - inet6/filter/INPUT -j limit-868 - inet/filter/OUTPUT -j limit-868 - inet6/filter/OUTPUT -j limit-868 - inet/filter/limit-868 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-868 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-25 - inet6/filter/FORWARD -j logaccept-final-25 - inet/filter/INPUT -j logaccept-final-25 - inet6/filter/INPUT -j logaccept-final-25 - inet/filter/OUTPUT -j logaccept-final-25 - inet6/filter/OUTPUT -j logaccept-final-25 - inet/filter/logaccept-final-25 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-25 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-25 -j ACCEPT - inet6/filter/logaccept-final-25 -j ACCEPT - -Filter 1164 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-869 - inet6/filter/FORWARD -j limit-869 - inet/filter/INPUT -j limit-869 - inet6/filter/INPUT -j limit-869 - inet/filter/OUTPUT -j limit-869 - inet6/filter/OUTPUT -j limit-869 - inet/filter/limit-869 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-869 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-869 -m limit --limit 1/second -j LOG - inet6/filter/limit-869 -m limit --limit 1/second -j LOG - -Filter 1165 {"flow-limit":{"log":"none","name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-870 - inet6/filter/FORWARD -j limit-870 - inet/filter/INPUT -j limit-870 - inet6/filter/INPUT -j limit-870 - inet/filter/OUTPUT -j limit-870 - inet6/filter/OUTPUT -j limit-870 - inet/filter/limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-870 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1166 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-871 - inet6/filter/FORWARD -j limit-871 - inet/filter/INPUT -j limit-871 - inet6/filter/INPUT -j limit-871 - inet/filter/OUTPUT -j limit-871 - inet6/filter/OUTPUT -j limit-871 - inet/filter/limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-871 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1167 {"flow-limit":{"addr":"dest","log":"none","name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-872 - inet6/filter/FORWARD -j limit-872 - inet/filter/INPUT -j limit-872 - inet6/filter/INPUT -j limit-872 - inet/filter/OUTPUT -j limit-872 - inet6/filter/OUTPUT -j limit-872 - inet/filter/limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-872 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1168 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-873 - inet6/filter/FORWARD -j limit-873 - inet/filter/INPUT -j limit-873 - inet6/filter/INPUT -j limit-873 - inet/filter/OUTPUT -j limit-873 - inet6/filter/OUTPUT -j limit-873 - inet/filter/limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-873 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 1169 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-874 - inet6/filter/FORWARD -j limit-874 - inet/filter/INPUT -j limit-874 - inet6/filter/INPUT -j limit-874 - inet/filter/OUTPUT -j limit-874 - inet6/filter/OUTPUT -j limit-874 - inet/filter/limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-874 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-26 - inet6/filter/FORWARD -j logaccept-final-26 - inet/filter/INPUT -j logaccept-final-26 - inet6/filter/INPUT -j logaccept-final-26 - inet/filter/OUTPUT -j logaccept-final-26 - inet6/filter/OUTPUT -j logaccept-final-26 - inet/filter/logaccept-final-26 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-26 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-26 -j ACCEPT - inet6/filter/logaccept-final-26 -j ACCEPT - -Filter 1170 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-875 - inet6/filter/FORWARD -j limit-875 - inet/filter/INPUT -j limit-875 - inet6/filter/INPUT -j limit-875 - inet/filter/OUTPUT -j limit-875 - inet6/filter/OUTPUT -j limit-875 - inet/filter/limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-875 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 1171 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-876 - inet6/filter/FORWARD -j limit-876 - inet/filter/INPUT -j limit-876 - inet6/filter/INPUT -j limit-876 - inet/filter/OUTPUT -j limit-876 - inet6/filter/OUTPUT -j limit-876 - inet/filter/limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-876 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-876 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1172 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-877 - inet6/filter/FORWARD -j limit-877 - inet/filter/INPUT -j limit-877 - inet6/filter/INPUT -j limit-877 - inet/filter/OUTPUT -j limit-877 - inet6/filter/OUTPUT -j limit-877 - inet/filter/limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-877 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-877 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 1173 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-878 - inet6/filter/FORWARD -j limit-878 - inet/filter/INPUT -j limit-878 - inet6/filter/INPUT -j limit-878 - inet/filter/OUTPUT -j limit-878 - inet6/filter/OUTPUT -j limit-878 - inet/filter/limit-878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1174 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-879 - inet6/filter/FORWARD -j limit-879 - inet/filter/INPUT -j limit-879 - inet6/filter/INPUT -j limit-879 - inet/filter/OUTPUT -j limit-879 - inet6/filter/OUTPUT -j limit-879 - inet/filter/limit-879 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-879 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1175 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-880 - inet6/filter/FORWARD -j limit-880 - inet/filter/INPUT -j limit-880 - inet6/filter/INPUT -j limit-880 - inet/filter/OUTPUT -j limit-880 - inet6/filter/OUTPUT -j limit-880 - inet/filter/limit-880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-27 - inet6/filter/FORWARD -j logaccept-final-27 - inet/filter/INPUT -j logaccept-final-27 - inet6/filter/INPUT -j logaccept-final-27 - inet/filter/OUTPUT -j logaccept-final-27 - inet6/filter/OUTPUT -j logaccept-final-27 - inet/filter/logaccept-final-27 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-27 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-27 -j ACCEPT - inet6/filter/logaccept-final-27 -j ACCEPT - -Filter 1176 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-881 - inet6/filter/FORWARD -j limit-881 - inet/filter/INPUT -j limit-881 - inet6/filter/INPUT -j limit-881 - inet/filter/OUTPUT -j limit-881 - inet6/filter/OUTPUT -j limit-881 - inet/filter/limit-881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-881 -m limit --limit 1/second -j LOG - inet6/filter/limit-881 -m limit --limit 1/second -j LOG - -Filter 1177 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-882 - inet6/filter/FORWARD -j limit-882 - inet/filter/INPUT -j limit-882 - inet6/filter/INPUT -j limit-882 - inet/filter/OUTPUT -j limit-882 - inet6/filter/OUTPUT -j limit-882 - inet/filter/limit-882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1178 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-883 - inet6/filter/FORWARD -j limit-883 - inet/filter/INPUT -j limit-883 - inet6/filter/INPUT -j limit-883 - inet/filter/OUTPUT -j limit-883 - inet6/filter/OUTPUT -j limit-883 - inet/filter/limit-883 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-883 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1179 {"flow-limit":{"interval":5}} -(filter-limit) - inet/filter/FORWARD -j limit-884 - inet6/filter/FORWARD -j limit-884 - inet/filter/INPUT -j limit-884 - inet6/filter/INPUT -j limit-884 - inet/filter/OUTPUT -j limit-884 - inet6/filter/OUTPUT -j limit-884 - inet/filter/limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 - inet6/filter/limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 - inet/filter/logdrop-289 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-289 -m limit --limit 1/second -j LOG - inet/filter/logdrop-289 -j DROP - inet6/filter/logdrop-289 -j DROP - inet/filter/limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1180 {"action":"pass","flow-limit":{"interval":5}} -(filter-limit) - inet/filter/FORWARD -j limit-885 - inet6/filter/FORWARD -j limit-885 - inet/filter/INPUT -j limit-885 - inet6/filter/INPUT -j limit-885 - inet/filter/OUTPUT -j limit-885 - inet6/filter/OUTPUT -j limit-885 - inet/filter/limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 - inet6/filter/limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 - inet/filter/logdrop-290 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-290 -m limit --limit 1/second -j LOG - inet/filter/logdrop-290 -j DROP - inet6/filter/logdrop-290 -j DROP - inet/filter/limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1181 {"flow-limit":{"interval":5},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-886 - inet6/filter/FORWARD -j limit-886 - inet/filter/INPUT -j limit-886 - inet6/filter/INPUT -j limit-886 - inet/filter/OUTPUT -j limit-886 - inet6/filter/OUTPUT -j limit-886 - inet/filter/limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 - inet6/filter/limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 - inet/filter/logdrop-291 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-291 -m limit --limit 1/second -j LOG - inet/filter/logdrop-291 -j DROP - inet6/filter/logdrop-291 -j DROP - inet/filter/limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-28 - inet6/filter/FORWARD -j logaccept-final-28 - inet/filter/INPUT -j logaccept-final-28 - inet6/filter/INPUT -j logaccept-final-28 - inet/filter/OUTPUT -j logaccept-final-28 - inet6/filter/OUTPUT -j logaccept-final-28 - inet/filter/logaccept-final-28 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-28 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-28 -j ACCEPT - inet6/filter/logaccept-final-28 -j ACCEPT - -Filter 1182 {"action":"pass","flow-limit":{"interval":5},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-887 - inet6/filter/FORWARD -j limit-887 - inet/filter/INPUT -j limit-887 - inet6/filter/INPUT -j limit-887 - inet/filter/OUTPUT -j limit-887 - inet6/filter/OUTPUT -j limit-887 - inet/filter/limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 - inet6/filter/limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 - inet/filter/logdrop-292 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-292 -m limit --limit 1/second -j LOG - inet/filter/logdrop-292 -j DROP - inet6/filter/logdrop-292 -j DROP - inet/filter/limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1183 {"flow-limit":{"interval":5},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-888 - inet6/filter/FORWARD -j limit-888 - inet/filter/INPUT -j limit-888 - inet6/filter/INPUT -j limit-888 - inet/filter/OUTPUT -j limit-888 - inet6/filter/OUTPUT -j limit-888 - inet/filter/limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 - inet6/filter/limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 - inet/filter/logdrop-293 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-293 -m limit --limit 1/second -j LOG - inet/filter/logdrop-293 -j DROP - inet6/filter/logdrop-293 -j DROP - inet/filter/limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1184 {"action":"pass","flow-limit":{"interval":5},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-889 - inet6/filter/FORWARD -j limit-889 - inet/filter/INPUT -j limit-889 - inet6/filter/INPUT -j limit-889 - inet/filter/OUTPUT -j limit-889 - inet6/filter/OUTPUT -j limit-889 - inet/filter/limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 - inet6/filter/limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 - inet/filter/logdrop-294 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-294 -m limit --limit 1/second -j LOG - inet/filter/logdrop-294 -j DROP - inet6/filter/logdrop-294 -j DROP - inet/filter/limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1185 {"flow-limit":{"interval":5,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-890 - inet6/filter/FORWARD -j limit-890 - inet/filter/INPUT -j limit-890 - inet6/filter/INPUT -j limit-890 - inet/filter/OUTPUT -j limit-890 - inet6/filter/OUTPUT -j limit-890 - inet/filter/limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 - inet6/filter/limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 - inet/filter/logdrop-295 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-295 -m limit --limit 1/second -j LOG - inet/filter/logdrop-295 -j DROP - inet6/filter/logdrop-295 -j DROP - inet/filter/limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1186 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-891 - inet6/filter/FORWARD -j limit-891 - inet/filter/INPUT -j limit-891 - inet6/filter/INPUT -j limit-891 - inet/filter/OUTPUT -j limit-891 - inet6/filter/OUTPUT -j limit-891 - inet/filter/limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 - inet6/filter/limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 - inet/filter/logdrop-296 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-296 -m limit --limit 1/second -j LOG - inet/filter/logdrop-296 -j DROP - inet6/filter/logdrop-296 -j DROP - inet/filter/limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1187 {"flow-limit":{"interval":5,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-892 - inet6/filter/FORWARD -j limit-892 - inet/filter/INPUT -j limit-892 - inet6/filter/INPUT -j limit-892 - inet/filter/OUTPUT -j limit-892 - inet6/filter/OUTPUT -j limit-892 - inet/filter/limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 - inet6/filter/limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 - inet/filter/logdrop-297 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-297 -m limit --limit 1/second -j LOG - inet/filter/logdrop-297 -j DROP - inet6/filter/logdrop-297 -j DROP - inet/filter/limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-29 - inet6/filter/FORWARD -j logaccept-final-29 - inet/filter/INPUT -j logaccept-final-29 - inet6/filter/INPUT -j logaccept-final-29 - inet/filter/OUTPUT -j logaccept-final-29 - inet6/filter/OUTPUT -j logaccept-final-29 - inet/filter/logaccept-final-29 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-29 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-29 -j ACCEPT - inet6/filter/logaccept-final-29 -j ACCEPT - -Filter 1188 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-893 - inet6/filter/FORWARD -j limit-893 - inet/filter/INPUT -j limit-893 - inet6/filter/INPUT -j limit-893 - inet/filter/OUTPUT -j limit-893 - inet6/filter/OUTPUT -j limit-893 - inet/filter/limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 - inet6/filter/limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 - inet/filter/logdrop-298 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-298 -m limit --limit 1/second -j LOG - inet/filter/logdrop-298 -j DROP - inet6/filter/logdrop-298 -j DROP - inet/filter/limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1189 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-894 - inet6/filter/FORWARD -j limit-894 - inet/filter/INPUT -j limit-894 - inet6/filter/INPUT -j limit-894 - inet/filter/OUTPUT -j limit-894 - inet6/filter/OUTPUT -j limit-894 - inet/filter/limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 - inet6/filter/limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 - inet/filter/logdrop-299 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-299 -m limit --limit 1/second -j LOG - inet/filter/logdrop-299 -j DROP - inet6/filter/logdrop-299 -j DROP - inet/filter/limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1190 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-895 - inet6/filter/FORWARD -j limit-895 - inet/filter/INPUT -j limit-895 - inet6/filter/INPUT -j limit-895 - inet/filter/OUTPUT -j limit-895 - inet6/filter/OUTPUT -j limit-895 - inet/filter/limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-300 - inet6/filter/limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-300 - inet/filter/logdrop-300 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-300 -m limit --limit 1/second -j LOG - inet/filter/logdrop-300 -j DROP - inet6/filter/logdrop-300 -j DROP - inet/filter/limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1191 {"flow-limit":{"interval":5,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-896 - inet6/filter/FORWARD -j limit-896 - inet/filter/INPUT -j limit-896 - inet6/filter/INPUT -j limit-896 - inet/filter/OUTPUT -j limit-896 - inet6/filter/OUTPUT -j limit-896 - inet/filter/limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 - inet6/filter/limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 - inet/filter/logdrop-301 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-301 -m limit --limit 1/second -j LOG - inet/filter/logdrop-301 -j DROP - inet6/filter/logdrop-301 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1192 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-897 - inet6/filter/FORWARD -j limit-897 - inet/filter/INPUT -j limit-897 - inet6/filter/INPUT -j limit-897 - inet/filter/OUTPUT -j limit-897 - inet6/filter/OUTPUT -j limit-897 - inet/filter/limit-897 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 - inet6/filter/limit-897 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 - inet/filter/logdrop-302 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-302 -m limit --limit 1/second -j LOG - inet/filter/logdrop-302 -j DROP - inet6/filter/logdrop-302 -j DROP - -Filter 1193 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-898 - inet6/filter/FORWARD -j limit-898 - inet/filter/INPUT -j limit-898 - inet6/filter/INPUT -j limit-898 - inet/filter/OUTPUT -j limit-898 - inet6/filter/OUTPUT -j limit-898 - inet/filter/limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 - inet6/filter/limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 - inet/filter/logdrop-303 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-303 -m limit --limit 1/second -j LOG - inet/filter/logdrop-303 -j DROP - inet6/filter/logdrop-303 -j DROP - inet/filter/FORWARD -j logaccept-final-30 - inet6/filter/FORWARD -j logaccept-final-30 - inet/filter/INPUT -j logaccept-final-30 - inet6/filter/INPUT -j logaccept-final-30 - inet/filter/OUTPUT -j logaccept-final-30 - inet6/filter/OUTPUT -j logaccept-final-30 - inet/filter/logaccept-final-30 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-30 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-30 -j ACCEPT - inet6/filter/logaccept-final-30 -j ACCEPT - -Filter 1194 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-899 - inet6/filter/FORWARD -j limit-899 - inet/filter/INPUT -j limit-899 - inet6/filter/INPUT -j limit-899 - inet/filter/OUTPUT -j limit-899 - inet6/filter/OUTPUT -j limit-899 - inet/filter/limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 - inet6/filter/limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 - inet/filter/logdrop-304 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-304 -m limit --limit 1/second -j LOG - inet/filter/logdrop-304 -j DROP - inet6/filter/logdrop-304 -j DROP - inet/filter/limit-899 -m limit --limit 1/second -j LOG - inet6/filter/limit-899 -m limit --limit 1/second -j LOG - -Filter 1195 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-900 - inet6/filter/FORWARD -j limit-900 - inet/filter/INPUT -j limit-900 - inet6/filter/INPUT -j limit-900 - inet/filter/OUTPUT -j limit-900 - inet6/filter/OUTPUT -j limit-900 - inet/filter/limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 - inet6/filter/limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 - inet/filter/logdrop-305 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-305 -m limit --limit 1/second -j LOG - inet/filter/logdrop-305 -j DROP - inet6/filter/logdrop-305 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1196 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-901 - inet6/filter/FORWARD -j limit-901 - inet/filter/INPUT -j limit-901 - inet6/filter/INPUT -j limit-901 - inet/filter/OUTPUT -j limit-901 - inet6/filter/OUTPUT -j limit-901 - inet/filter/limit-901 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 - inet6/filter/limit-901 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 - inet/filter/logdrop-306 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-306 -m limit --limit 1/second -j LOG - inet/filter/logdrop-306 -j DROP - inet6/filter/logdrop-306 -j DROP - -Filter 1197 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-902 - inet6/filter/FORWARD -j limit-902 - inet/filter/INPUT -j limit-902 - inet6/filter/INPUT -j limit-902 - inet/filter/OUTPUT -j limit-902 - inet6/filter/OUTPUT -j limit-902 - inet/filter/limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 - inet6/filter/limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 - inet/filter/logdrop-307 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-307 -m limit --limit 1/second -j LOG - inet/filter/logdrop-307 -j DROP - inet6/filter/logdrop-307 -j DROP - inet/filter/limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1198 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-903 - inet6/filter/FORWARD -j limit-903 - inet/filter/INPUT -j limit-903 - inet6/filter/INPUT -j limit-903 - inet/filter/OUTPUT -j limit-903 - inet6/filter/OUTPUT -j limit-903 - inet/filter/limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 - inet6/filter/limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 - inet/filter/logdrop-308 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-308 -m limit --limit 1/second -j LOG - inet/filter/logdrop-308 -j DROP - inet6/filter/logdrop-308 -j DROP - inet/filter/limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1199 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-904 - inet6/filter/FORWARD -j limit-904 - inet/filter/INPUT -j limit-904 - inet6/filter/INPUT -j limit-904 - inet/filter/OUTPUT -j limit-904 - inet6/filter/OUTPUT -j limit-904 - inet/filter/limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 - inet6/filter/limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 - inet/filter/logdrop-309 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-309 -m limit --limit 1/second -j LOG - inet/filter/logdrop-309 -j DROP - inet6/filter/logdrop-309 -j DROP - inet/filter/limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-31 - inet6/filter/FORWARD -j logaccept-final-31 - inet/filter/INPUT -j logaccept-final-31 - inet6/filter/INPUT -j logaccept-final-31 - inet/filter/OUTPUT -j logaccept-final-31 - inet6/filter/OUTPUT -j logaccept-final-31 - inet/filter/logaccept-final-31 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-31 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-31 -j ACCEPT - inet6/filter/logaccept-final-31 -j ACCEPT - -Filter 1200 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-905 - inet6/filter/FORWARD -j limit-905 - inet/filter/INPUT -j limit-905 - inet6/filter/INPUT -j limit-905 - inet/filter/OUTPUT -j limit-905 - inet6/filter/OUTPUT -j limit-905 - inet/filter/limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 - inet6/filter/limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 - inet/filter/logdrop-310 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-310 -m limit --limit 1/second -j LOG - inet/filter/logdrop-310 -j DROP - inet6/filter/logdrop-310 -j DROP - inet/filter/limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1201 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-906 - inet6/filter/FORWARD -j limit-906 - inet/filter/INPUT -j limit-906 - inet6/filter/INPUT -j limit-906 - inet/filter/OUTPUT -j limit-906 - inet6/filter/OUTPUT -j limit-906 - inet/filter/limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 - inet6/filter/limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 - inet/filter/logdrop-311 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-311 -m limit --limit 1/second -j LOG - inet/filter/logdrop-311 -j DROP - inet6/filter/logdrop-311 -j DROP - inet/filter/limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1202 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-907 - inet6/filter/FORWARD -j limit-907 - inet/filter/INPUT -j limit-907 - inet6/filter/INPUT -j limit-907 - inet/filter/OUTPUT -j limit-907 - inet6/filter/OUTPUT -j limit-907 - inet/filter/limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 - inet6/filter/limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 - inet/filter/logdrop-312 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-312 -m limit --limit 1/second -j LOG - inet/filter/logdrop-312 -j DROP - inet6/filter/logdrop-312 -j DROP - inet/filter/limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1203 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-908 - inet6/filter/FORWARD -j limit-908 - inet/filter/INPUT -j limit-908 - inet6/filter/INPUT -j limit-908 - inet/filter/OUTPUT -j limit-908 - inet6/filter/OUTPUT -j limit-908 - inet/filter/limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 - inet6/filter/limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 - inet/filter/logdrop-313 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-313 -m limit --limit 1/second -j LOG - inet/filter/logdrop-313 -j DROP - inet6/filter/logdrop-313 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1204 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-909 - inet6/filter/FORWARD -j limit-909 - inet/filter/INPUT -j limit-909 - inet6/filter/INPUT -j limit-909 - inet/filter/OUTPUT -j limit-909 - inet6/filter/OUTPUT -j limit-909 - inet/filter/limit-909 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 - inet6/filter/limit-909 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 - inet/filter/logdrop-314 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-314 -m limit --limit 1/second -j LOG - inet/filter/logdrop-314 -j DROP - inet6/filter/logdrop-314 -j DROP - -Filter 1205 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-910 - inet6/filter/FORWARD -j limit-910 - inet/filter/INPUT -j limit-910 - inet6/filter/INPUT -j limit-910 - inet/filter/OUTPUT -j limit-910 - inet6/filter/OUTPUT -j limit-910 - inet/filter/limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 - inet6/filter/limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 - inet/filter/logdrop-315 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-315 -m limit --limit 1/second -j LOG - inet/filter/logdrop-315 -j DROP - inet6/filter/logdrop-315 -j DROP - inet/filter/FORWARD -j logaccept-final-32 - inet6/filter/FORWARD -j logaccept-final-32 - inet/filter/INPUT -j logaccept-final-32 - inet6/filter/INPUT -j logaccept-final-32 - inet/filter/OUTPUT -j logaccept-final-32 - inet6/filter/OUTPUT -j logaccept-final-32 - inet/filter/logaccept-final-32 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-32 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-32 -j ACCEPT - inet6/filter/logaccept-final-32 -j ACCEPT - -Filter 1206 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-911 - inet6/filter/FORWARD -j limit-911 - inet/filter/INPUT -j limit-911 - inet6/filter/INPUT -j limit-911 - inet/filter/OUTPUT -j limit-911 - inet6/filter/OUTPUT -j limit-911 - inet/filter/limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 - inet6/filter/limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 - inet/filter/logdrop-316 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-316 -m limit --limit 1/second -j LOG - inet/filter/logdrop-316 -j DROP - inet6/filter/logdrop-316 -j DROP - inet/filter/limit-911 -m limit --limit 1/second -j LOG - inet6/filter/limit-911 -m limit --limit 1/second -j LOG - -Filter 1207 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-912 - inet6/filter/FORWARD -j limit-912 - inet/filter/INPUT -j limit-912 - inet6/filter/INPUT -j limit-912 - inet/filter/OUTPUT -j limit-912 - inet6/filter/OUTPUT -j limit-912 - inet/filter/limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 - inet6/filter/limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 - inet/filter/logdrop-317 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-317 -m limit --limit 1/second -j LOG - inet/filter/logdrop-317 -j DROP - inet6/filter/logdrop-317 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1208 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-913 - inet6/filter/FORWARD -j limit-913 - inet/filter/INPUT -j limit-913 - inet6/filter/INPUT -j limit-913 - inet/filter/OUTPUT -j limit-913 - inet6/filter/OUTPUT -j limit-913 - inet/filter/limit-913 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-318 - inet6/filter/limit-913 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-318 - inet/filter/logdrop-318 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-318 -m limit --limit 1/second -j LOG - inet/filter/logdrop-318 -j DROP - inet6/filter/logdrop-318 -j DROP - -Filter 1209 {"flow-limit":{"interval":5,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-914 - inet6/filter/FORWARD -j limit-914 - inet/filter/INPUT -j limit-914 - inet6/filter/INPUT -j limit-914 - inet/filter/OUTPUT -j limit-914 - inet6/filter/OUTPUT -j limit-914 - inet/filter/limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 - inet6/filter/limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 - inet/filter/logdrop-319 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-319 -m limit --limit 1/second -j LOG - inet/filter/logdrop-319 -j DROP - inet6/filter/logdrop-319 -j DROP - inet/filter/limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-914 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1210 {"action":"pass","flow-limit":{"interval":5,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-915 - inet6/filter/FORWARD -j limit-915 - inet/filter/INPUT -j limit-915 - inet6/filter/INPUT -j limit-915 - inet/filter/OUTPUT -j limit-915 - inet6/filter/OUTPUT -j limit-915 - inet/filter/limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 - inet6/filter/limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 - inet/filter/logdrop-320 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-320 -m limit --limit 1/second -j LOG - inet/filter/logdrop-320 -j DROP - inet6/filter/logdrop-320 -j DROP - inet/filter/limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-915 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 1211 {"flow-limit":{"interval":5,"name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-916 - inet6/filter/FORWARD -j limit-916 - inet/filter/INPUT -j limit-916 - inet6/filter/INPUT -j limit-916 - inet/filter/OUTPUT -j limit-916 - inet6/filter/OUTPUT -j limit-916 - inet/filter/limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 - inet6/filter/limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 - inet/filter/logdrop-321 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-321 -m limit --limit 1/second -j LOG - inet/filter/logdrop-321 -j DROP - inet6/filter/logdrop-321 -j DROP - inet/filter/limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-916 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-33 - inet6/filter/FORWARD -j logaccept-final-33 - inet/filter/INPUT -j logaccept-final-33 - inet6/filter/INPUT -j logaccept-final-33 - inet/filter/OUTPUT -j logaccept-final-33 - inet6/filter/OUTPUT -j logaccept-final-33 - inet/filter/logaccept-final-33 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-33 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-33 -j ACCEPT - inet6/filter/logaccept-final-33 -j ACCEPT - -Filter 1212 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-917 - inet6/filter/FORWARD -j limit-917 - inet/filter/INPUT -j limit-917 - inet6/filter/INPUT -j limit-917 - inet/filter/OUTPUT -j limit-917 - inet6/filter/OUTPUT -j limit-917 - inet/filter/limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 - inet6/filter/limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 - inet/filter/logdrop-322 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-322 -m limit --limit 1/second -j LOG - inet/filter/logdrop-322 -j DROP - inet6/filter/logdrop-322 -j DROP - inet/filter/limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-917 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 1213 {"flow-limit":{"interval":5,"name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-918 - inet6/filter/FORWARD -j limit-918 - inet/filter/INPUT -j limit-918 - inet6/filter/INPUT -j limit-918 - inet/filter/OUTPUT -j limit-918 - inet6/filter/OUTPUT -j limit-918 - inet/filter/limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 - inet6/filter/limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 - inet/filter/logdrop-323 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-323 -m limit --limit 1/second -j LOG - inet/filter/logdrop-323 -j DROP - inet6/filter/logdrop-323 -j DROP - inet/filter/limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-918 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1214 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-919 - inet6/filter/FORWARD -j limit-919 - inet/filter/INPUT -j limit-919 - inet6/filter/INPUT -j limit-919 - inet/filter/OUTPUT -j limit-919 - inet6/filter/OUTPUT -j limit-919 - inet/filter/limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-324 - inet6/filter/limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-324 - inet/filter/logdrop-324 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-324 -m limit --limit 1/second -j LOG - inet/filter/logdrop-324 -j DROP - inet6/filter/logdrop-324 -j DROP - inet/filter/limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-919 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 1215 {"flow-limit":{"interval":5,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-920 - inet6/filter/FORWARD -j limit-920 - inet/filter/INPUT -j limit-920 - inet6/filter/INPUT -j limit-920 - inet/filter/OUTPUT -j limit-920 - inet6/filter/OUTPUT -j limit-920 - inet/filter/limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 - inet6/filter/limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 - inet/filter/logdrop-325 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-325 -m limit --limit 1/second -j LOG - inet/filter/logdrop-325 -j DROP - inet6/filter/logdrop-325 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1216 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-921 - inet6/filter/FORWARD -j limit-921 - inet/filter/INPUT -j limit-921 - inet6/filter/INPUT -j limit-921 - inet/filter/OUTPUT -j limit-921 - inet6/filter/OUTPUT -j limit-921 - inet/filter/limit-921 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 - inet6/filter/limit-921 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 - inet/filter/logdrop-326 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-326 -m limit --limit 1/second -j LOG - inet/filter/logdrop-326 -j DROP - inet6/filter/logdrop-326 -j DROP - -Filter 1217 {"flow-limit":{"interval":5,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-922 - inet6/filter/FORWARD -j limit-922 - inet/filter/INPUT -j limit-922 - inet6/filter/INPUT -j limit-922 - inet/filter/OUTPUT -j limit-922 - inet6/filter/OUTPUT -j limit-922 - inet/filter/limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 - inet6/filter/limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 - inet/filter/logdrop-327 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-327 -m limit --limit 1/second -j LOG - inet/filter/logdrop-327 -j DROP - inet6/filter/logdrop-327 -j DROP - inet/filter/FORWARD -j logaccept-final-34 - inet6/filter/FORWARD -j logaccept-final-34 - inet/filter/INPUT -j logaccept-final-34 - inet6/filter/INPUT -j logaccept-final-34 - inet/filter/OUTPUT -j logaccept-final-34 - inet6/filter/OUTPUT -j logaccept-final-34 - inet/filter/logaccept-final-34 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-34 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-34 -j ACCEPT - inet6/filter/logaccept-final-34 -j ACCEPT - -Filter 1218 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-923 - inet6/filter/FORWARD -j limit-923 - inet/filter/INPUT -j limit-923 - inet6/filter/INPUT -j limit-923 - inet/filter/OUTPUT -j limit-923 - inet6/filter/OUTPUT -j limit-923 - inet/filter/limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 - inet6/filter/limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 - inet/filter/logdrop-328 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-328 -m limit --limit 1/second -j LOG - inet/filter/logdrop-328 -j DROP - inet6/filter/logdrop-328 -j DROP - inet/filter/limit-923 -m limit --limit 1/second -j LOG - inet6/filter/limit-923 -m limit --limit 1/second -j LOG - -Filter 1219 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-924 - inet6/filter/FORWARD -j limit-924 - inet/filter/INPUT -j limit-924 - inet6/filter/INPUT -j limit-924 - inet/filter/OUTPUT -j limit-924 - inet6/filter/OUTPUT -j limit-924 - inet/filter/limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 - inet6/filter/limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 - inet/filter/logdrop-329 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-329 -m limit --limit 1/second -j LOG - inet/filter/logdrop-329 -j DROP - inet6/filter/logdrop-329 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1220 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-925 - inet6/filter/FORWARD -j limit-925 - inet/filter/INPUT -j limit-925 - inet6/filter/INPUT -j limit-925 - inet/filter/OUTPUT -j limit-925 - inet6/filter/OUTPUT -j limit-925 - inet/filter/limit-925 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-330 - inet6/filter/limit-925 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-330 - inet/filter/logdrop-330 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-330 -m limit --limit 1/second -j LOG - inet/filter/logdrop-330 -j DROP - inet6/filter/logdrop-330 -j DROP - -Filter 1221 {"flow-limit":{"addr":"dest","interval":5,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-926 - inet6/filter/FORWARD -j limit-926 - inet/filter/INPUT -j limit-926 - inet6/filter/INPUT -j limit-926 - inet/filter/OUTPUT -j limit-926 - inet6/filter/OUTPUT -j limit-926 - inet/filter/limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 - inet6/filter/limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 - inet/filter/logdrop-331 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-331 -m limit --limit 1/second -j LOG - inet/filter/logdrop-331 -j DROP - inet6/filter/logdrop-331 -j DROP - inet/filter/limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-926 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1222 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-927 - inet6/filter/FORWARD -j limit-927 - inet/filter/INPUT -j limit-927 - inet6/filter/INPUT -j limit-927 - inet/filter/OUTPUT -j limit-927 - inet6/filter/OUTPUT -j limit-927 - inet/filter/limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 - inet6/filter/limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 - inet/filter/logdrop-332 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-332 -m limit --limit 1/second -j LOG - inet/filter/logdrop-332 -j DROP - inet6/filter/logdrop-332 -j DROP - inet/filter/limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-927 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 1223 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-928 - inet6/filter/FORWARD -j limit-928 - inet/filter/INPUT -j limit-928 - inet6/filter/INPUT -j limit-928 - inet/filter/OUTPUT -j limit-928 - inet6/filter/OUTPUT -j limit-928 - inet/filter/limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 - inet6/filter/limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 - inet/filter/logdrop-333 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-333 -m limit --limit 1/second -j LOG - inet/filter/logdrop-333 -j DROP - inet6/filter/logdrop-333 -j DROP - inet/filter/limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-928 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-35 - inet6/filter/FORWARD -j logaccept-final-35 - inet/filter/INPUT -j logaccept-final-35 - inet6/filter/INPUT -j logaccept-final-35 - inet/filter/OUTPUT -j logaccept-final-35 - inet6/filter/OUTPUT -j logaccept-final-35 - inet/filter/logaccept-final-35 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-35 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-35 -j ACCEPT - inet6/filter/logaccept-final-35 -j ACCEPT - -Filter 1224 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-929 - inet6/filter/FORWARD -j limit-929 - inet/filter/INPUT -j limit-929 - inet6/filter/INPUT -j limit-929 - inet/filter/OUTPUT -j limit-929 - inet6/filter/OUTPUT -j limit-929 - inet/filter/limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 - inet6/filter/limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 - inet/filter/logdrop-334 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-334 -m limit --limit 1/second -j LOG - inet/filter/logdrop-334 -j DROP - inet6/filter/logdrop-334 -j DROP - inet/filter/limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-929 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 1225 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-930 - inet6/filter/FORWARD -j limit-930 - inet/filter/INPUT -j limit-930 - inet6/filter/INPUT -j limit-930 - inet/filter/OUTPUT -j limit-930 - inet6/filter/OUTPUT -j limit-930 - inet/filter/limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 - inet6/filter/limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 - inet/filter/logdrop-335 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-335 -m limit --limit 1/second -j LOG - inet/filter/logdrop-335 -j DROP - inet6/filter/logdrop-335 -j DROP - inet/filter/limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-930 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1226 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-931 - inet6/filter/FORWARD -j limit-931 - inet/filter/INPUT -j limit-931 - inet6/filter/INPUT -j limit-931 - inet/filter/OUTPUT -j limit-931 - inet6/filter/OUTPUT -j limit-931 - inet/filter/limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 - inet6/filter/limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 - inet/filter/logdrop-336 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-336 -m limit --limit 1/second -j LOG - inet/filter/logdrop-336 -j DROP - inet6/filter/logdrop-336 -j DROP - inet/filter/limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-931 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 1227 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-932 - inet6/filter/FORWARD -j limit-932 - inet/filter/INPUT -j limit-932 - inet6/filter/INPUT -j limit-932 - inet/filter/OUTPUT -j limit-932 - inet6/filter/OUTPUT -j limit-932 - inet/filter/limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 - inet6/filter/limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 - inet/filter/logdrop-337 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-337 -m limit --limit 1/second -j LOG - inet/filter/logdrop-337 -j DROP - inet6/filter/logdrop-337 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1228 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-933 - inet6/filter/FORWARD -j limit-933 - inet/filter/INPUT -j limit-933 - inet6/filter/INPUT -j limit-933 - inet/filter/OUTPUT -j limit-933 - inet6/filter/OUTPUT -j limit-933 - inet/filter/limit-933 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 - inet6/filter/limit-933 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 - inet/filter/logdrop-338 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-338 -m limit --limit 1/second -j LOG - inet/filter/logdrop-338 -j DROP - inet6/filter/logdrop-338 -j DROP - -Filter 1229 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-934 - inet6/filter/FORWARD -j limit-934 - inet/filter/INPUT -j limit-934 - inet6/filter/INPUT -j limit-934 - inet/filter/OUTPUT -j limit-934 - inet6/filter/OUTPUT -j limit-934 - inet/filter/limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 - inet6/filter/limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 - inet/filter/logdrop-339 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-339 -m limit --limit 1/second -j LOG - inet/filter/logdrop-339 -j DROP - inet6/filter/logdrop-339 -j DROP - inet/filter/FORWARD -j logaccept-final-36 - inet6/filter/FORWARD -j logaccept-final-36 - inet/filter/INPUT -j logaccept-final-36 - inet6/filter/INPUT -j logaccept-final-36 - inet/filter/OUTPUT -j logaccept-final-36 - inet6/filter/OUTPUT -j logaccept-final-36 - inet/filter/logaccept-final-36 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-36 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-36 -j ACCEPT - inet6/filter/logaccept-final-36 -j ACCEPT - -Filter 1230 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-935 - inet6/filter/FORWARD -j limit-935 - inet/filter/INPUT -j limit-935 - inet6/filter/INPUT -j limit-935 - inet/filter/OUTPUT -j limit-935 - inet6/filter/OUTPUT -j limit-935 - inet/filter/limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 - inet6/filter/limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 - inet/filter/logdrop-340 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-340 -m limit --limit 1/second -j LOG - inet/filter/logdrop-340 -j DROP - inet6/filter/logdrop-340 -j DROP - inet/filter/limit-935 -m limit --limit 1/second -j LOG - inet6/filter/limit-935 -m limit --limit 1/second -j LOG - -Filter 1231 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-936 - inet6/filter/FORWARD -j limit-936 - inet/filter/INPUT -j limit-936 - inet6/filter/INPUT -j limit-936 - inet/filter/OUTPUT -j limit-936 - inet6/filter/OUTPUT -j limit-936 - inet/filter/limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 - inet6/filter/limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 - inet/filter/logdrop-341 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-341 -m limit --limit 1/second -j LOG - inet/filter/logdrop-341 -j DROP - inet6/filter/logdrop-341 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1232 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-937 - inet6/filter/FORWARD -j limit-937 - inet/filter/INPUT -j limit-937 - inet6/filter/INPUT -j limit-937 - inet/filter/OUTPUT -j limit-937 - inet6/filter/OUTPUT -j limit-937 - inet/filter/limit-937 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 - inet6/filter/limit-937 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 - inet/filter/logdrop-342 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-342 -m limit --limit 1/second -j LOG - inet/filter/logdrop-342 -j DROP - inet6/filter/logdrop-342 -j DROP - -Filter 1233 {"flow-limit":{"interval":5,"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-938 - inet6/filter/FORWARD -j limit-938 - inet/filter/INPUT -j limit-938 - inet6/filter/INPUT -j limit-938 - inet/filter/OUTPUT -j limit-938 - inet6/filter/OUTPUT -j limit-938 - inet/filter/limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1234 {"action":"pass","flow-limit":{"interval":5,"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-939 - inet6/filter/FORWARD -j limit-939 - inet/filter/INPUT -j limit-939 - inet6/filter/INPUT -j limit-939 - inet/filter/OUTPUT -j limit-939 - inet6/filter/OUTPUT -j limit-939 - inet/filter/limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1235 {"flow-limit":{"interval":5,"log":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-940 - inet6/filter/FORWARD -j limit-940 - inet/filter/INPUT -j limit-940 - inet6/filter/INPUT -j limit-940 - inet/filter/OUTPUT -j limit-940 - inet6/filter/OUTPUT -j limit-940 - inet/filter/limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-37 - inet6/filter/FORWARD -j logaccept-final-37 - inet/filter/INPUT -j logaccept-final-37 - inet6/filter/INPUT -j logaccept-final-37 - inet/filter/OUTPUT -j logaccept-final-37 - inet6/filter/OUTPUT -j logaccept-final-37 - inet/filter/logaccept-final-37 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-37 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-37 -j ACCEPT - inet6/filter/logaccept-final-37 -j ACCEPT - -Filter 1236 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-941 - inet6/filter/FORWARD -j limit-941 - inet/filter/INPUT -j limit-941 - inet6/filter/INPUT -j limit-941 - inet/filter/OUTPUT -j limit-941 - inet6/filter/OUTPUT -j limit-941 - inet/filter/limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1237 {"flow-limit":{"interval":5,"log":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-942 - inet6/filter/FORWARD -j limit-942 - inet/filter/INPUT -j limit-942 - inet6/filter/INPUT -j limit-942 - inet/filter/OUTPUT -j limit-942 - inet6/filter/OUTPUT -j limit-942 - inet/filter/limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1238 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-943 - inet6/filter/FORWARD -j limit-943 - inet/filter/INPUT -j limit-943 - inet6/filter/INPUT -j limit-943 - inet/filter/OUTPUT -j limit-943 - inet6/filter/OUTPUT -j limit-943 - inet/filter/limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1239 {"flow-limit":{"interval":5,"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-944 - inet6/filter/FORWARD -j limit-944 - inet/filter/INPUT -j limit-944 - inet6/filter/INPUT -j limit-944 - inet/filter/OUTPUT -j limit-944 - inet6/filter/OUTPUT -j limit-944 - inet/filter/limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1240 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-945 - inet6/filter/FORWARD -j limit-945 - inet/filter/INPUT -j limit-945 - inet6/filter/INPUT -j limit-945 - inet/filter/OUTPUT -j limit-945 - inet6/filter/OUTPUT -j limit-945 - inet/filter/limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1241 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-946 - inet6/filter/FORWARD -j limit-946 - inet/filter/INPUT -j limit-946 - inet6/filter/INPUT -j limit-946 - inet/filter/OUTPUT -j limit-946 - inet6/filter/OUTPUT -j limit-946 - inet/filter/limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-38 - inet6/filter/FORWARD -j logaccept-final-38 - inet/filter/INPUT -j logaccept-final-38 - inet6/filter/INPUT -j logaccept-final-38 - inet/filter/OUTPUT -j logaccept-final-38 - inet6/filter/OUTPUT -j logaccept-final-38 - inet/filter/logaccept-final-38 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-38 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-38 -j ACCEPT - inet6/filter/logaccept-final-38 -j ACCEPT - -Filter 1242 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-947 - inet6/filter/FORWARD -j limit-947 - inet/filter/INPUT -j limit-947 - inet6/filter/INPUT -j limit-947 - inet/filter/OUTPUT -j limit-947 - inet6/filter/OUTPUT -j limit-947 - inet/filter/limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1243 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-948 - inet6/filter/FORWARD -j limit-948 - inet/filter/INPUT -j limit-948 - inet6/filter/INPUT -j limit-948 - inet/filter/OUTPUT -j limit-948 - inet6/filter/OUTPUT -j limit-948 - inet/filter/limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1244 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-949 - inet6/filter/FORWARD -j limit-949 - inet/filter/INPUT -j limit-949 - inet6/filter/INPUT -j limit-949 - inet/filter/OUTPUT -j limit-949 - inet6/filter/OUTPUT -j limit-949 - inet/filter/limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1245 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-950 - inet6/filter/FORWARD -j limit-950 - inet/filter/INPUT -j limit-950 - inet6/filter/INPUT -j limit-950 - inet/filter/OUTPUT -j limit-950 - inet6/filter/OUTPUT -j limit-950 - inet/filter/limit-950 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1246 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-951 - inet6/filter/FORWARD -j limit-951 - inet/filter/INPUT -j limit-951 - inet6/filter/INPUT -j limit-951 - inet/filter/OUTPUT -j limit-951 - inet6/filter/OUTPUT -j limit-951 - inet/filter/limit-951 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1247 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-952 - inet6/filter/FORWARD -j limit-952 - inet/filter/INPUT -j limit-952 - inet6/filter/INPUT -j limit-952 - inet/filter/OUTPUT -j limit-952 - inet6/filter/OUTPUT -j limit-952 - inet/filter/limit-952 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-39 - inet6/filter/FORWARD -j logaccept-final-39 - inet/filter/INPUT -j logaccept-final-39 - inet6/filter/INPUT -j logaccept-final-39 - inet/filter/OUTPUT -j logaccept-final-39 - inet6/filter/OUTPUT -j logaccept-final-39 - inet/filter/logaccept-final-39 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-39 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-39 -j ACCEPT - inet6/filter/logaccept-final-39 -j ACCEPT - -Filter 1248 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-953 - inet6/filter/FORWARD -j limit-953 - inet/filter/INPUT -j limit-953 - inet6/filter/INPUT -j limit-953 - inet/filter/OUTPUT -j limit-953 - inet6/filter/OUTPUT -j limit-953 - inet/filter/limit-953 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-953 -m limit --limit 1/second -j LOG - inet6/filter/limit-953 -m limit --limit 1/second -j LOG - -Filter 1249 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-954 - inet6/filter/FORWARD -j limit-954 - inet/filter/INPUT -j limit-954 - inet6/filter/INPUT -j limit-954 - inet/filter/OUTPUT -j limit-954 - inet6/filter/OUTPUT -j limit-954 - inet/filter/limit-954 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1250 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-955 - inet6/filter/FORWARD -j limit-955 - inet/filter/INPUT -j limit-955 - inet6/filter/INPUT -j limit-955 - inet/filter/OUTPUT -j limit-955 - inet6/filter/OUTPUT -j limit-955 - inet/filter/limit-955 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1251 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-956 - inet6/filter/FORWARD -j limit-956 - inet/filter/INPUT -j limit-956 - inet6/filter/INPUT -j limit-956 - inet/filter/OUTPUT -j limit-956 - inet6/filter/OUTPUT -j limit-956 - inet/filter/limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1252 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-957 - inet6/filter/FORWARD -j limit-957 - inet/filter/INPUT -j limit-957 - inet6/filter/INPUT -j limit-957 - inet/filter/OUTPUT -j limit-957 - inet6/filter/OUTPUT -j limit-957 - inet/filter/limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1253 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-958 - inet6/filter/FORWARD -j limit-958 - inet/filter/INPUT -j limit-958 - inet6/filter/INPUT -j limit-958 - inet/filter/OUTPUT -j limit-958 - inet6/filter/OUTPUT -j limit-958 - inet/filter/limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-40 - inet6/filter/FORWARD -j logaccept-final-40 - inet/filter/INPUT -j logaccept-final-40 - inet6/filter/INPUT -j logaccept-final-40 - inet/filter/OUTPUT -j logaccept-final-40 - inet6/filter/OUTPUT -j logaccept-final-40 - inet/filter/logaccept-final-40 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-40 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-40 -j ACCEPT - inet6/filter/logaccept-final-40 -j ACCEPT - -Filter 1254 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-959 - inet6/filter/FORWARD -j limit-959 - inet/filter/INPUT -j limit-959 - inet6/filter/INPUT -j limit-959 - inet/filter/OUTPUT -j limit-959 - inet6/filter/OUTPUT -j limit-959 - inet/filter/limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1255 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-960 - inet6/filter/FORWARD -j limit-960 - inet/filter/INPUT -j limit-960 - inet6/filter/INPUT -j limit-960 - inet/filter/OUTPUT -j limit-960 - inet6/filter/OUTPUT -j limit-960 - inet/filter/limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1256 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-961 - inet6/filter/FORWARD -j limit-961 - inet/filter/INPUT -j limit-961 - inet6/filter/INPUT -j limit-961 - inet/filter/OUTPUT -j limit-961 - inet6/filter/OUTPUT -j limit-961 - inet/filter/limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1257 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-962 - inet6/filter/FORWARD -j limit-962 - inet/filter/INPUT -j limit-962 - inet6/filter/INPUT -j limit-962 - inet/filter/OUTPUT -j limit-962 - inet6/filter/OUTPUT -j limit-962 - inet/filter/limit-962 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-962 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1258 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-963 - inet6/filter/FORWARD -j limit-963 - inet/filter/INPUT -j limit-963 - inet6/filter/INPUT -j limit-963 - inet/filter/OUTPUT -j limit-963 - inet6/filter/OUTPUT -j limit-963 - inet/filter/limit-963 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-963 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1259 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-964 - inet6/filter/FORWARD -j limit-964 - inet/filter/INPUT -j limit-964 - inet6/filter/INPUT -j limit-964 - inet/filter/OUTPUT -j limit-964 - inet6/filter/OUTPUT -j limit-964 - inet/filter/limit-964 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-964 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-41 - inet6/filter/FORWARD -j logaccept-final-41 - inet/filter/INPUT -j logaccept-final-41 - inet6/filter/INPUT -j logaccept-final-41 - inet/filter/OUTPUT -j logaccept-final-41 - inet6/filter/OUTPUT -j logaccept-final-41 - inet/filter/logaccept-final-41 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-41 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-41 -j ACCEPT - inet6/filter/logaccept-final-41 -j ACCEPT - -Filter 1260 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-965 - inet6/filter/FORWARD -j limit-965 - inet/filter/INPUT -j limit-965 - inet6/filter/INPUT -j limit-965 - inet/filter/OUTPUT -j limit-965 - inet6/filter/OUTPUT -j limit-965 - inet/filter/limit-965 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-965 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-965 -m limit --limit 1/second -j LOG - inet6/filter/limit-965 -m limit --limit 1/second -j LOG - -Filter 1261 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-966 - inet6/filter/FORWARD -j limit-966 - inet/filter/INPUT -j limit-966 - inet6/filter/INPUT -j limit-966 - inet/filter/OUTPUT -j limit-966 - inet6/filter/OUTPUT -j limit-966 - inet/filter/limit-966 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-966 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1262 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-967 - inet6/filter/FORWARD -j limit-967 - inet/filter/INPUT -j limit-967 - inet6/filter/INPUT -j limit-967 - inet/filter/OUTPUT -j limit-967 - inet6/filter/OUTPUT -j limit-967 - inet/filter/limit-967 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-967 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1263 {"flow-limit":{"interval":5,"log":false,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-968 - inet6/filter/FORWARD -j limit-968 - inet/filter/INPUT -j limit-968 - inet6/filter/INPUT -j limit-968 - inet/filter/OUTPUT -j limit-968 - inet6/filter/OUTPUT -j limit-968 - inet/filter/limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-968 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-968 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1264 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-969 - inet6/filter/FORWARD -j limit-969 - inet/filter/INPUT -j limit-969 - inet6/filter/INPUT -j limit-969 - inet/filter/OUTPUT -j limit-969 - inet6/filter/OUTPUT -j limit-969 - inet/filter/limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-969 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-969 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 1265 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-970 - inet6/filter/FORWARD -j limit-970 - inet/filter/INPUT -j limit-970 - inet6/filter/INPUT -j limit-970 - inet/filter/OUTPUT -j limit-970 - inet6/filter/OUTPUT -j limit-970 - inet/filter/limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-970 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-970 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-42 - inet6/filter/FORWARD -j logaccept-final-42 - inet/filter/INPUT -j logaccept-final-42 - inet6/filter/INPUT -j logaccept-final-42 - inet/filter/OUTPUT -j logaccept-final-42 - inet6/filter/OUTPUT -j logaccept-final-42 - inet/filter/logaccept-final-42 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-42 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-42 -j ACCEPT - inet6/filter/logaccept-final-42 -j ACCEPT - -Filter 1266 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-971 - inet6/filter/FORWARD -j limit-971 - inet/filter/INPUT -j limit-971 - inet6/filter/INPUT -j limit-971 - inet/filter/OUTPUT -j limit-971 - inet6/filter/OUTPUT -j limit-971 - inet/filter/limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-971 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-971 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 1267 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-972 - inet6/filter/FORWARD -j limit-972 - inet/filter/INPUT -j limit-972 - inet6/filter/INPUT -j limit-972 - inet/filter/OUTPUT -j limit-972 - inet6/filter/OUTPUT -j limit-972 - inet/filter/limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-972 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-972 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1268 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-973 - inet6/filter/FORWARD -j limit-973 - inet/filter/INPUT -j limit-973 - inet6/filter/INPUT -j limit-973 - inet/filter/OUTPUT -j limit-973 - inet6/filter/OUTPUT -j limit-973 - inet/filter/limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-973 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-973 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 1269 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-974 - inet6/filter/FORWARD -j limit-974 - inet/filter/INPUT -j limit-974 - inet6/filter/INPUT -j limit-974 - inet/filter/OUTPUT -j limit-974 - inet6/filter/OUTPUT -j limit-974 - inet/filter/limit-974 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-974 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1270 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-975 - inet6/filter/FORWARD -j limit-975 - inet/filter/INPUT -j limit-975 - inet6/filter/INPUT -j limit-975 - inet/filter/OUTPUT -j limit-975 - inet6/filter/OUTPUT -j limit-975 - inet/filter/limit-975 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-975 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1271 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-976 - inet6/filter/FORWARD -j limit-976 - inet/filter/INPUT -j limit-976 - inet6/filter/INPUT -j limit-976 - inet/filter/OUTPUT -j limit-976 - inet6/filter/OUTPUT -j limit-976 - inet/filter/limit-976 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-976 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-43 - inet6/filter/FORWARD -j logaccept-final-43 - inet/filter/INPUT -j logaccept-final-43 - inet6/filter/INPUT -j logaccept-final-43 - inet/filter/OUTPUT -j logaccept-final-43 - inet6/filter/OUTPUT -j logaccept-final-43 - inet/filter/logaccept-final-43 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-43 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-43 -j ACCEPT - inet6/filter/logaccept-final-43 -j ACCEPT - -Filter 1272 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-977 - inet6/filter/FORWARD -j limit-977 - inet/filter/INPUT -j limit-977 - inet6/filter/INPUT -j limit-977 - inet/filter/OUTPUT -j limit-977 - inet6/filter/OUTPUT -j limit-977 - inet/filter/limit-977 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-977 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-977 -m limit --limit 1/second -j LOG - inet6/filter/limit-977 -m limit --limit 1/second -j LOG - -Filter 1273 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-978 - inet6/filter/FORWARD -j limit-978 - inet/filter/INPUT -j limit-978 - inet6/filter/INPUT -j limit-978 - inet/filter/OUTPUT -j limit-978 - inet6/filter/OUTPUT -j limit-978 - inet/filter/limit-978 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-978 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1274 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-979 - inet6/filter/FORWARD -j limit-979 - inet/filter/INPUT -j limit-979 - inet6/filter/INPUT -j limit-979 - inet/filter/OUTPUT -j limit-979 - inet6/filter/OUTPUT -j limit-979 - inet/filter/limit-979 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-979 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1275 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-980 - inet6/filter/FORWARD -j limit-980 - inet/filter/INPUT -j limit-980 - inet6/filter/INPUT -j limit-980 - inet/filter/OUTPUT -j limit-980 - inet6/filter/OUTPUT -j limit-980 - inet/filter/limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-980 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-980 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1276 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-981 - inet6/filter/FORWARD -j limit-981 - inet/filter/INPUT -j limit-981 - inet6/filter/INPUT -j limit-981 - inet/filter/OUTPUT -j limit-981 - inet6/filter/OUTPUT -j limit-981 - inet/filter/limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-981 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-981 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 1277 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-982 - inet6/filter/FORWARD -j limit-982 - inet/filter/INPUT -j limit-982 - inet6/filter/INPUT -j limit-982 - inet/filter/OUTPUT -j limit-982 - inet6/filter/OUTPUT -j limit-982 - inet/filter/limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-982 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-982 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-44 - inet6/filter/FORWARD -j logaccept-final-44 - inet/filter/INPUT -j logaccept-final-44 - inet6/filter/INPUT -j logaccept-final-44 - inet/filter/OUTPUT -j logaccept-final-44 - inet6/filter/OUTPUT -j logaccept-final-44 - inet/filter/logaccept-final-44 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-44 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-44 -j ACCEPT - inet6/filter/logaccept-final-44 -j ACCEPT - -Filter 1278 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-983 - inet6/filter/FORWARD -j limit-983 - inet/filter/INPUT -j limit-983 - inet6/filter/INPUT -j limit-983 - inet/filter/OUTPUT -j limit-983 - inet6/filter/OUTPUT -j limit-983 - inet/filter/limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-983 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-983 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 1279 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-984 - inet6/filter/FORWARD -j limit-984 - inet/filter/INPUT -j limit-984 - inet6/filter/INPUT -j limit-984 - inet/filter/OUTPUT -j limit-984 - inet6/filter/OUTPUT -j limit-984 - inet/filter/limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-984 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-984 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1280 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-985 - inet6/filter/FORWARD -j limit-985 - inet/filter/INPUT -j limit-985 - inet6/filter/INPUT -j limit-985 - inet/filter/OUTPUT -j limit-985 - inet6/filter/OUTPUT -j limit-985 - inet/filter/limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-985 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-985 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 1281 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-986 - inet6/filter/FORWARD -j limit-986 - inet/filter/INPUT -j limit-986 - inet6/filter/INPUT -j limit-986 - inet/filter/OUTPUT -j limit-986 - inet6/filter/OUTPUT -j limit-986 - inet/filter/limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-986 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1282 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-987 - inet6/filter/FORWARD -j limit-987 - inet/filter/INPUT -j limit-987 - inet6/filter/INPUT -j limit-987 - inet/filter/OUTPUT -j limit-987 - inet6/filter/OUTPUT -j limit-987 - inet/filter/limit-987 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-987 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1283 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-988 - inet6/filter/FORWARD -j limit-988 - inet/filter/INPUT -j limit-988 - inet6/filter/INPUT -j limit-988 - inet/filter/OUTPUT -j limit-988 - inet6/filter/OUTPUT -j limit-988 - inet/filter/limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-988 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-45 - inet6/filter/FORWARD -j logaccept-final-45 - inet/filter/INPUT -j logaccept-final-45 - inet6/filter/INPUT -j logaccept-final-45 - inet/filter/OUTPUT -j logaccept-final-45 - inet6/filter/OUTPUT -j logaccept-final-45 - inet/filter/logaccept-final-45 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-45 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-45 -j ACCEPT - inet6/filter/logaccept-final-45 -j ACCEPT - -Filter 1284 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-989 - inet6/filter/FORWARD -j limit-989 - inet/filter/INPUT -j limit-989 - inet6/filter/INPUT -j limit-989 - inet/filter/OUTPUT -j limit-989 - inet6/filter/OUTPUT -j limit-989 - inet/filter/limit-989 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-989 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-989 -m limit --limit 1/second -j LOG - inet6/filter/limit-989 -m limit --limit 1/second -j LOG - -Filter 1285 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-990 - inet6/filter/FORWARD -j limit-990 - inet/filter/INPUT -j limit-990 - inet6/filter/INPUT -j limit-990 - inet/filter/OUTPUT -j limit-990 - inet6/filter/OUTPUT -j limit-990 - inet/filter/limit-990 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-990 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1286 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-991 - inet6/filter/FORWARD -j limit-991 - inet/filter/INPUT -j limit-991 - inet6/filter/INPUT -j limit-991 - inet/filter/OUTPUT -j limit-991 - inet6/filter/OUTPUT -j limit-991 - inet/filter/limit-991 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-991 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1287 {"flow-limit":{"interval":5,"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-992 - inet6/filter/FORWARD -j limit-992 - inet/filter/INPUT -j limit-992 - inet6/filter/INPUT -j limit-992 - inet/filter/OUTPUT -j limit-992 - inet6/filter/OUTPUT -j limit-992 - inet/filter/limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1288 {"action":"pass","flow-limit":{"interval":5,"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-993 - inet6/filter/FORWARD -j limit-993 - inet/filter/INPUT -j limit-993 - inet6/filter/INPUT -j limit-993 - inet/filter/OUTPUT -j limit-993 - inet6/filter/OUTPUT -j limit-993 - inet/filter/limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1289 {"flow-limit":{"interval":5,"log":"none"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-994 - inet6/filter/FORWARD -j limit-994 - inet/filter/INPUT -j limit-994 - inet6/filter/INPUT -j limit-994 - inet/filter/OUTPUT -j limit-994 - inet6/filter/OUTPUT -j limit-994 - inet/filter/limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-46 - inet6/filter/FORWARD -j logaccept-final-46 - inet/filter/INPUT -j logaccept-final-46 - inet6/filter/INPUT -j logaccept-final-46 - inet/filter/OUTPUT -j logaccept-final-46 - inet6/filter/OUTPUT -j logaccept-final-46 - inet/filter/logaccept-final-46 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-46 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-46 -j ACCEPT - inet6/filter/logaccept-final-46 -j ACCEPT - -Filter 1290 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-995 - inet6/filter/FORWARD -j limit-995 - inet/filter/INPUT -j limit-995 - inet6/filter/INPUT -j limit-995 - inet/filter/OUTPUT -j limit-995 - inet6/filter/OUTPUT -j limit-995 - inet/filter/limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1291 {"flow-limit":{"interval":5,"log":"none"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-996 - inet6/filter/FORWARD -j limit-996 - inet/filter/INPUT -j limit-996 - inet6/filter/INPUT -j limit-996 - inet/filter/OUTPUT -j limit-996 - inet6/filter/OUTPUT -j limit-996 - inet/filter/limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1292 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-997 - inet6/filter/FORWARD -j limit-997 - inet/filter/INPUT -j limit-997 - inet6/filter/INPUT -j limit-997 - inet/filter/OUTPUT -j limit-997 - inet6/filter/OUTPUT -j limit-997 - inet/filter/limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1293 {"flow-limit":{"interval":5,"log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-998 - inet6/filter/FORWARD -j limit-998 - inet/filter/INPUT -j limit-998 - inet6/filter/INPUT -j limit-998 - inet/filter/OUTPUT -j limit-998 - inet6/filter/OUTPUT -j limit-998 - inet/filter/limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1294 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-999 - inet6/filter/FORWARD -j limit-999 - inet/filter/INPUT -j limit-999 - inet6/filter/INPUT -j limit-999 - inet/filter/OUTPUT -j limit-999 - inet6/filter/OUTPUT -j limit-999 - inet/filter/limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1295 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1000 - inet6/filter/FORWARD -j limit-1000 - inet/filter/INPUT -j limit-1000 - inet6/filter/INPUT -j limit-1000 - inet/filter/OUTPUT -j limit-1000 - inet6/filter/OUTPUT -j limit-1000 - inet/filter/limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-47 - inet6/filter/FORWARD -j logaccept-final-47 - inet/filter/INPUT -j logaccept-final-47 - inet6/filter/INPUT -j logaccept-final-47 - inet/filter/OUTPUT -j logaccept-final-47 - inet6/filter/OUTPUT -j logaccept-final-47 - inet/filter/logaccept-final-47 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-47 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-47 -j ACCEPT - inet6/filter/logaccept-final-47 -j ACCEPT - -Filter 1296 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1001 - inet6/filter/FORWARD -j limit-1001 - inet/filter/INPUT -j limit-1001 - inet6/filter/INPUT -j limit-1001 - inet/filter/OUTPUT -j limit-1001 - inet6/filter/OUTPUT -j limit-1001 - inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1297 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1002 - inet6/filter/FORWARD -j limit-1002 - inet/filter/INPUT -j limit-1002 - inet6/filter/INPUT -j limit-1002 - inet/filter/OUTPUT -j limit-1002 - inet6/filter/OUTPUT -j limit-1002 - inet/filter/limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1298 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1003 - inet6/filter/FORWARD -j limit-1003 - inet/filter/INPUT -j limit-1003 - inet6/filter/INPUT -j limit-1003 - inet/filter/OUTPUT -j limit-1003 - inet6/filter/OUTPUT -j limit-1003 - inet/filter/limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1299 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-1004 - inet6/filter/FORWARD -j limit-1004 - inet/filter/INPUT -j limit-1004 - inet6/filter/INPUT -j limit-1004 - inet/filter/OUTPUT -j limit-1004 - inet6/filter/OUTPUT -j limit-1004 - inet/filter/limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1300 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-1005 - inet6/filter/FORWARD -j limit-1005 - inet/filter/INPUT -j limit-1005 - inet6/filter/INPUT -j limit-1005 - inet/filter/OUTPUT -j limit-1005 - inet6/filter/OUTPUT -j limit-1005 - inet/filter/limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1301 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1006 - inet6/filter/FORWARD -j limit-1006 - inet/filter/INPUT -j limit-1006 - inet6/filter/INPUT -j limit-1006 - inet/filter/OUTPUT -j limit-1006 - inet6/filter/OUTPUT -j limit-1006 - inet/filter/limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-48 - inet6/filter/FORWARD -j logaccept-final-48 - inet/filter/INPUT -j logaccept-final-48 - inet6/filter/INPUT -j logaccept-final-48 - inet/filter/OUTPUT -j logaccept-final-48 - inet6/filter/OUTPUT -j logaccept-final-48 - inet/filter/logaccept-final-48 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-48 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-48 -j ACCEPT - inet6/filter/logaccept-final-48 -j ACCEPT - -Filter 1302 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1007 - inet6/filter/FORWARD -j limit-1007 - inet/filter/INPUT -j limit-1007 - inet6/filter/INPUT -j limit-1007 - inet/filter/OUTPUT -j limit-1007 - inet6/filter/OUTPUT -j limit-1007 - inet/filter/limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1007 -m limit --limit 1/second -j LOG - inet6/filter/limit-1007 -m limit --limit 1/second -j LOG - -Filter 1303 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1008 - inet6/filter/FORWARD -j limit-1008 - inet/filter/INPUT -j limit-1008 - inet6/filter/INPUT -j limit-1008 - inet/filter/OUTPUT -j limit-1008 - inet6/filter/OUTPUT -j limit-1008 - inet/filter/limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1304 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1009 - inet6/filter/FORWARD -j limit-1009 - inet/filter/INPUT -j limit-1009 - inet6/filter/INPUT -j limit-1009 - inet/filter/OUTPUT -j limit-1009 - inet6/filter/OUTPUT -j limit-1009 - inet/filter/limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1305 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-1010 - inet6/filter/FORWARD -j limit-1010 - inet/filter/INPUT -j limit-1010 - inet6/filter/INPUT -j limit-1010 - inet/filter/OUTPUT -j limit-1010 - inet6/filter/OUTPUT -j limit-1010 - inet/filter/limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1306 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-1011 - inet6/filter/FORWARD -j limit-1011 - inet/filter/INPUT -j limit-1011 - inet6/filter/INPUT -j limit-1011 - inet/filter/OUTPUT -j limit-1011 - inet6/filter/OUTPUT -j limit-1011 - inet/filter/limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1307 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1012 - inet6/filter/FORWARD -j limit-1012 - inet/filter/INPUT -j limit-1012 - inet6/filter/INPUT -j limit-1012 - inet/filter/OUTPUT -j limit-1012 - inet6/filter/OUTPUT -j limit-1012 - inet/filter/limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-49 - inet6/filter/FORWARD -j logaccept-final-49 - inet/filter/INPUT -j logaccept-final-49 - inet6/filter/INPUT -j logaccept-final-49 - inet/filter/OUTPUT -j logaccept-final-49 - inet6/filter/OUTPUT -j logaccept-final-49 - inet/filter/logaccept-final-49 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-49 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-49 -j ACCEPT - inet6/filter/logaccept-final-49 -j ACCEPT - -Filter 1308 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1013 - inet6/filter/FORWARD -j limit-1013 - inet/filter/INPUT -j limit-1013 - inet6/filter/INPUT -j limit-1013 - inet/filter/OUTPUT -j limit-1013 - inet6/filter/OUTPUT -j limit-1013 - inet/filter/limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1309 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1014 - inet6/filter/FORWARD -j limit-1014 - inet/filter/INPUT -j limit-1014 - inet6/filter/INPUT -j limit-1014 - inet/filter/OUTPUT -j limit-1014 - inet6/filter/OUTPUT -j limit-1014 - inet/filter/limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1310 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1015 - inet6/filter/FORWARD -j limit-1015 - inet/filter/INPUT -j limit-1015 - inet6/filter/INPUT -j limit-1015 - inet/filter/OUTPUT -j limit-1015 - inet6/filter/OUTPUT -j limit-1015 - inet/filter/limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1311 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-1016 - inet6/filter/FORWARD -j limit-1016 - inet/filter/INPUT -j limit-1016 - inet6/filter/INPUT -j limit-1016 - inet/filter/OUTPUT -j limit-1016 - inet6/filter/OUTPUT -j limit-1016 - inet/filter/limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1312 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-1017 - inet6/filter/FORWARD -j limit-1017 - inet/filter/INPUT -j limit-1017 - inet6/filter/INPUT -j limit-1017 - inet/filter/OUTPUT -j limit-1017 - inet6/filter/OUTPUT -j limit-1017 - inet/filter/limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1313 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1018 - inet6/filter/FORWARD -j limit-1018 - inet/filter/INPUT -j limit-1018 - inet6/filter/INPUT -j limit-1018 - inet/filter/OUTPUT -j limit-1018 - inet6/filter/OUTPUT -j limit-1018 - inet/filter/limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-50 - inet6/filter/FORWARD -j logaccept-final-50 - inet/filter/INPUT -j logaccept-final-50 - inet6/filter/INPUT -j logaccept-final-50 - inet/filter/OUTPUT -j logaccept-final-50 - inet6/filter/OUTPUT -j logaccept-final-50 - inet/filter/logaccept-final-50 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-50 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-50 -j ACCEPT - inet6/filter/logaccept-final-50 -j ACCEPT - -Filter 1314 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1019 - inet6/filter/FORWARD -j limit-1019 - inet/filter/INPUT -j limit-1019 - inet6/filter/INPUT -j limit-1019 - inet/filter/OUTPUT -j limit-1019 - inet6/filter/OUTPUT -j limit-1019 - inet/filter/limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1019 -m limit --limit 1/second -j LOG - inet6/filter/limit-1019 -m limit --limit 1/second -j LOG - -Filter 1315 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1020 - inet6/filter/FORWARD -j limit-1020 - inet/filter/INPUT -j limit-1020 - inet6/filter/INPUT -j limit-1020 - inet/filter/OUTPUT -j limit-1020 - inet6/filter/OUTPUT -j limit-1020 - inet/filter/limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1316 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1021 - inet6/filter/FORWARD -j limit-1021 - inet/filter/INPUT -j limit-1021 - inet6/filter/INPUT -j limit-1021 - inet/filter/OUTPUT -j limit-1021 - inet6/filter/OUTPUT -j limit-1021 - inet/filter/limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1317 {"flow-limit":{"interval":5,"log":"none","name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-1022 - inet6/filter/FORWARD -j limit-1022 - inet/filter/INPUT -j limit-1022 - inet6/filter/INPUT -j limit-1022 - inet/filter/OUTPUT -j limit-1022 - inet6/filter/OUTPUT -j limit-1022 - inet/filter/limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1022 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1022 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1318 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-1023 - inet6/filter/FORWARD -j limit-1023 - inet/filter/INPUT -j limit-1023 - inet6/filter/INPUT -j limit-1023 - inet/filter/OUTPUT -j limit-1023 - inet6/filter/OUTPUT -j limit-1023 - inet/filter/limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1023 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1023 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 1319 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1024 - inet6/filter/FORWARD -j limit-1024 - inet/filter/INPUT -j limit-1024 - inet6/filter/INPUT -j limit-1024 - inet/filter/OUTPUT -j limit-1024 - inet6/filter/OUTPUT -j limit-1024 - inet/filter/limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1024 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1024 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-51 - inet6/filter/FORWARD -j logaccept-final-51 - inet/filter/INPUT -j logaccept-final-51 - inet6/filter/INPUT -j logaccept-final-51 - inet/filter/OUTPUT -j logaccept-final-51 - inet6/filter/OUTPUT -j logaccept-final-51 - inet/filter/logaccept-final-51 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-51 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-51 -j ACCEPT - inet6/filter/logaccept-final-51 -j ACCEPT - -Filter 1320 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1025 - inet6/filter/FORWARD -j limit-1025 - inet/filter/INPUT -j limit-1025 - inet6/filter/INPUT -j limit-1025 - inet/filter/OUTPUT -j limit-1025 - inet6/filter/OUTPUT -j limit-1025 - inet/filter/limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1025 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1025 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 1321 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1026 - inet6/filter/FORWARD -j limit-1026 - inet/filter/INPUT -j limit-1026 - inet6/filter/INPUT -j limit-1026 - inet/filter/OUTPUT -j limit-1026 - inet6/filter/OUTPUT -j limit-1026 - inet/filter/limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1026 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1026 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1322 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1027 - inet6/filter/FORWARD -j limit-1027 - inet/filter/INPUT -j limit-1027 - inet6/filter/INPUT -j limit-1027 - inet/filter/OUTPUT -j limit-1027 - inet6/filter/OUTPUT -j limit-1027 - inet/filter/limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1027 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1027 -m recent --name user:C --rsource --mask fe00:: --set - -Filter 1323 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-1028 - inet6/filter/FORWARD -j limit-1028 - inet/filter/INPUT -j limit-1028 - inet6/filter/INPUT -j limit-1028 - inet/filter/OUTPUT -j limit-1028 - inet6/filter/OUTPUT -j limit-1028 - inet/filter/limit-1028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1324 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-1029 - inet6/filter/FORWARD -j limit-1029 - inet/filter/INPUT -j limit-1029 - inet6/filter/INPUT -j limit-1029 - inet/filter/OUTPUT -j limit-1029 - inet6/filter/OUTPUT -j limit-1029 - inet/filter/limit-1029 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1029 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1325 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1030 - inet6/filter/FORWARD -j limit-1030 - inet/filter/INPUT -j limit-1030 - inet6/filter/INPUT -j limit-1030 - inet/filter/OUTPUT -j limit-1030 - inet6/filter/OUTPUT -j limit-1030 - inet/filter/limit-1030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-52 - inet6/filter/FORWARD -j logaccept-final-52 - inet/filter/INPUT -j logaccept-final-52 - inet6/filter/INPUT -j logaccept-final-52 - inet/filter/OUTPUT -j logaccept-final-52 - inet6/filter/OUTPUT -j logaccept-final-52 - inet/filter/logaccept-final-52 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-52 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-52 -j ACCEPT - inet6/filter/logaccept-final-52 -j ACCEPT - -Filter 1326 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1031 - inet6/filter/FORWARD -j limit-1031 - inet/filter/INPUT -j limit-1031 - inet6/filter/INPUT -j limit-1031 - inet/filter/OUTPUT -j limit-1031 - inet6/filter/OUTPUT -j limit-1031 - inet/filter/limit-1031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1031 -m limit --limit 1/second -j LOG - inet6/filter/limit-1031 -m limit --limit 1/second -j LOG - -Filter 1327 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1032 - inet6/filter/FORWARD -j limit-1032 - inet/filter/INPUT -j limit-1032 - inet6/filter/INPUT -j limit-1032 - inet/filter/OUTPUT -j limit-1032 - inet6/filter/OUTPUT -j limit-1032 - inet/filter/limit-1032 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1032 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1328 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1033 - inet6/filter/FORWARD -j limit-1033 - inet/filter/INPUT -j limit-1033 - inet6/filter/INPUT -j limit-1033 - inet/filter/OUTPUT -j limit-1033 - inet6/filter/OUTPUT -j limit-1033 - inet/filter/limit-1033 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1033 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1329 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-1034 - inet6/filter/FORWARD -j limit-1034 - inet/filter/INPUT -j limit-1034 - inet6/filter/INPUT -j limit-1034 - inet/filter/OUTPUT -j limit-1034 - inet6/filter/OUTPUT -j limit-1034 - inet/filter/limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1034 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1330 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-1035 - inet6/filter/FORWARD -j limit-1035 - inet/filter/INPUT -j limit-1035 - inet6/filter/INPUT -j limit-1035 - inet/filter/OUTPUT -j limit-1035 - inet6/filter/OUTPUT -j limit-1035 - inet/filter/limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1035 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 1331 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1036 - inet6/filter/FORWARD -j limit-1036 - inet/filter/INPUT -j limit-1036 - inet6/filter/INPUT -j limit-1036 - inet/filter/OUTPUT -j limit-1036 - inet6/filter/OUTPUT -j limit-1036 - inet/filter/limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1036 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-53 - inet6/filter/FORWARD -j logaccept-final-53 - inet/filter/INPUT -j logaccept-final-53 - inet6/filter/INPUT -j logaccept-final-53 - inet/filter/OUTPUT -j logaccept-final-53 - inet6/filter/OUTPUT -j logaccept-final-53 - inet/filter/logaccept-final-53 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-53 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-53 -j ACCEPT - inet6/filter/logaccept-final-53 -j ACCEPT - -Filter 1332 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1037 - inet6/filter/FORWARD -j limit-1037 - inet/filter/INPUT -j limit-1037 - inet6/filter/INPUT -j limit-1037 - inet/filter/OUTPUT -j limit-1037 - inet6/filter/OUTPUT -j limit-1037 - inet/filter/limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1037 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - -Filter 1333 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1038 - inet6/filter/FORWARD -j limit-1038 - inet/filter/INPUT -j limit-1038 - inet6/filter/INPUT -j limit-1038 - inet/filter/OUTPUT -j limit-1038 - inet6/filter/OUTPUT -j limit-1038 - inet/filter/limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1038 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1334 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1039 - inet6/filter/FORWARD -j limit-1039 - inet/filter/INPUT -j limit-1039 - inet6/filter/INPUT -j limit-1039 - inet/filter/OUTPUT -j limit-1039 - inet6/filter/OUTPUT -j limit-1039 - inet/filter/limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1039 -m recent --name user:C --rdest --mask fe00:: --set - -Filter 1335 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-1040 - inet6/filter/FORWARD -j limit-1040 - inet/filter/INPUT -j limit-1040 - inet6/filter/INPUT -j limit-1040 - inet/filter/OUTPUT -j limit-1040 - inet6/filter/OUTPUT -j limit-1040 - inet/filter/limit-1040 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1040 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1336 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-1041 - inet6/filter/FORWARD -j limit-1041 - inet/filter/INPUT -j limit-1041 - inet6/filter/INPUT -j limit-1041 - inet/filter/OUTPUT -j limit-1041 - inet6/filter/OUTPUT -j limit-1041 - inet/filter/limit-1041 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1041 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1337 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1042 - inet6/filter/FORWARD -j limit-1042 - inet/filter/INPUT -j limit-1042 - inet6/filter/INPUT -j limit-1042 - inet/filter/OUTPUT -j limit-1042 - inet6/filter/OUTPUT -j limit-1042 - inet/filter/limit-1042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-54 - inet6/filter/FORWARD -j logaccept-final-54 - inet/filter/INPUT -j logaccept-final-54 - inet6/filter/INPUT -j logaccept-final-54 - inet/filter/OUTPUT -j logaccept-final-54 - inet6/filter/OUTPUT -j logaccept-final-54 - inet/filter/logaccept-final-54 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-54 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-54 -j ACCEPT - inet6/filter/logaccept-final-54 -j ACCEPT - -Filter 1338 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1043 - inet6/filter/FORWARD -j limit-1043 - inet/filter/INPUT -j limit-1043 - inet6/filter/INPUT -j limit-1043 - inet/filter/OUTPUT -j limit-1043 - inet6/filter/OUTPUT -j limit-1043 - inet/filter/limit-1043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1043 -m limit --limit 1/second -j LOG - inet6/filter/limit-1043 -m limit --limit 1/second -j LOG - -Filter 1339 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1044 - inet6/filter/FORWARD -j limit-1044 - inet/filter/INPUT -j limit-1044 - inet6/filter/INPUT -j limit-1044 - inet/filter/OUTPUT -j limit-1044 - inet6/filter/OUTPUT -j limit-1044 - inet/filter/limit-1044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1340 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1045 - inet6/filter/FORWARD -j limit-1045 - inet/filter/INPUT -j limit-1045 - inet6/filter/INPUT -j limit-1045 - inet/filter/OUTPUT -j limit-1045 - inet6/filter/OUTPUT -j limit-1045 - inet/filter/limit-1045 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1045 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 1341 {"flow-limit":150} -(filter-limit) - inet/filter/FORWARD -j limit-1046 - inet6/filter/FORWARD -j limit-1046 - inet/filter/INPUT -j limit-1046 - inet6/filter/INPUT -j limit-1046 - inet/filter/OUTPUT -j limit-1046 - inet6/filter/OUTPUT -j limit-1046 - inet/filter/limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1046 -j RETURN - inet6/filter/limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1046 -j RETURN - inet/filter/limit-1046 -m limit --limit 1/second -j LOG - inet6/filter/limit-1046 -m limit --limit 1/second -j LOG - inet/filter/limit-1046 -j DROP - inet6/filter/limit-1046 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1342 {"action":"pass","flow-limit":150} -(filter-limit) - inet/filter/FORWARD -j limit-1047 - inet6/filter/FORWARD -j limit-1047 - inet/filter/INPUT -j limit-1047 - inet6/filter/INPUT -j limit-1047 - inet/filter/OUTPUT -j limit-1047 - inet6/filter/OUTPUT -j limit-1047 - inet/filter/limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1047 -j RETURN - inet6/filter/limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1047 -j RETURN - inet/filter/limit-1047 -m limit --limit 1/second -j LOG - inet6/filter/limit-1047 -m limit --limit 1/second -j LOG - inet/filter/limit-1047 -j DROP - inet6/filter/limit-1047 -j DROP - -Filter 1343 {"flow-limit":150,"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1048 - inet6/filter/FORWARD -j limit-1048 - inet/filter/INPUT -j limit-1048 - inet6/filter/INPUT -j limit-1048 - inet/filter/OUTPUT -j limit-1048 - inet6/filter/OUTPUT -j limit-1048 - inet/filter/limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j RETURN - inet6/filter/limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j RETURN - inet/filter/limit-1048 -m limit --limit 1/second -j LOG - inet6/filter/limit-1048 -m limit --limit 1/second -j LOG - inet/filter/limit-1048 -j DROP - inet6/filter/limit-1048 -j DROP - inet/filter/FORWARD -j logaccept-final-55 - inet6/filter/FORWARD -j logaccept-final-55 - inet/filter/INPUT -j logaccept-final-55 - inet6/filter/INPUT -j logaccept-final-55 - inet/filter/OUTPUT -j logaccept-final-55 - inet6/filter/OUTPUT -j logaccept-final-55 - inet/filter/logaccept-final-55 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-55 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-55 -j ACCEPT - inet6/filter/logaccept-final-55 -j ACCEPT - -Filter 1344 {"flow-limit":150,"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1049 - inet6/filter/FORWARD -j limit-1049 - inet/filter/INPUT -j limit-1049 - inet6/filter/INPUT -j limit-1049 - inet/filter/OUTPUT -j limit-1049 - inet6/filter/OUTPUT -j limit-1049 - inet/filter/limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1049 -j RETURN - inet6/filter/limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1049 -j RETURN - inet/filter/limit-1049 -m limit --limit 1/second -j LOG - inet6/filter/limit-1049 -m limit --limit 1/second -j LOG - inet/filter/limit-1049 -j DROP - inet6/filter/limit-1049 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1345 {"flow-limit":{"count":150}} -(filter-limit) - inet/filter/FORWARD -j limit-1050 - inet6/filter/FORWARD -j limit-1050 - inet/filter/INPUT -j limit-1050 - inet6/filter/INPUT -j limit-1050 - inet/filter/OUTPUT -j limit-1050 - inet6/filter/OUTPUT -j limit-1050 - inet/filter/limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1050 -j RETURN - inet6/filter/limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1050 -j RETURN - inet/filter/limit-1050 -m limit --limit 1/second -j LOG - inet6/filter/limit-1050 -m limit --limit 1/second -j LOG - inet/filter/limit-1050 -j DROP - inet6/filter/limit-1050 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1346 {"action":"pass","flow-limit":{"count":150}} -(filter-limit) - inet/filter/FORWARD -j limit-1051 - inet6/filter/FORWARD -j limit-1051 - inet/filter/INPUT -j limit-1051 - inet6/filter/INPUT -j limit-1051 - inet/filter/OUTPUT -j limit-1051 - inet6/filter/OUTPUT -j limit-1051 - inet/filter/limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1051 -j RETURN - inet6/filter/limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1051 -j RETURN - inet/filter/limit-1051 -m limit --limit 1/second -j LOG - inet6/filter/limit-1051 -m limit --limit 1/second -j LOG - inet/filter/limit-1051 -j DROP - inet6/filter/limit-1051 -j DROP - -Filter 1347 {"flow-limit":{"count":150},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1052 - inet6/filter/FORWARD -j limit-1052 - inet/filter/INPUT -j limit-1052 - inet6/filter/INPUT -j limit-1052 - inet/filter/OUTPUT -j limit-1052 - inet6/filter/OUTPUT -j limit-1052 - inet/filter/limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j RETURN - inet6/filter/limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j RETURN - inet/filter/limit-1052 -m limit --limit 1/second -j LOG - inet6/filter/limit-1052 -m limit --limit 1/second -j LOG - inet/filter/limit-1052 -j DROP - inet6/filter/limit-1052 -j DROP - inet/filter/FORWARD -j logaccept-final-56 - inet6/filter/FORWARD -j logaccept-final-56 - inet/filter/INPUT -j logaccept-final-56 - inet6/filter/INPUT -j logaccept-final-56 - inet/filter/OUTPUT -j logaccept-final-56 - inet6/filter/OUTPUT -j logaccept-final-56 - inet/filter/logaccept-final-56 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-56 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-56 -j ACCEPT - inet6/filter/logaccept-final-56 -j ACCEPT - -Filter 1348 {"flow-limit":{"count":150},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1053 - inet6/filter/FORWARD -j limit-1053 - inet/filter/INPUT -j limit-1053 - inet6/filter/INPUT -j limit-1053 - inet/filter/OUTPUT -j limit-1053 - inet6/filter/OUTPUT -j limit-1053 - inet/filter/limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1053 -j RETURN - inet6/filter/limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1053 -j RETURN - inet/filter/limit-1053 -m limit --limit 1/second -j LOG - inet6/filter/limit-1053 -m limit --limit 1/second -j LOG - inet/filter/limit-1053 -j DROP - inet6/filter/limit-1053 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1349 {"flow-limit":{"count":150,"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-1054 - inet6/filter/FORWARD -j limit-1054 - inet/filter/INPUT -j limit-1054 - inet6/filter/INPUT -j limit-1054 - inet/filter/OUTPUT -j limit-1054 - inet6/filter/OUTPUT -j limit-1054 - inet/filter/limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1054 -j RETURN - inet6/filter/limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1054 -j RETURN - inet/filter/limit-1054 -j DROP - inet6/filter/limit-1054 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1350 {"action":"pass","flow-limit":{"count":150,"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-1055 - inet6/filter/FORWARD -j limit-1055 - inet/filter/INPUT -j limit-1055 - inet6/filter/INPUT -j limit-1055 - inet/filter/OUTPUT -j limit-1055 - inet6/filter/OUTPUT -j limit-1055 - inet/filter/limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1055 -j RETURN - inet6/filter/limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1055 -j RETURN - inet/filter/limit-1055 -j DROP - inet6/filter/limit-1055 -j DROP - -Filter 1351 {"flow-limit":{"count":150,"log":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1056 - inet6/filter/FORWARD -j limit-1056 - inet/filter/INPUT -j limit-1056 - inet6/filter/INPUT -j limit-1056 - inet/filter/OUTPUT -j limit-1056 - inet6/filter/OUTPUT -j limit-1056 - inet/filter/limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j RETURN - inet6/filter/limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j RETURN - inet/filter/limit-1056 -j DROP - inet6/filter/limit-1056 -j DROP - inet/filter/FORWARD -j logaccept-final-57 - inet6/filter/FORWARD -j logaccept-final-57 - inet/filter/INPUT -j logaccept-final-57 - inet6/filter/INPUT -j logaccept-final-57 - inet/filter/OUTPUT -j logaccept-final-57 - inet6/filter/OUTPUT -j logaccept-final-57 - inet/filter/logaccept-final-57 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-57 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-57 -j ACCEPT - inet6/filter/logaccept-final-57 -j ACCEPT - -Filter 1352 {"flow-limit":{"count":150,"log":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1057 - inet6/filter/FORWARD -j limit-1057 - inet/filter/INPUT -j limit-1057 - inet6/filter/INPUT -j limit-1057 - inet/filter/OUTPUT -j limit-1057 - inet6/filter/OUTPUT -j limit-1057 - inet/filter/limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1057 -j RETURN - inet6/filter/limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1057 -j RETURN - inet/filter/limit-1057 -j DROP - inet6/filter/limit-1057 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1353 {"flow-limit":{"count":150,"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-1058 - inet6/filter/FORWARD -j limit-1058 - inet/filter/INPUT -j limit-1058 - inet6/filter/INPUT -j limit-1058 - inet/filter/OUTPUT -j limit-1058 - inet6/filter/OUTPUT -j limit-1058 - inet/filter/limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1058 -j RETURN - inet6/filter/limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1058 -j RETURN - inet/filter/limit-1058 -j DROP - inet6/filter/limit-1058 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1354 {"action":"pass","flow-limit":{"count":150,"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-1059 - inet6/filter/FORWARD -j limit-1059 - inet/filter/INPUT -j limit-1059 - inet6/filter/INPUT -j limit-1059 - inet/filter/OUTPUT -j limit-1059 - inet6/filter/OUTPUT -j limit-1059 - inet/filter/limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1059 -j RETURN - inet6/filter/limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1059 -j RETURN - inet/filter/limit-1059 -j DROP - inet6/filter/limit-1059 -j DROP - -Filter 1355 {"flow-limit":{"count":150,"log":"none"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1060 - inet6/filter/FORWARD -j limit-1060 - inet/filter/INPUT -j limit-1060 - inet6/filter/INPUT -j limit-1060 - inet/filter/OUTPUT -j limit-1060 - inet6/filter/OUTPUT -j limit-1060 - inet/filter/limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j RETURN - inet6/filter/limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j RETURN - inet/filter/limit-1060 -j DROP - inet6/filter/limit-1060 -j DROP - inet/filter/FORWARD -j logaccept-final-58 - inet6/filter/FORWARD -j logaccept-final-58 - inet/filter/INPUT -j logaccept-final-58 - inet6/filter/INPUT -j logaccept-final-58 - inet/filter/OUTPUT -j logaccept-final-58 - inet6/filter/OUTPUT -j logaccept-final-58 - inet/filter/logaccept-final-58 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-58 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-58 -j ACCEPT - inet6/filter/logaccept-final-58 -j ACCEPT - -Filter 1356 {"flow-limit":{"count":150,"log":"none"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1061 - inet6/filter/FORWARD -j limit-1061 - inet/filter/INPUT -j limit-1061 - inet6/filter/INPUT -j limit-1061 - inet/filter/OUTPUT -j limit-1061 - inet6/filter/OUTPUT -j limit-1061 - inet/filter/limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1061 -j RETURN - inet6/filter/limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1061 -j RETURN - inet/filter/limit-1061 -j DROP - inet6/filter/limit-1061 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1357 {"flow-limit":{"count":150,"interval":5}} -(filter-limit) - inet/filter/FORWARD -j limit-1062 - inet6/filter/FORWARD -j limit-1062 - inet/filter/INPUT -j limit-1062 - inet6/filter/INPUT -j limit-1062 - inet/filter/OUTPUT -j limit-1062 - inet6/filter/OUTPUT -j limit-1062 - inet/filter/limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1062 -j RETURN - inet6/filter/limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1062 -j RETURN - inet/filter/limit-1062 -m limit --limit 1/second -j LOG - inet6/filter/limit-1062 -m limit --limit 1/second -j LOG - inet/filter/limit-1062 -j DROP - inet6/filter/limit-1062 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1358 {"action":"pass","flow-limit":{"count":150,"interval":5}} -(filter-limit) - inet/filter/FORWARD -j limit-1063 - inet6/filter/FORWARD -j limit-1063 - inet/filter/INPUT -j limit-1063 - inet6/filter/INPUT -j limit-1063 - inet/filter/OUTPUT -j limit-1063 - inet6/filter/OUTPUT -j limit-1063 - inet/filter/limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1063 -j RETURN - inet6/filter/limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1063 -j RETURN - inet/filter/limit-1063 -m limit --limit 1/second -j LOG - inet6/filter/limit-1063 -m limit --limit 1/second -j LOG - inet/filter/limit-1063 -j DROP - inet6/filter/limit-1063 -j DROP - -Filter 1359 {"flow-limit":{"count":150,"interval":5},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1064 - inet6/filter/FORWARD -j limit-1064 - inet/filter/INPUT -j limit-1064 - inet6/filter/INPUT -j limit-1064 - inet/filter/OUTPUT -j limit-1064 - inet6/filter/OUTPUT -j limit-1064 - inet/filter/limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j RETURN - inet6/filter/limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j RETURN - inet/filter/limit-1064 -m limit --limit 1/second -j LOG - inet6/filter/limit-1064 -m limit --limit 1/second -j LOG - inet/filter/limit-1064 -j DROP - inet6/filter/limit-1064 -j DROP - inet/filter/FORWARD -j logaccept-final-59 - inet6/filter/FORWARD -j logaccept-final-59 - inet/filter/INPUT -j logaccept-final-59 - inet6/filter/INPUT -j logaccept-final-59 - inet/filter/OUTPUT -j logaccept-final-59 - inet6/filter/OUTPUT -j logaccept-final-59 - inet/filter/logaccept-final-59 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-59 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-59 -j ACCEPT - inet6/filter/logaccept-final-59 -j ACCEPT - -Filter 1360 {"flow-limit":{"count":150,"interval":5},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1065 - inet6/filter/FORWARD -j limit-1065 - inet/filter/INPUT -j limit-1065 - inet6/filter/INPUT -j limit-1065 - inet/filter/OUTPUT -j limit-1065 - inet6/filter/OUTPUT -j limit-1065 - inet/filter/limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1065 -j RETURN - inet6/filter/limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1065 -j RETURN - inet/filter/limit-1065 -m limit --limit 1/second -j LOG - inet6/filter/limit-1065 -m limit --limit 1/second -j LOG - inet/filter/limit-1065 -j DROP - inet6/filter/limit-1065 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1361 {"flow-limit":{"count":150,"interval":5,"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-1066 - inet6/filter/FORWARD -j limit-1066 - inet/filter/INPUT -j limit-1066 - inet6/filter/INPUT -j limit-1066 - inet/filter/OUTPUT -j limit-1066 - inet6/filter/OUTPUT -j limit-1066 - inet/filter/limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1066 -j RETURN - inet6/filter/limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1066 -j RETURN - inet/filter/limit-1066 -j DROP - inet6/filter/limit-1066 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1362 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-1067 - inet6/filter/FORWARD -j limit-1067 - inet/filter/INPUT -j limit-1067 - inet6/filter/INPUT -j limit-1067 - inet/filter/OUTPUT -j limit-1067 - inet6/filter/OUTPUT -j limit-1067 - inet/filter/limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1067 -j RETURN - inet6/filter/limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1067 -j RETURN - inet/filter/limit-1067 -j DROP - inet6/filter/limit-1067 -j DROP - -Filter 1363 {"flow-limit":{"count":150,"interval":5,"log":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1068 - inet6/filter/FORWARD -j limit-1068 - inet/filter/INPUT -j limit-1068 - inet6/filter/INPUT -j limit-1068 - inet/filter/OUTPUT -j limit-1068 - inet6/filter/OUTPUT -j limit-1068 - inet/filter/limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j RETURN - inet6/filter/limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j RETURN - inet/filter/limit-1068 -j DROP - inet6/filter/limit-1068 -j DROP - inet/filter/FORWARD -j logaccept-final-60 - inet6/filter/FORWARD -j logaccept-final-60 - inet/filter/INPUT -j logaccept-final-60 - inet6/filter/INPUT -j logaccept-final-60 - inet/filter/OUTPUT -j logaccept-final-60 - inet6/filter/OUTPUT -j logaccept-final-60 - inet/filter/logaccept-final-60 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-60 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-60 -j ACCEPT - inet6/filter/logaccept-final-60 -j ACCEPT - -Filter 1364 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1069 - inet6/filter/FORWARD -j limit-1069 - inet/filter/INPUT -j limit-1069 - inet6/filter/INPUT -j limit-1069 - inet/filter/OUTPUT -j limit-1069 - inet6/filter/OUTPUT -j limit-1069 - inet/filter/limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1069 -j RETURN - inet6/filter/limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1069 -j RETURN - inet/filter/limit-1069 -j DROP - inet6/filter/limit-1069 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1365 {"flow-limit":{"count":150,"interval":5,"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-1070 - inet6/filter/FORWARD -j limit-1070 - inet/filter/INPUT -j limit-1070 - inet6/filter/INPUT -j limit-1070 - inet/filter/OUTPUT -j limit-1070 - inet6/filter/OUTPUT -j limit-1070 - inet/filter/limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1070 -j RETURN - inet6/filter/limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1070 -j RETURN - inet/filter/limit-1070 -j DROP - inet6/filter/limit-1070 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1366 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-1071 - inet6/filter/FORWARD -j limit-1071 - inet/filter/INPUT -j limit-1071 - inet6/filter/INPUT -j limit-1071 - inet/filter/OUTPUT -j limit-1071 - inet6/filter/OUTPUT -j limit-1071 - inet/filter/limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1071 -j RETURN - inet6/filter/limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1071 -j RETURN - inet/filter/limit-1071 -j DROP - inet6/filter/limit-1071 -j DROP - -Filter 1367 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1072 - inet6/filter/FORWARD -j limit-1072 - inet/filter/INPUT -j limit-1072 - inet6/filter/INPUT -j limit-1072 - inet/filter/OUTPUT -j limit-1072 - inet6/filter/OUTPUT -j limit-1072 - inet/filter/limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j RETURN - inet6/filter/limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j RETURN - inet/filter/limit-1072 -j DROP - inet6/filter/limit-1072 -j DROP - inet/filter/FORWARD -j logaccept-final-61 - inet6/filter/FORWARD -j logaccept-final-61 - inet/filter/INPUT -j logaccept-final-61 - inet6/filter/INPUT -j logaccept-final-61 - inet/filter/OUTPUT -j logaccept-final-61 - inet6/filter/OUTPUT -j logaccept-final-61 - inet/filter/logaccept-final-61 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-61 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-61 -j ACCEPT - inet6/filter/logaccept-final-61 -j ACCEPT - -Filter 1368 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1073 - inet6/filter/FORWARD -j limit-1073 - inet/filter/INPUT -j limit-1073 - inet6/filter/INPUT -j limit-1073 - inet/filter/OUTPUT -j limit-1073 - inet6/filter/OUTPUT -j limit-1073 - inet/filter/limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1073 -j RETURN - inet6/filter/limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1073 -j RETURN - inet/filter/limit-1073 -j DROP - inet6/filter/limit-1073 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1369 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1074 - inet6/filter/INPUT -i eth0 -j limit-1074 - inet/filter/limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-343 - inet6/filter/limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-343 - inet/filter/logdrop-343 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-343 -m limit --limit 1/second -j LOG - inet/filter/logdrop-343 -j DROP - inet6/filter/logdrop-343 -j DROP - inet/filter/limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1370 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1075 - inet6/filter/INPUT -i eth0 -j limit-1075 - inet/filter/limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-344 - inet6/filter/limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-344 - inet/filter/logdrop-344 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-344 -m limit --limit 1/second -j LOG - inet/filter/logdrop-344 -j DROP - inet6/filter/logdrop-344 -j DROP - inet/filter/limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1371 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1076 - inet6/filter/INPUT -i eth0 -j limit-1076 - inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-345 - inet6/filter/limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-345 - inet/filter/logdrop-345 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-345 -m limit --limit 1/second -j LOG - inet/filter/logdrop-345 -j DROP - inet6/filter/logdrop-345 -j DROP - inet/filter/limit-1076 -m limit --limit 1/second -j LOG - inet6/filter/limit-1076 -m limit --limit 1/second -j LOG - inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1372 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1077 - inet6/filter/INPUT -i eth0 -j limit-1077 - inet/filter/limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-346 - inet6/filter/limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-346 - inet/filter/logdrop-346 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-346 -m limit --limit 1/second -j LOG - inet/filter/logdrop-346 -j DROP - inet6/filter/logdrop-346 -j DROP - inet/filter/limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1373 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1078 - inet6/filter/INPUT -i eth0 -j limit-1078 - inet/filter/limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-347 - inet6/filter/limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-347 - inet/filter/logdrop-347 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-347 -m limit --limit 1/second -j LOG - inet/filter/logdrop-347 -j DROP - inet6/filter/logdrop-347 -j DROP - inet/filter/limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1374 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1079 - inet6/filter/INPUT -i eth0 -j limit-1079 - inet/filter/limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-348 - inet6/filter/limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-348 - inet/filter/logdrop-348 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-348 -m limit --limit 1/second -j LOG - inet/filter/logdrop-348 -j DROP - inet6/filter/logdrop-348 -j DROP - inet/filter/limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1375 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1080 - inet6/filter/INPUT -i eth0 -j limit-1080 - inet/filter/limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-349 - inet6/filter/limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-349 - inet/filter/logdrop-349 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-349 -m limit --limit 1/second -j LOG - inet/filter/logdrop-349 -j DROP - inet6/filter/logdrop-349 -j DROP - inet/filter/limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1376 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1081 - inet6/filter/INPUT -i eth0 -j limit-1081 - inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-350 - inet6/filter/limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-350 - inet/filter/logdrop-350 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-350 -m limit --limit 1/second -j LOG - inet/filter/logdrop-350 -j DROP - inet6/filter/logdrop-350 -j DROP - inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1377 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1082 - inet6/filter/INPUT -i eth0 -j limit-1082 - inet/filter/limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-351 - inet6/filter/limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-351 - inet/filter/logdrop-351 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-351 -m limit --limit 1/second -j LOG - inet/filter/logdrop-351 -j DROP - inet6/filter/logdrop-351 -j DROP - inet/filter/limit-1082 -m limit --limit 1/second -j LOG - inet6/filter/limit-1082 -m limit --limit 1/second -j LOG - inet/filter/limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1378 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1083 - inet6/filter/INPUT -i eth0 -j limit-1083 - inet/filter/limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-352 - inet6/filter/limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-352 - inet/filter/logdrop-352 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-352 -m limit --limit 1/second -j LOG - inet/filter/logdrop-352 -j DROP - inet6/filter/logdrop-352 -j DROP - inet/filter/limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1379 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1084 - inet6/filter/INPUT -i eth0 -j limit-1084 - inet/filter/limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-353 - inet6/filter/limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-353 - inet/filter/logdrop-353 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-353 -m limit --limit 1/second -j LOG - inet/filter/logdrop-353 -j DROP - inet6/filter/logdrop-353 -j DROP - inet/filter/limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1380 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1085 - inet6/filter/INPUT -i eth0 -j limit-1085 - inet/filter/limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-354 - inet6/filter/limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-354 - inet/filter/logdrop-354 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-354 -m limit --limit 1/second -j LOG - inet/filter/logdrop-354 -j DROP - inet6/filter/logdrop-354 -j DROP - inet/filter/limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1381 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1086 - inet6/filter/INPUT -i eth0 -j limit-1086 - inet/filter/limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-355 - inet6/filter/limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-355 - inet/filter/logdrop-355 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-355 -m limit --limit 1/second -j LOG - inet/filter/logdrop-355 -j DROP - inet6/filter/logdrop-355 -j DROP - inet/filter/limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1382 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1087 - inet6/filter/INPUT -i eth0 -j limit-1087 - inet/filter/limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-356 - inet6/filter/limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-356 - inet/filter/logdrop-356 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-356 -m limit --limit 1/second -j LOG - inet/filter/logdrop-356 -j DROP - inet6/filter/logdrop-356 -j DROP - inet/filter/limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1383 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1088 - inet6/filter/INPUT -i eth0 -j limit-1088 - inet/filter/limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-357 - inet6/filter/limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-357 - inet/filter/logdrop-357 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-357 -m limit --limit 1/second -j LOG - inet/filter/logdrop-357 -j DROP - inet6/filter/logdrop-357 -j DROP - inet/filter/limit-1088 -m limit --limit 1/second -j LOG - inet6/filter/limit-1088 -m limit --limit 1/second -j LOG - inet/filter/limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1384 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1089 - inet6/filter/INPUT -i eth0 -j limit-1089 - inet/filter/limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-358 - inet6/filter/limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-358 - inet/filter/logdrop-358 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-358 -m limit --limit 1/second -j LOG - inet/filter/logdrop-358 -j DROP - inet6/filter/logdrop-358 -j DROP - inet/filter/limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1385 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1090 - inet6/filter/INPUT -i eth0 -j limit-1090 - inet/filter/limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-359 - inet6/filter/limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-359 - inet/filter/logdrop-359 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-359 -m limit --limit 1/second -j LOG - inet/filter/logdrop-359 -j DROP - inet6/filter/logdrop-359 -j DROP - inet/filter/limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1386 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1091 - inet6/filter/INPUT -i eth0 -j limit-1091 - inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-360 - inet6/filter/limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-360 - inet/filter/logdrop-360 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-360 -m limit --limit 1/second -j LOG - inet/filter/logdrop-360 -j DROP - inet6/filter/logdrop-360 -j DROP - inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1387 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1092 - inet6/filter/INPUT -i eth0 -j limit-1092 - inet/filter/limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-361 - inet6/filter/limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-361 - inet/filter/logdrop-361 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-361 -m limit --limit 1/second -j LOG - inet/filter/logdrop-361 -j DROP - inet6/filter/logdrop-361 -j DROP - inet/filter/limit-1092 -j ACCEPT - inet6/filter/limit-1092 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1388 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-362 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-362 - inet/filter/logdrop-362 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-362 -m limit --limit 1/second -j LOG - inet/filter/logdrop-362 -j DROP - inet6/filter/logdrop-362 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1389 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1094 - inet6/filter/INPUT -i eth0 -j limit-1094 - inet/filter/limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-363 - inet6/filter/limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-363 - inet/filter/logdrop-363 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-363 -m limit --limit 1/second -j LOG - inet/filter/logdrop-363 -j DROP - inet6/filter/logdrop-363 -j DROP - inet/filter/limit-1094 -m limit --limit 1/second -j LOG - inet6/filter/limit-1094 -m limit --limit 1/second -j LOG - inet/filter/limit-1094 -j ACCEPT - inet6/filter/limit-1094 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1390 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1095 - inet6/filter/INPUT -i eth0 -j limit-1095 - inet/filter/limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-364 - inet6/filter/limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-364 - inet/filter/logdrop-364 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-364 -m limit --limit 1/second -j LOG - inet/filter/logdrop-364 -j DROP - inet6/filter/logdrop-364 -j DROP - inet/filter/limit-1095 -m limit --limit 1/second -j LOG - inet6/filter/limit-1095 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1391 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1096 - inet6/filter/INPUT -i eth0 -j limit-1096 - inet/filter/limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-365 - inet6/filter/limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-365 - inet/filter/logdrop-365 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-365 -m limit --limit 1/second -j LOG - inet/filter/logdrop-365 -j DROP - inet6/filter/logdrop-365 -j DROP - inet/filter/limit-1096 -j ACCEPT - inet6/filter/limit-1096 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1392 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-366 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-366 - inet/filter/logdrop-366 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-366 -m limit --limit 1/second -j LOG - inet/filter/logdrop-366 -j DROP - inet6/filter/logdrop-366 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1393 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1098 - inet6/filter/INPUT -i eth0 -j limit-1098 - inet/filter/limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-367 - inet6/filter/limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-367 - inet/filter/logdrop-367 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-367 -m limit --limit 1/second -j LOG - inet/filter/logdrop-367 -j DROP - inet6/filter/logdrop-367 -j DROP - inet/filter/limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1394 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1099 - inet6/filter/INPUT -i eth0 -j limit-1099 - inet/filter/limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-368 - inet6/filter/limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-368 - inet/filter/logdrop-368 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-368 -m limit --limit 1/second -j LOG - inet/filter/logdrop-368 -j DROP - inet6/filter/logdrop-368 -j DROP - inet/filter/limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1395 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1100 - inet6/filter/INPUT -i eth0 -j limit-1100 - inet/filter/limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-369 - inet6/filter/limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-369 - inet/filter/logdrop-369 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-369 -m limit --limit 1/second -j LOG - inet/filter/logdrop-369 -j DROP - inet6/filter/logdrop-369 -j DROP - inet/filter/limit-1100 -m limit --limit 1/second -j LOG - inet6/filter/limit-1100 -m limit --limit 1/second -j LOG - inet/filter/limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1396 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1101 - inet6/filter/INPUT -i eth0 -j limit-1101 - inet/filter/limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-370 - inet6/filter/limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-370 - inet/filter/logdrop-370 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-370 -m limit --limit 1/second -j LOG - inet/filter/logdrop-370 -j DROP - inet6/filter/logdrop-370 -j DROP - inet/filter/limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1397 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1102 - inet6/filter/INPUT -i eth0 -j limit-1102 - inet/filter/limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-371 - inet6/filter/limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-371 - inet/filter/logdrop-371 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-371 -m limit --limit 1/second -j LOG - inet/filter/logdrop-371 -j DROP - inet6/filter/logdrop-371 -j DROP - inet/filter/limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1398 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1103 - inet6/filter/INPUT -i eth0 -j limit-1103 - inet/filter/limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-372 - inet6/filter/limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-372 - inet/filter/logdrop-372 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-372 -m limit --limit 1/second -j LOG - inet/filter/logdrop-372 -j DROP - inet6/filter/logdrop-372 -j DROP - inet/filter/limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1399 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1104 - inet6/filter/INPUT -i eth0 -j limit-1104 - inet/filter/limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 - inet6/filter/limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-373 - inet/filter/logdrop-373 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-373 -m limit --limit 1/second -j LOG - inet/filter/logdrop-373 -j DROP - inet6/filter/logdrop-373 -j DROP - inet/filter/limit-1104 -j ACCEPT - inet6/filter/limit-1104 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1400 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-374 - inet/filter/logdrop-374 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-374 -m limit --limit 1/second -j LOG - inet/filter/logdrop-374 -j DROP - inet6/filter/logdrop-374 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1401 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1106 - inet6/filter/INPUT -i eth0 -j limit-1106 - inet/filter/limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 - inet6/filter/limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-375 - inet/filter/logdrop-375 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-375 -m limit --limit 1/second -j LOG - inet/filter/logdrop-375 -j DROP - inet6/filter/logdrop-375 -j DROP - inet/filter/limit-1106 -m limit --limit 1/second -j LOG - inet6/filter/limit-1106 -m limit --limit 1/second -j LOG - inet/filter/limit-1106 -j ACCEPT - inet6/filter/limit-1106 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1402 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1107 - inet6/filter/INPUT -i eth0 -j limit-1107 - inet/filter/limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-376 - inet6/filter/limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-376 - inet/filter/logdrop-376 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-376 -m limit --limit 1/second -j LOG - inet/filter/logdrop-376 -j DROP - inet6/filter/logdrop-376 -j DROP - inet/filter/limit-1107 -m limit --limit 1/second -j LOG - inet6/filter/limit-1107 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1403 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1108 - inet6/filter/INPUT -i eth0 -j limit-1108 - inet/filter/limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-377 - inet6/filter/limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-377 - inet/filter/logdrop-377 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-377 -m limit --limit 1/second -j LOG - inet/filter/logdrop-377 -j DROP - inet6/filter/logdrop-377 -j DROP - inet/filter/limit-1108 -j ACCEPT - inet6/filter/limit-1108 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1404 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-378 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-378 - inet/filter/logdrop-378 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-378 -m limit --limit 1/second -j LOG - inet/filter/logdrop-378 -j DROP - inet6/filter/logdrop-378 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1405 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1110 - inet6/filter/INPUT -i eth0 -j limit-1110 - inet/filter/limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-379 - inet6/filter/limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-379 - inet/filter/logdrop-379 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-379 -m limit --limit 1/second -j LOG - inet/filter/logdrop-379 -j DROP - inet6/filter/logdrop-379 -j DROP - inet/filter/limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1110 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1406 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1111 - inet6/filter/INPUT -i eth0 -j limit-1111 - inet/filter/limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-380 - inet6/filter/limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-380 - inet/filter/logdrop-380 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-380 -m limit --limit 1/second -j LOG - inet/filter/logdrop-380 -j DROP - inet6/filter/logdrop-380 -j DROP - inet/filter/limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1111 -m recent --name user:C --rsource --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1407 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1112 - inet6/filter/INPUT -i eth0 -j limit-1112 - inet/filter/limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-381 - inet6/filter/limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-381 - inet/filter/logdrop-381 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-381 -m limit --limit 1/second -j LOG - inet/filter/logdrop-381 -j DROP - inet6/filter/logdrop-381 -j DROP - inet/filter/limit-1112 -m limit --limit 1/second -j LOG - inet6/filter/limit-1112 -m limit --limit 1/second -j LOG - inet/filter/limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1112 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1408 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1113 - inet6/filter/INPUT -i eth0 -j limit-1113 - inet/filter/limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-382 - inet6/filter/limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-382 - inet/filter/logdrop-382 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-382 -m limit --limit 1/second -j LOG - inet/filter/logdrop-382 -j DROP - inet6/filter/logdrop-382 -j DROP - inet/filter/limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1113 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1409 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1114 - inet6/filter/INPUT -i eth0 -j limit-1114 - inet/filter/limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-383 - inet6/filter/limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-383 - inet/filter/logdrop-383 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-383 -m limit --limit 1/second -j LOG - inet/filter/logdrop-383 -j DROP - inet6/filter/logdrop-383 -j DROP - inet/filter/limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1114 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1410 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1115 - inet6/filter/INPUT -i eth0 -j limit-1115 - inet/filter/limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-384 - inet6/filter/limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-384 - inet/filter/logdrop-384 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-384 -m limit --limit 1/second -j LOG - inet/filter/logdrop-384 -j DROP - inet6/filter/logdrop-384 -j DROP - inet/filter/limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1115 -m recent --name user:C --rsource --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1411 {"flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1116 - inet6/filter/INPUT -i eth0 -j limit-1116 - inet/filter/limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-385 - inet6/filter/limit-1116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-385 - inet/filter/logdrop-385 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-385 -m limit --limit 1/second -j LOG - inet/filter/logdrop-385 -j DROP - inet6/filter/logdrop-385 -j DROP - inet/filter/limit-1116 -j ACCEPT - inet6/filter/limit-1116 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1412 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-386 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-386 - inet/filter/logdrop-386 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-386 -m limit --limit 1/second -j LOG - inet/filter/logdrop-386 -j DROP - inet6/filter/logdrop-386 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1413 {"flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1118 - inet6/filter/INPUT -i eth0 -j limit-1118 - inet/filter/limit-1118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-387 - inet6/filter/limit-1118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-387 - inet/filter/logdrop-387 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-387 -m limit --limit 1/second -j LOG - inet/filter/logdrop-387 -j DROP - inet6/filter/logdrop-387 -j DROP - inet/filter/limit-1118 -m limit --limit 1/second -j LOG - inet6/filter/limit-1118 -m limit --limit 1/second -j LOG - inet/filter/limit-1118 -j ACCEPT - inet6/filter/limit-1118 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1414 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1119 - inet6/filter/INPUT -i eth0 -j limit-1119 - inet/filter/limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-388 - inet6/filter/limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-388 - inet/filter/logdrop-388 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-388 -m limit --limit 1/second -j LOG - inet/filter/logdrop-388 -j DROP - inet6/filter/logdrop-388 -j DROP - inet/filter/limit-1119 -m limit --limit 1/second -j LOG - inet6/filter/limit-1119 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1415 {"flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1120 - inet6/filter/INPUT -i eth0 -j limit-1120 - inet/filter/limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-389 - inet6/filter/limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-389 - inet/filter/logdrop-389 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-389 -m limit --limit 1/second -j LOG - inet/filter/logdrop-389 -j DROP - inet6/filter/logdrop-389 -j DROP - inet/filter/limit-1120 -j ACCEPT - inet6/filter/limit-1120 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1416 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-390 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-390 - inet/filter/logdrop-390 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-390 -m limit --limit 1/second -j LOG - inet/filter/logdrop-390 -j DROP - inet6/filter/logdrop-390 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1417 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1122 - inet6/filter/INPUT -i eth0 -j limit-1122 - inet/filter/limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-391 - inet6/filter/limit-1122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-391 - inet/filter/logdrop-391 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-391 -m limit --limit 1/second -j LOG - inet/filter/logdrop-391 -j DROP - inet6/filter/logdrop-391 -j DROP - inet/filter/limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1122 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1418 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1123 - inet6/filter/INPUT -i eth0 -j limit-1123 - inet/filter/limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-392 - inet6/filter/limit-1123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-392 - inet/filter/logdrop-392 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-392 -m limit --limit 1/second -j LOG - inet/filter/logdrop-392 -j DROP - inet6/filter/logdrop-392 -j DROP - inet/filter/limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1123 -m recent --name user:C --rdest --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1419 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1124 - inet6/filter/INPUT -i eth0 -j limit-1124 - inet/filter/limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-393 - inet6/filter/limit-1124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-393 - inet/filter/logdrop-393 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-393 -m limit --limit 1/second -j LOG - inet/filter/logdrop-393 -j DROP - inet6/filter/logdrop-393 -j DROP - inet/filter/limit-1124 -m limit --limit 1/second -j LOG - inet6/filter/limit-1124 -m limit --limit 1/second -j LOG - inet/filter/limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1124 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1420 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1125 - inet6/filter/INPUT -i eth0 -j limit-1125 - inet/filter/limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-394 - inet6/filter/limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-394 - inet/filter/logdrop-394 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-394 -m limit --limit 1/second -j LOG - inet/filter/logdrop-394 -j DROP - inet6/filter/logdrop-394 -j DROP - inet/filter/limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1125 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1421 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1126 - inet6/filter/INPUT -i eth0 -j limit-1126 - inet/filter/limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-395 - inet6/filter/limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-395 - inet/filter/logdrop-395 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-395 -m limit --limit 1/second -j LOG - inet/filter/logdrop-395 -j DROP - inet6/filter/logdrop-395 -j DROP - inet/filter/limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1126 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1422 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1127 - inet6/filter/INPUT -i eth0 -j limit-1127 - inet/filter/limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-396 - inet6/filter/limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-396 - inet/filter/logdrop-396 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-396 -m limit --limit 1/second -j LOG - inet/filter/logdrop-396 -j DROP - inet6/filter/logdrop-396 -j DROP - inet/filter/limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1127 -m recent --name user:C --rdest --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1423 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1128 - inet6/filter/INPUT -i eth0 -j limit-1128 - inet/filter/limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 - inet6/filter/limit-1128 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-397 - inet/filter/logdrop-397 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-397 -m limit --limit 1/second -j LOG - inet/filter/logdrop-397 -j DROP - inet6/filter/logdrop-397 -j DROP - inet/filter/limit-1128 -j ACCEPT - inet6/filter/limit-1128 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1424 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-398 - inet/filter/logdrop-398 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-398 -m limit --limit 1/second -j LOG - inet/filter/logdrop-398 -j DROP - inet6/filter/logdrop-398 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1425 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1130 - inet6/filter/INPUT -i eth0 -j limit-1130 - inet/filter/limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 - inet6/filter/limit-1130 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-399 - inet/filter/logdrop-399 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-399 -m limit --limit 1/second -j LOG - inet/filter/logdrop-399 -j DROP - inet6/filter/logdrop-399 -j DROP - inet/filter/limit-1130 -m limit --limit 1/second -j LOG - inet6/filter/limit-1130 -m limit --limit 1/second -j LOG - inet/filter/limit-1130 -j ACCEPT - inet6/filter/limit-1130 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1426 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1131 - inet6/filter/INPUT -i eth0 -j limit-1131 - inet/filter/limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-400 - inet6/filter/limit-1131 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-400 - inet/filter/logdrop-400 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-400 -m limit --limit 1/second -j LOG - inet/filter/logdrop-400 -j DROP - inet6/filter/logdrop-400 -j DROP - inet/filter/limit-1131 -m limit --limit 1/second -j LOG - inet6/filter/limit-1131 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1427 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1132 - inet6/filter/INPUT -i eth0 -j limit-1132 - inet/filter/limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-401 - inet6/filter/limit-1132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-401 - inet/filter/logdrop-401 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-401 -m limit --limit 1/second -j LOG - inet/filter/logdrop-401 -j DROP - inet6/filter/logdrop-401 -j DROP - inet/filter/limit-1132 -j ACCEPT - inet6/filter/limit-1132 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1428 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-402 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-402 - inet/filter/logdrop-402 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-402 -m limit --limit 1/second -j LOG - inet/filter/logdrop-402 -j DROP - inet6/filter/logdrop-402 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1429 {"flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1134 - inet6/filter/INPUT -i eth0 -j limit-1134 - inet/filter/limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1430 {"action":"pass","flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1135 - inet6/filter/INPUT -i eth0 -j limit-1135 - inet/filter/limit-1135 -m recent --name limit-1135 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1135 -m recent --name limit-1135 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1135 -m recent --name limit-1135 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1135 -m recent --name limit-1135 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1431 {"flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1136 - inet6/filter/INPUT -i eth0 -j limit-1136 - inet/filter/limit-1136 -m recent --name limit-1136 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1136 -m recent --name limit-1136 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1136 -m limit --limit 1/second -j LOG - inet6/filter/limit-1136 -m limit --limit 1/second -j LOG - inet/filter/limit-1136 -m recent --name limit-1136 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1136 -m recent --name limit-1136 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1432 {"action":"pass","flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1137 - inet6/filter/INPUT -i eth0 -j limit-1137 - inet/filter/limit-1137 -m recent --name limit-1137 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1137 -m recent --name limit-1137 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1137 -m recent --name limit-1137 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1137 -m recent --name limit-1137 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1433 {"flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1138 - inet6/filter/INPUT -i eth0 -j limit-1138 - inet/filter/limit-1138 -m recent --name limit-1138 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1138 -m recent --name limit-1138 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1138 -m recent --name limit-1138 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1138 -m recent --name limit-1138 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1434 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1139 - inet6/filter/INPUT -i eth0 -j limit-1139 - inet/filter/limit-1139 -m recent --name limit-1139 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1139 -m recent --name limit-1139 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1139 -m recent --name limit-1139 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1139 -m recent --name limit-1139 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1435 {"flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1140 - inet6/filter/INPUT -i eth0 -j limit-1140 - inet/filter/limit-1140 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1140 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1436 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1141 - inet6/filter/INPUT -i eth0 -j limit-1141 - inet/filter/limit-1141 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1141 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1437 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1142 - inet6/filter/INPUT -i eth0 -j limit-1142 - inet/filter/limit-1142 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1142 -m limit --limit 1/second -j LOG - inet6/filter/limit-1142 -m limit --limit 1/second -j LOG - inet/filter/limit-1142 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1438 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1143 - inet6/filter/INPUT -i eth0 -j limit-1143 - inet/filter/limit-1143 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1143 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1439 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1144 - inet6/filter/INPUT -i eth0 -j limit-1144 - inet/filter/limit-1144 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1144 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1440 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1145 - inet6/filter/INPUT -i eth0 -j limit-1145 - inet/filter/limit-1145 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1145 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1145 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1145 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1441 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1146 - inet6/filter/INPUT -i eth0 -j limit-1146 - inet/filter/limit-1146 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1146 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1146 -j ACCEPT - inet6/filter/limit-1146 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1442 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1443 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1148 - inet6/filter/INPUT -i eth0 -j limit-1148 - inet/filter/limit-1148 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1148 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1148 -m limit --limit 1/second -j LOG - inet6/filter/limit-1148 -m limit --limit 1/second -j LOG - inet/filter/limit-1148 -j ACCEPT - inet6/filter/limit-1148 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1444 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1149 - inet6/filter/INPUT -i eth0 -j limit-1149 - inet/filter/limit-1149 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1149 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1149 -m limit --limit 1/second -j LOG - inet6/filter/limit-1149 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1445 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1150 - inet6/filter/INPUT -i eth0 -j limit-1150 - inet/filter/limit-1150 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1150 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1150 -j ACCEPT - inet6/filter/limit-1150 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1446 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1447 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1152 - inet6/filter/INPUT -i eth0 -j limit-1152 - inet/filter/limit-1152 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1152 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1448 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1153 - inet6/filter/INPUT -i eth0 -j limit-1153 - inet/filter/limit-1153 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1153 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1449 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1154 - inet6/filter/INPUT -i eth0 -j limit-1154 - inet/filter/limit-1154 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1154 -m limit --limit 1/second -j LOG - inet6/filter/limit-1154 -m limit --limit 1/second -j LOG - inet/filter/limit-1154 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1450 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1155 - inet6/filter/INPUT -i eth0 -j limit-1155 - inet/filter/limit-1155 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1155 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1451 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1156 - inet6/filter/INPUT -i eth0 -j limit-1156 - inet/filter/limit-1156 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1156 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1452 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1157 - inet6/filter/INPUT -i eth0 -j limit-1157 - inet/filter/limit-1157 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1157 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1453 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1158 - inet6/filter/INPUT -i eth0 -j limit-1158 - inet/filter/limit-1158 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1158 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1158 -j ACCEPT - inet6/filter/limit-1158 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1454 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1455 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1160 - inet6/filter/INPUT -i eth0 -j limit-1160 - inet/filter/limit-1160 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1160 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1160 -m limit --limit 1/second -j LOG - inet6/filter/limit-1160 -m limit --limit 1/second -j LOG - inet/filter/limit-1160 -j ACCEPT - inet6/filter/limit-1160 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1456 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1161 - inet6/filter/INPUT -i eth0 -j limit-1161 - inet/filter/limit-1161 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1161 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1161 -m limit --limit 1/second -j LOG - inet6/filter/limit-1161 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1457 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1162 - inet6/filter/INPUT -i eth0 -j limit-1162 - inet/filter/limit-1162 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1162 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1162 -j ACCEPT - inet6/filter/limit-1162 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1458 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1459 {"flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1164 - inet6/filter/INPUT -i eth0 -j limit-1164 - inet/filter/limit-1164 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1164 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1164 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1164 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1460 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1165 - inet6/filter/INPUT -i eth0 -j limit-1165 - inet/filter/limit-1165 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1165 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1165 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1165 -m recent --name user:C --rsource --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1461 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1166 - inet6/filter/INPUT -i eth0 -j limit-1166 - inet/filter/limit-1166 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1166 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1166 -m limit --limit 1/second -j LOG - inet6/filter/limit-1166 -m limit --limit 1/second -j LOG - inet/filter/limit-1166 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1166 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1462 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1167 - inet6/filter/INPUT -i eth0 -j limit-1167 - inet/filter/limit-1167 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1167 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1167 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1167 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1463 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1168 - inet6/filter/INPUT -i eth0 -j limit-1168 - inet/filter/limit-1168 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1168 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1168 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1168 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1464 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1169 - inet6/filter/INPUT -i eth0 -j limit-1169 - inet/filter/limit-1169 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1169 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1169 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1169 -m recent --name user:C --rsource --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1465 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1170 - inet6/filter/INPUT -i eth0 -j limit-1170 - inet/filter/limit-1170 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1170 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1170 -j ACCEPT - inet6/filter/limit-1170 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1466 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1467 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1172 - inet6/filter/INPUT -i eth0 -j limit-1172 - inet/filter/limit-1172 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1172 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1172 -m limit --limit 1/second -j LOG - inet6/filter/limit-1172 -m limit --limit 1/second -j LOG - inet/filter/limit-1172 -j ACCEPT - inet6/filter/limit-1172 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1468 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1173 - inet6/filter/INPUT -i eth0 -j limit-1173 - inet/filter/limit-1173 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1173 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1173 -m limit --limit 1/second -j LOG - inet6/filter/limit-1173 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1469 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1174 - inet6/filter/INPUT -i eth0 -j limit-1174 - inet/filter/limit-1174 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1174 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1174 -j ACCEPT - inet6/filter/limit-1174 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1470 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1471 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1176 - inet6/filter/INPUT -i eth0 -j limit-1176 - inet/filter/limit-1176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1472 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1177 - inet6/filter/INPUT -i eth0 -j limit-1177 - inet/filter/limit-1177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1177 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1177 -m recent --name user:C --rdest --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1473 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1178 - inet6/filter/INPUT -i eth0 -j limit-1178 - inet/filter/limit-1178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1178 -m limit --limit 1/second -j LOG - inet6/filter/limit-1178 -m limit --limit 1/second -j LOG - inet/filter/limit-1178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1474 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1179 - inet6/filter/INPUT -i eth0 -j limit-1179 - inet/filter/limit-1179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1179 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1475 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1180 - inet6/filter/INPUT -i eth0 -j limit-1180 - inet/filter/limit-1180 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1180 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1180 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1180 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1476 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1181 - inet6/filter/INPUT -i eth0 -j limit-1181 - inet/filter/limit-1181 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1181 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1181 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1181 -m recent --name user:C --rdest --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1477 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1182 - inet6/filter/INPUT -i eth0 -j limit-1182 - inet/filter/limit-1182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1182 -j ACCEPT - inet6/filter/limit-1182 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1478 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1479 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1184 - inet6/filter/INPUT -i eth0 -j limit-1184 - inet/filter/limit-1184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1184 -m limit --limit 1/second -j LOG - inet6/filter/limit-1184 -m limit --limit 1/second -j LOG - inet/filter/limit-1184 -j ACCEPT - inet6/filter/limit-1184 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1480 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1185 - inet6/filter/INPUT -i eth0 -j limit-1185 - inet/filter/limit-1185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1185 -m limit --limit 1/second -j LOG - inet6/filter/limit-1185 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1481 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1186 - inet6/filter/INPUT -i eth0 -j limit-1186 - inet/filter/limit-1186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1186 -j ACCEPT - inet6/filter/limit-1186 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1482 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1483 {"flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1188 - inet6/filter/INPUT -i eth0 -j limit-1188 - inet/filter/limit-1188 -m recent --name limit-1188 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1188 -m recent --name limit-1188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1188 -m recent --name limit-1188 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1188 -m recent --name limit-1188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1484 {"action":"pass","flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1189 - inet6/filter/INPUT -i eth0 -j limit-1189 - inet/filter/limit-1189 -m recent --name limit-1189 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1189 -m recent --name limit-1189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1189 -m recent --name limit-1189 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1189 -m recent --name limit-1189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1485 {"flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1190 - inet6/filter/INPUT -i eth0 -j limit-1190 - inet/filter/limit-1190 -m recent --name limit-1190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1190 -m recent --name limit-1190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1190 -m limit --limit 1/second -j LOG - inet6/filter/limit-1190 -m limit --limit 1/second -j LOG - inet/filter/limit-1190 -m recent --name limit-1190 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1190 -m recent --name limit-1190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1486 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1191 - inet6/filter/INPUT -i eth0 -j limit-1191 - inet/filter/limit-1191 -m recent --name limit-1191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1191 -m recent --name limit-1191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1191 -m recent --name limit-1191 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1191 -m recent --name limit-1191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1487 {"flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1192 - inet6/filter/INPUT -i eth0 -j limit-1192 - inet/filter/limit-1192 -m recent --name limit-1192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1192 -m recent --name limit-1192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1192 -m recent --name limit-1192 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1192 -m recent --name limit-1192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1488 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1193 - inet6/filter/INPUT -i eth0 -j limit-1193 - inet/filter/limit-1193 -m recent --name limit-1193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1193 -m recent --name limit-1193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1193 -m recent --name limit-1193 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1193 -m recent --name limit-1193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1489 {"flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1194 - inet6/filter/INPUT -i eth0 -j limit-1194 - inet/filter/limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1490 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1195 - inet6/filter/INPUT -i eth0 -j limit-1195 - inet/filter/limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1491 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1196 - inet6/filter/INPUT -i eth0 -j limit-1196 - inet/filter/limit-1196 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1196 -m limit --limit 1/second -j LOG - inet6/filter/limit-1196 -m limit --limit 1/second -j LOG - inet/filter/limit-1196 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1492 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1197 - inet6/filter/INPUT -i eth0 -j limit-1197 - inet/filter/limit-1197 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1197 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1493 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1198 - inet6/filter/INPUT -i eth0 -j limit-1198 - inet/filter/limit-1198 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1198 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1494 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1199 - inet6/filter/INPUT -i eth0 -j limit-1199 - inet/filter/limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1495 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1200 - inet6/filter/INPUT -i eth0 -j limit-1200 - inet/filter/limit-1200 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1200 -j ACCEPT - inet6/filter/limit-1200 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1496 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1497 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1202 - inet6/filter/INPUT -i eth0 -j limit-1202 - inet/filter/limit-1202 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1202 -m limit --limit 1/second -j LOG - inet6/filter/limit-1202 -m limit --limit 1/second -j LOG - inet/filter/limit-1202 -j ACCEPT - inet6/filter/limit-1202 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1498 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1203 - inet6/filter/INPUT -i eth0 -j limit-1203 - inet/filter/limit-1203 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1203 -m limit --limit 1/second -j LOG - inet6/filter/limit-1203 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1499 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1204 - inet6/filter/INPUT -i eth0 -j limit-1204 - inet/filter/limit-1204 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1204 -j ACCEPT - inet6/filter/limit-1204 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1500 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1501 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1206 - inet6/filter/INPUT -i eth0 -j limit-1206 - inet/filter/limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1502 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1207 - inet6/filter/INPUT -i eth0 -j limit-1207 - inet/filter/limit-1207 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1207 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1503 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1208 - inet6/filter/INPUT -i eth0 -j limit-1208 - inet/filter/limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1208 -m limit --limit 1/second -j LOG - inet6/filter/limit-1208 -m limit --limit 1/second -j LOG - inet/filter/limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1504 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1209 - inet6/filter/INPUT -i eth0 -j limit-1209 - inet/filter/limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1505 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1210 - inet6/filter/INPUT -i eth0 -j limit-1210 - inet/filter/limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1506 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1211 - inet6/filter/INPUT -i eth0 -j limit-1211 - inet/filter/limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1507 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1212 - inet6/filter/INPUT -i eth0 -j limit-1212 - inet/filter/limit-1212 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1212 -j ACCEPT - inet6/filter/limit-1212 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1508 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1509 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1214 - inet6/filter/INPUT -i eth0 -j limit-1214 - inet/filter/limit-1214 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1214 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1214 -m limit --limit 1/second -j LOG - inet6/filter/limit-1214 -m limit --limit 1/second -j LOG - inet/filter/limit-1214 -j ACCEPT - inet6/filter/limit-1214 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1510 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1215 - inet6/filter/INPUT -i eth0 -j limit-1215 - inet/filter/limit-1215 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1215 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1215 -m limit --limit 1/second -j LOG - inet6/filter/limit-1215 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1511 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1216 - inet6/filter/INPUT -i eth0 -j limit-1216 - inet/filter/limit-1216 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1216 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1216 -j ACCEPT - inet6/filter/limit-1216 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1512 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1513 {"flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1218 - inet6/filter/INPUT -i eth0 -j limit-1218 - inet/filter/limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1218 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1218 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1514 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1219 - inet6/filter/INPUT -i eth0 -j limit-1219 - inet/filter/limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1219 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1219 -m recent --name user:C --rsource --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1515 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1220 - inet6/filter/INPUT -i eth0 -j limit-1220 - inet/filter/limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1220 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1220 -m limit --limit 1/second -j LOG - inet6/filter/limit-1220 -m limit --limit 1/second -j LOG - inet/filter/limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1220 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1516 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1221 - inet6/filter/INPUT -i eth0 -j limit-1221 - inet/filter/limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1221 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1221 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1517 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1222 - inet6/filter/INPUT -i eth0 -j limit-1222 - inet/filter/limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1222 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1222 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1518 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1223 - inet6/filter/INPUT -i eth0 -j limit-1223 - inet/filter/limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1223 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1223 -m recent --name user:C --rsource --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1519 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1224 - inet6/filter/INPUT -i eth0 -j limit-1224 - inet/filter/limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1224 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1224 -j ACCEPT - inet6/filter/limit-1224 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1520 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1521 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1226 - inet6/filter/INPUT -i eth0 -j limit-1226 - inet/filter/limit-1226 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1226 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1226 -m limit --limit 1/second -j LOG - inet6/filter/limit-1226 -m limit --limit 1/second -j LOG - inet/filter/limit-1226 -j ACCEPT - inet6/filter/limit-1226 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1522 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1227 - inet6/filter/INPUT -i eth0 -j limit-1227 - inet/filter/limit-1227 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1227 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1227 -m limit --limit 1/second -j LOG - inet6/filter/limit-1227 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1523 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1228 - inet6/filter/INPUT -i eth0 -j limit-1228 - inet/filter/limit-1228 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1228 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1228 -j ACCEPT - inet6/filter/limit-1228 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1524 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1525 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1230 - inet6/filter/INPUT -i eth0 -j limit-1230 - inet/filter/limit-1230 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1230 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1230 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1230 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1526 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1231 - inet6/filter/INPUT -i eth0 -j limit-1231 - inet/filter/limit-1231 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1231 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1231 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1231 -m recent --name user:C --rdest --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1527 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1232 - inet6/filter/INPUT -i eth0 -j limit-1232 - inet/filter/limit-1232 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1232 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1232 -m limit --limit 1/second -j LOG - inet6/filter/limit-1232 -m limit --limit 1/second -j LOG - inet/filter/limit-1232 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1232 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1528 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1233 - inet6/filter/INPUT -i eth0 -j limit-1233 - inet/filter/limit-1233 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1233 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1233 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1233 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1529 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1234 - inet6/filter/INPUT -i eth0 -j limit-1234 - inet/filter/limit-1234 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1234 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1234 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1234 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1530 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1235 - inet6/filter/INPUT -i eth0 -j limit-1235 - inet/filter/limit-1235 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1235 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1235 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1235 -m recent --name user:C --rdest --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1531 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1236 - inet6/filter/INPUT -i eth0 -j limit-1236 - inet/filter/limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1236 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1236 -j ACCEPT - inet6/filter/limit-1236 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1532 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1533 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1238 - inet6/filter/INPUT -i eth0 -j limit-1238 - inet/filter/limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1238 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1238 -m limit --limit 1/second -j LOG - inet6/filter/limit-1238 -m limit --limit 1/second -j LOG - inet/filter/limit-1238 -j ACCEPT - inet6/filter/limit-1238 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1534 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1239 - inet6/filter/INPUT -i eth0 -j limit-1239 - inet/filter/limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1239 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1239 -m limit --limit 1/second -j LOG - inet6/filter/limit-1239 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1535 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1240 - inet6/filter/INPUT -i eth0 -j limit-1240 - inet/filter/limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1240 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1240 -j ACCEPT - inet6/filter/limit-1240 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1536 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1537 {"flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1242 - inet6/filter/INPUT -i eth0 -j limit-1242 - inet/filter/limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 - inet6/filter/limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 - inet/filter/logdrop-403 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-403 -m limit --limit 1/second -j LOG - inet/filter/logdrop-403 -j DROP - inet6/filter/logdrop-403 -j DROP - inet/filter/limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1538 {"action":"pass","flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1243 - inet6/filter/INPUT -i eth0 -j limit-1243 - inet/filter/limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 - inet6/filter/limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 - inet/filter/logdrop-404 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-404 -m limit --limit 1/second -j LOG - inet/filter/logdrop-404 -j DROP - inet6/filter/logdrop-404 -j DROP - inet/filter/limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1539 {"flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1244 - inet6/filter/INPUT -i eth0 -j limit-1244 - inet/filter/limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 - inet6/filter/limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 - inet/filter/logdrop-405 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-405 -m limit --limit 1/second -j LOG - inet/filter/logdrop-405 -j DROP - inet6/filter/logdrop-405 -j DROP - inet/filter/limit-1244 -m limit --limit 1/second -j LOG - inet6/filter/limit-1244 -m limit --limit 1/second -j LOG - inet/filter/limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1540 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1245 - inet6/filter/INPUT -i eth0 -j limit-1245 - inet/filter/limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 - inet6/filter/limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 - inet/filter/logdrop-406 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-406 -m limit --limit 1/second -j LOG - inet/filter/logdrop-406 -j DROP - inet6/filter/logdrop-406 -j DROP - inet/filter/limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1541 {"flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1246 - inet6/filter/INPUT -i eth0 -j limit-1246 - inet/filter/limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 - inet6/filter/limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 - inet/filter/logdrop-407 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-407 -m limit --limit 1/second -j LOG - inet/filter/logdrop-407 -j DROP - inet6/filter/logdrop-407 -j DROP - inet/filter/limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1542 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1247 - inet6/filter/INPUT -i eth0 -j limit-1247 - inet/filter/limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 - inet6/filter/limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 - inet/filter/logdrop-408 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-408 -m limit --limit 1/second -j LOG - inet/filter/logdrop-408 -j DROP - inet6/filter/logdrop-408 -j DROP - inet/filter/limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1543 {"flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1248 - inet6/filter/INPUT -i eth0 -j limit-1248 - inet/filter/limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 - inet6/filter/limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 - inet/filter/logdrop-409 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-409 -m limit --limit 1/second -j LOG - inet/filter/logdrop-409 -j DROP - inet6/filter/logdrop-409 -j DROP - inet/filter/limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1544 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1249 - inet6/filter/INPUT -i eth0 -j limit-1249 - inet/filter/limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-410 - inet6/filter/limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-410 - inet/filter/logdrop-410 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-410 -m limit --limit 1/second -j LOG - inet/filter/logdrop-410 -j DROP - inet6/filter/logdrop-410 -j DROP - inet/filter/limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1545 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1250 - inet6/filter/INPUT -i eth0 -j limit-1250 - inet/filter/limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-411 - inet6/filter/limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-411 - inet/filter/logdrop-411 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-411 -m limit --limit 1/second -j LOG - inet/filter/logdrop-411 -j DROP - inet6/filter/logdrop-411 -j DROP - inet/filter/limit-1250 -m limit --limit 1/second -j LOG - inet6/filter/limit-1250 -m limit --limit 1/second -j LOG - inet/filter/limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1546 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1251 - inet6/filter/INPUT -i eth0 -j limit-1251 - inet/filter/limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-412 - inet6/filter/limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-412 - inet/filter/logdrop-412 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-412 -m limit --limit 1/second -j LOG - inet/filter/logdrop-412 -j DROP - inet6/filter/logdrop-412 -j DROP - inet/filter/limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1547 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1252 - inet6/filter/INPUT -i eth0 -j limit-1252 - inet/filter/limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-413 - inet6/filter/limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-413 - inet/filter/logdrop-413 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-413 -m limit --limit 1/second -j LOG - inet/filter/logdrop-413 -j DROP - inet6/filter/logdrop-413 -j DROP - inet/filter/limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1548 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1253 - inet6/filter/INPUT -i eth0 -j limit-1253 - inet/filter/limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-414 - inet6/filter/limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-414 - inet/filter/logdrop-414 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-414 -m limit --limit 1/second -j LOG - inet/filter/logdrop-414 -j DROP - inet6/filter/logdrop-414 -j DROP - inet/filter/limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1549 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1254 - inet6/filter/INPUT -i eth0 -j limit-1254 - inet/filter/limit-1254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 - inet6/filter/limit-1254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 - inet/filter/logdrop-415 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-415 -m limit --limit 1/second -j LOG - inet/filter/logdrop-415 -j DROP - inet6/filter/logdrop-415 -j DROP - inet/filter/limit-1254 -j ACCEPT - inet6/filter/limit-1254 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1550 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 - inet/filter/logdrop-416 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-416 -m limit --limit 1/second -j LOG - inet/filter/logdrop-416 -j DROP - inet6/filter/logdrop-416 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1551 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1256 - inet6/filter/INPUT -i eth0 -j limit-1256 - inet/filter/limit-1256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 - inet6/filter/limit-1256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 - inet/filter/logdrop-417 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-417 -m limit --limit 1/second -j LOG - inet/filter/logdrop-417 -j DROP - inet6/filter/logdrop-417 -j DROP - inet/filter/limit-1256 -m limit --limit 1/second -j LOG - inet6/filter/limit-1256 -m limit --limit 1/second -j LOG - inet/filter/limit-1256 -j ACCEPT - inet6/filter/limit-1256 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1552 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1257 - inet6/filter/INPUT -i eth0 -j limit-1257 - inet/filter/limit-1257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 - inet6/filter/limit-1257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 - inet/filter/logdrop-418 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-418 -m limit --limit 1/second -j LOG - inet/filter/logdrop-418 -j DROP - inet6/filter/logdrop-418 -j DROP - inet/filter/limit-1257 -m limit --limit 1/second -j LOG - inet6/filter/limit-1257 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1553 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1258 - inet6/filter/INPUT -i eth0 -j limit-1258 - inet/filter/limit-1258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 - inet6/filter/limit-1258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 - inet/filter/logdrop-419 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-419 -m limit --limit 1/second -j LOG - inet/filter/logdrop-419 -j DROP - inet6/filter/logdrop-419 -j DROP - inet/filter/limit-1258 -j ACCEPT - inet6/filter/limit-1258 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1554 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-420 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-420 - inet/filter/logdrop-420 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-420 -m limit --limit 1/second -j LOG - inet/filter/logdrop-420 -j DROP - inet6/filter/logdrop-420 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1555 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1260 - inet6/filter/INPUT -i eth0 -j limit-1260 - inet/filter/limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-421 - inet6/filter/limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-421 - inet/filter/logdrop-421 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-421 -m limit --limit 1/second -j LOG - inet/filter/logdrop-421 -j DROP - inet6/filter/logdrop-421 -j DROP - inet/filter/limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1556 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1261 - inet6/filter/INPUT -i eth0 -j limit-1261 - inet/filter/limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-422 - inet6/filter/limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-422 - inet/filter/logdrop-422 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-422 -m limit --limit 1/second -j LOG - inet/filter/logdrop-422 -j DROP - inet6/filter/logdrop-422 -j DROP - inet/filter/limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1557 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1262 - inet6/filter/INPUT -i eth0 -j limit-1262 - inet/filter/limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-423 - inet6/filter/limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-423 - inet/filter/logdrop-423 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-423 -m limit --limit 1/second -j LOG - inet/filter/logdrop-423 -j DROP - inet6/filter/logdrop-423 -j DROP - inet/filter/limit-1262 -m limit --limit 1/second -j LOG - inet6/filter/limit-1262 -m limit --limit 1/second -j LOG - inet/filter/limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1558 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1263 - inet6/filter/INPUT -i eth0 -j limit-1263 - inet/filter/limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-424 - inet6/filter/limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-424 - inet/filter/logdrop-424 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-424 -m limit --limit 1/second -j LOG - inet/filter/logdrop-424 -j DROP - inet6/filter/logdrop-424 -j DROP - inet/filter/limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1559 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1264 - inet6/filter/INPUT -i eth0 -j limit-1264 - inet/filter/limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-425 - inet6/filter/limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-425 - inet/filter/logdrop-425 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-425 -m limit --limit 1/second -j LOG - inet/filter/logdrop-425 -j DROP - inet6/filter/logdrop-425 -j DROP - inet/filter/limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1560 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1265 - inet6/filter/INPUT -i eth0 -j limit-1265 - inet/filter/limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-426 - inet6/filter/limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-426 - inet/filter/logdrop-426 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-426 -m limit --limit 1/second -j LOG - inet/filter/logdrop-426 -j DROP - inet6/filter/logdrop-426 -j DROP - inet/filter/limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1561 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1266 - inet6/filter/INPUT -i eth0 -j limit-1266 - inet/filter/limit-1266 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-427 - inet6/filter/limit-1266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-427 - inet/filter/logdrop-427 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-427 -m limit --limit 1/second -j LOG - inet/filter/logdrop-427 -j DROP - inet6/filter/logdrop-427 -j DROP - inet/filter/limit-1266 -j ACCEPT - inet6/filter/limit-1266 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1562 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-428 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-428 - inet/filter/logdrop-428 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-428 -m limit --limit 1/second -j LOG - inet/filter/logdrop-428 -j DROP - inet6/filter/logdrop-428 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1563 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1268 - inet6/filter/INPUT -i eth0 -j limit-1268 - inet/filter/limit-1268 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-429 - inet6/filter/limit-1268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-429 - inet/filter/logdrop-429 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-429 -m limit --limit 1/second -j LOG - inet/filter/logdrop-429 -j DROP - inet6/filter/logdrop-429 -j DROP - inet/filter/limit-1268 -m limit --limit 1/second -j LOG - inet6/filter/limit-1268 -m limit --limit 1/second -j LOG - inet/filter/limit-1268 -j ACCEPT - inet6/filter/limit-1268 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1564 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1269 - inet6/filter/INPUT -i eth0 -j limit-1269 - inet/filter/limit-1269 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 - inet6/filter/limit-1269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-430 - inet/filter/logdrop-430 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-430 -m limit --limit 1/second -j LOG - inet/filter/logdrop-430 -j DROP - inet6/filter/logdrop-430 -j DROP - inet/filter/limit-1269 -m limit --limit 1/second -j LOG - inet6/filter/limit-1269 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1565 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1270 - inet6/filter/INPUT -i eth0 -j limit-1270 - inet/filter/limit-1270 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 - inet6/filter/limit-1270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-431 - inet/filter/logdrop-431 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-431 -m limit --limit 1/second -j LOG - inet/filter/logdrop-431 -j DROP - inet6/filter/logdrop-431 -j DROP - inet/filter/limit-1270 -j ACCEPT - inet6/filter/limit-1270 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1566 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-432 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-432 - inet/filter/logdrop-432 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-432 -m limit --limit 1/second -j LOG - inet/filter/logdrop-432 -j DROP - inet6/filter/logdrop-432 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1567 {"flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1272 - inet6/filter/INPUT -i eth0 -j limit-1272 - inet/filter/limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-433 - inet6/filter/limit-1272 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-433 - inet/filter/logdrop-433 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-433 -m limit --limit 1/second -j LOG - inet/filter/logdrop-433 -j DROP - inet6/filter/logdrop-433 -j DROP - inet/filter/limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1272 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1568 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1273 - inet6/filter/INPUT -i eth0 -j limit-1273 - inet/filter/limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-434 - inet6/filter/limit-1273 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-434 - inet/filter/logdrop-434 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-434 -m limit --limit 1/second -j LOG - inet/filter/logdrop-434 -j DROP - inet6/filter/logdrop-434 -j DROP - inet/filter/limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1273 -m recent --name user:C --rsource --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1569 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1274 - inet6/filter/INPUT -i eth0 -j limit-1274 - inet/filter/limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-435 - inet6/filter/limit-1274 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-435 - inet/filter/logdrop-435 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-435 -m limit --limit 1/second -j LOG - inet/filter/logdrop-435 -j DROP - inet6/filter/logdrop-435 -j DROP - inet/filter/limit-1274 -m limit --limit 1/second -j LOG - inet6/filter/limit-1274 -m limit --limit 1/second -j LOG - inet/filter/limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1274 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1570 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1275 - inet6/filter/INPUT -i eth0 -j limit-1275 - inet/filter/limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-436 - inet6/filter/limit-1275 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-436 - inet/filter/logdrop-436 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-436 -m limit --limit 1/second -j LOG - inet/filter/logdrop-436 -j DROP - inet6/filter/logdrop-436 -j DROP - inet/filter/limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1275 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1571 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1276 - inet6/filter/INPUT -i eth0 -j limit-1276 - inet/filter/limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-437 - inet6/filter/limit-1276 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-437 - inet/filter/logdrop-437 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-437 -m limit --limit 1/second -j LOG - inet/filter/logdrop-437 -j DROP - inet6/filter/logdrop-437 -j DROP - inet/filter/limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1276 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1572 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1277 - inet6/filter/INPUT -i eth0 -j limit-1277 - inet/filter/limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-438 - inet6/filter/limit-1277 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-438 - inet/filter/logdrop-438 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-438 -m limit --limit 1/second -j LOG - inet/filter/logdrop-438 -j DROP - inet6/filter/logdrop-438 -j DROP - inet/filter/limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1277 -m recent --name user:C --rsource --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1573 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1278 - inet6/filter/INPUT -i eth0 -j limit-1278 - inet/filter/limit-1278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 - inet6/filter/limit-1278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 - inet/filter/logdrop-439 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-439 -m limit --limit 1/second -j LOG - inet/filter/logdrop-439 -j DROP - inet6/filter/logdrop-439 -j DROP - inet/filter/limit-1278 -j ACCEPT - inet6/filter/limit-1278 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1574 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-440 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-440 - inet/filter/logdrop-440 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-440 -m limit --limit 1/second -j LOG - inet/filter/logdrop-440 -j DROP - inet6/filter/logdrop-440 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1575 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1280 - inet6/filter/INPUT -i eth0 -j limit-1280 - inet/filter/limit-1280 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-441 - inet6/filter/limit-1280 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-441 - inet/filter/logdrop-441 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-441 -m limit --limit 1/second -j LOG - inet/filter/logdrop-441 -j DROP - inet6/filter/logdrop-441 -j DROP - inet/filter/limit-1280 -m limit --limit 1/second -j LOG - inet6/filter/limit-1280 -m limit --limit 1/second -j LOG - inet/filter/limit-1280 -j ACCEPT - inet6/filter/limit-1280 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1576 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1281 - inet6/filter/INPUT -i eth0 -j limit-1281 - inet/filter/limit-1281 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-442 - inet6/filter/limit-1281 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-442 - inet/filter/logdrop-442 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-442 -m limit --limit 1/second -j LOG - inet/filter/logdrop-442 -j DROP - inet6/filter/logdrop-442 -j DROP - inet/filter/limit-1281 -m limit --limit 1/second -j LOG - inet6/filter/limit-1281 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1577 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1282 - inet6/filter/INPUT -i eth0 -j limit-1282 - inet/filter/limit-1282 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-443 - inet6/filter/limit-1282 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-443 - inet/filter/logdrop-443 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-443 -m limit --limit 1/second -j LOG - inet/filter/logdrop-443 -j DROP - inet6/filter/logdrop-443 -j DROP - inet/filter/limit-1282 -j ACCEPT - inet6/filter/limit-1282 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1578 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-444 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-444 - inet/filter/logdrop-444 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-444 -m limit --limit 1/second -j LOG - inet/filter/logdrop-444 -j DROP - inet6/filter/logdrop-444 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1579 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1284 - inet6/filter/INPUT -i eth0 -j limit-1284 - inet/filter/limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 - inet6/filter/limit-1284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 - inet/filter/logdrop-445 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-445 -m limit --limit 1/second -j LOG - inet/filter/logdrop-445 -j DROP - inet6/filter/logdrop-445 -j DROP - inet/filter/limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1580 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1285 - inet6/filter/INPUT -i eth0 -j limit-1285 - inet/filter/limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 - inet6/filter/limit-1285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 - inet/filter/logdrop-446 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-446 -m limit --limit 1/second -j LOG - inet/filter/logdrop-446 -j DROP - inet6/filter/logdrop-446 -j DROP - inet/filter/limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1285 -m recent --name user:C --rdest --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1581 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1286 - inet6/filter/INPUT -i eth0 -j limit-1286 - inet/filter/limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 - inet6/filter/limit-1286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 - inet/filter/logdrop-447 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-447 -m limit --limit 1/second -j LOG - inet/filter/logdrop-447 -j DROP - inet6/filter/logdrop-447 -j DROP - inet/filter/limit-1286 -m limit --limit 1/second -j LOG - inet6/filter/limit-1286 -m limit --limit 1/second -j LOG - inet/filter/limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1582 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1287 - inet6/filter/INPUT -i eth0 -j limit-1287 - inet/filter/limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 - inet6/filter/limit-1287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 - inet/filter/logdrop-448 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-448 -m limit --limit 1/second -j LOG - inet/filter/logdrop-448 -j DROP - inet6/filter/logdrop-448 -j DROP - inet/filter/limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1287 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1583 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1288 - inet6/filter/INPUT -i eth0 -j limit-1288 - inet/filter/limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 - inet6/filter/limit-1288 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 - inet/filter/logdrop-449 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-449 -m limit --limit 1/second -j LOG - inet/filter/logdrop-449 -j DROP - inet6/filter/logdrop-449 -j DROP - inet/filter/limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1288 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1584 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1289 - inet6/filter/INPUT -i eth0 -j limit-1289 - inet/filter/limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-450 - inet6/filter/limit-1289 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-450 - inet/filter/logdrop-450 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-450 -m limit --limit 1/second -j LOG - inet/filter/logdrop-450 -j DROP - inet6/filter/logdrop-450 -j DROP - inet/filter/limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1289 -m recent --name user:C --rdest --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1585 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1290 - inet6/filter/INPUT -i eth0 -j limit-1290 - inet/filter/limit-1290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 - inet6/filter/limit-1290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 - inet/filter/logdrop-451 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-451 -m limit --limit 1/second -j LOG - inet/filter/logdrop-451 -j DROP - inet6/filter/logdrop-451 -j DROP - inet/filter/limit-1290 -j ACCEPT - inet6/filter/limit-1290 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1586 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 - inet/filter/logdrop-452 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-452 -m limit --limit 1/second -j LOG - inet/filter/logdrop-452 -j DROP - inet6/filter/logdrop-452 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1587 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1292 - inet6/filter/INPUT -i eth0 -j limit-1292 - inet/filter/limit-1292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 - inet6/filter/limit-1292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 - inet/filter/logdrop-453 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-453 -m limit --limit 1/second -j LOG - inet/filter/logdrop-453 -j DROP - inet6/filter/logdrop-453 -j DROP - inet/filter/limit-1292 -m limit --limit 1/second -j LOG - inet6/filter/limit-1292 -m limit --limit 1/second -j LOG - inet/filter/limit-1292 -j ACCEPT - inet6/filter/limit-1292 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1588 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1293 - inet6/filter/INPUT -i eth0 -j limit-1293 - inet/filter/limit-1293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 - inet6/filter/limit-1293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 - inet/filter/logdrop-454 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-454 -m limit --limit 1/second -j LOG - inet/filter/logdrop-454 -j DROP - inet6/filter/logdrop-454 -j DROP - inet/filter/limit-1293 -m limit --limit 1/second -j LOG - inet6/filter/limit-1293 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1589 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1294 - inet6/filter/INPUT -i eth0 -j limit-1294 - inet/filter/limit-1294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 - inet6/filter/limit-1294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 - inet/filter/logdrop-455 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-455 -m limit --limit 1/second -j LOG - inet/filter/logdrop-455 -j DROP - inet6/filter/logdrop-455 -j DROP - inet/filter/limit-1294 -j ACCEPT - inet6/filter/limit-1294 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1590 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-456 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-456 - inet/filter/logdrop-456 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-456 -m limit --limit 1/second -j LOG - inet/filter/logdrop-456 -j DROP - inet6/filter/logdrop-456 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1591 {"flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1296 - inet6/filter/INPUT -i eth0 -j limit-1296 - inet/filter/limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1592 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1297 - inet6/filter/INPUT -i eth0 -j limit-1297 - inet/filter/limit-1297 -m recent --name limit-1297 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1297 -m recent --name limit-1297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1297 -m recent --name limit-1297 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1297 -m recent --name limit-1297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1593 {"flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1298 - inet6/filter/INPUT -i eth0 -j limit-1298 - inet/filter/limit-1298 -m recent --name limit-1298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1298 -m recent --name limit-1298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1298 -m limit --limit 1/second -j LOG - inet6/filter/limit-1298 -m limit --limit 1/second -j LOG - inet/filter/limit-1298 -m recent --name limit-1298 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1298 -m recent --name limit-1298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1594 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1299 - inet6/filter/INPUT -i eth0 -j limit-1299 - inet/filter/limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1595 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1300 - inet6/filter/INPUT -i eth0 -j limit-1300 - inet/filter/limit-1300 -m recent --name limit-1300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1300 -m recent --name limit-1300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1300 -m recent --name limit-1300 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1300 -m recent --name limit-1300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1596 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1301 - inet6/filter/INPUT -i eth0 -j limit-1301 - inet/filter/limit-1301 -m recent --name limit-1301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1301 -m recent --name limit-1301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1301 -m recent --name limit-1301 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1301 -m recent --name limit-1301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1597 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1302 - inet6/filter/INPUT -i eth0 -j limit-1302 - inet/filter/limit-1302 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1302 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1598 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1303 - inet6/filter/INPUT -i eth0 -j limit-1303 - inet/filter/limit-1303 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1303 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1599 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1304 - inet6/filter/INPUT -i eth0 -j limit-1304 - inet/filter/limit-1304 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1304 -m limit --limit 1/second -j LOG - inet6/filter/limit-1304 -m limit --limit 1/second -j LOG - inet/filter/limit-1304 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1600 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1305 - inet6/filter/INPUT -i eth0 -j limit-1305 - inet/filter/limit-1305 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1305 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1601 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1306 - inet6/filter/INPUT -i eth0 -j limit-1306 - inet/filter/limit-1306 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1306 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1602 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1307 - inet6/filter/INPUT -i eth0 -j limit-1307 - inet/filter/limit-1307 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1307 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1603 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1308 - inet6/filter/INPUT -i eth0 -j limit-1308 - inet/filter/limit-1308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1308 -j ACCEPT - inet6/filter/limit-1308 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1604 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1605 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1310 - inet6/filter/INPUT -i eth0 -j limit-1310 - inet/filter/limit-1310 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1310 -m limit --limit 1/second -j LOG - inet6/filter/limit-1310 -m limit --limit 1/second -j LOG - inet/filter/limit-1310 -j ACCEPT - inet6/filter/limit-1310 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1606 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1311 - inet6/filter/INPUT -i eth0 -j limit-1311 - inet/filter/limit-1311 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1311 -m limit --limit 1/second -j LOG - inet6/filter/limit-1311 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1607 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1312 - inet6/filter/INPUT -i eth0 -j limit-1312 - inet/filter/limit-1312 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1312 -j ACCEPT - inet6/filter/limit-1312 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1608 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1609 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1314 - inet6/filter/INPUT -i eth0 -j limit-1314 - inet/filter/limit-1314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1610 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1315 - inet6/filter/INPUT -i eth0 -j limit-1315 - inet/filter/limit-1315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1315 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1611 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1316 - inet6/filter/INPUT -i eth0 -j limit-1316 - inet/filter/limit-1316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1316 -m limit --limit 1/second -j LOG - inet6/filter/limit-1316 -m limit --limit 1/second -j LOG - inet/filter/limit-1316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1612 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1317 - inet6/filter/INPUT -i eth0 -j limit-1317 - inet/filter/limit-1317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1317 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1613 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1318 - inet6/filter/INPUT -i eth0 -j limit-1318 - inet/filter/limit-1318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1614 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1319 - inet6/filter/INPUT -i eth0 -j limit-1319 - inet/filter/limit-1319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1319 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1615 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1320 - inet6/filter/INPUT -i eth0 -j limit-1320 - inet/filter/limit-1320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1320 -j ACCEPT - inet6/filter/limit-1320 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1616 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1617 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1322 - inet6/filter/INPUT -i eth0 -j limit-1322 - inet/filter/limit-1322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1322 -m limit --limit 1/second -j LOG - inet6/filter/limit-1322 -m limit --limit 1/second -j LOG - inet/filter/limit-1322 -j ACCEPT - inet6/filter/limit-1322 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1618 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1323 - inet6/filter/INPUT -i eth0 -j limit-1323 - inet/filter/limit-1323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1323 -m limit --limit 1/second -j LOG - inet6/filter/limit-1323 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1619 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1324 - inet6/filter/INPUT -i eth0 -j limit-1324 - inet/filter/limit-1324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1324 -j ACCEPT - inet6/filter/limit-1324 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1620 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1621 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1326 - inet6/filter/INPUT -i eth0 -j limit-1326 - inet/filter/limit-1326 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1326 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1326 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1326 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1622 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1327 - inet6/filter/INPUT -i eth0 -j limit-1327 - inet/filter/limit-1327 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1327 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1327 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1327 -m recent --name user:C --rsource --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1623 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1328 - inet6/filter/INPUT -i eth0 -j limit-1328 - inet/filter/limit-1328 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1328 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1328 -m limit --limit 1/second -j LOG - inet6/filter/limit-1328 -m limit --limit 1/second -j LOG - inet/filter/limit-1328 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1328 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1624 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1329 - inet6/filter/INPUT -i eth0 -j limit-1329 - inet/filter/limit-1329 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1329 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1329 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1329 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1625 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1330 - inet6/filter/INPUT -i eth0 -j limit-1330 - inet/filter/limit-1330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1626 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1331 - inet6/filter/INPUT -i eth0 -j limit-1331 - inet/filter/limit-1331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1331 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1331 -m recent --name user:C --rsource --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1627 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1332 - inet6/filter/INPUT -i eth0 -j limit-1332 - inet/filter/limit-1332 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1332 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1332 -j ACCEPT - inet6/filter/limit-1332 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1628 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1629 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1334 - inet6/filter/INPUT -i eth0 -j limit-1334 - inet/filter/limit-1334 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1334 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1334 -m limit --limit 1/second -j LOG - inet6/filter/limit-1334 -m limit --limit 1/second -j LOG - inet/filter/limit-1334 -j ACCEPT - inet6/filter/limit-1334 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1630 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1335 - inet6/filter/INPUT -i eth0 -j limit-1335 - inet/filter/limit-1335 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1335 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1335 -m limit --limit 1/second -j LOG - inet6/filter/limit-1335 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1631 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1336 - inet6/filter/INPUT -i eth0 -j limit-1336 - inet/filter/limit-1336 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1336 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1336 -j ACCEPT - inet6/filter/limit-1336 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1632 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1633 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1338 - inet6/filter/INPUT -i eth0 -j limit-1338 - inet/filter/limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1338 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1338 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1634 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1339 - inet6/filter/INPUT -i eth0 -j limit-1339 - inet/filter/limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1339 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1339 -m recent --name user:C --rdest --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1635 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1340 - inet6/filter/INPUT -i eth0 -j limit-1340 - inet/filter/limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1340 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1340 -m limit --limit 1/second -j LOG - inet6/filter/limit-1340 -m limit --limit 1/second -j LOG - inet/filter/limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1340 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1636 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1341 - inet6/filter/INPUT -i eth0 -j limit-1341 - inet/filter/limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1341 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1341 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1637 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1342 - inet6/filter/INPUT -i eth0 -j limit-1342 - inet/filter/limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1342 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1342 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1638 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1343 - inet6/filter/INPUT -i eth0 -j limit-1343 - inet/filter/limit-1343 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1343 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1343 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1343 -m recent --name user:C --rdest --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1639 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1344 - inet6/filter/INPUT -i eth0 -j limit-1344 - inet/filter/limit-1344 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1344 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1344 -j ACCEPT - inet6/filter/limit-1344 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1640 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1641 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1346 - inet6/filter/INPUT -i eth0 -j limit-1346 - inet/filter/limit-1346 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1346 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1346 -m limit --limit 1/second -j LOG - inet6/filter/limit-1346 -m limit --limit 1/second -j LOG - inet/filter/limit-1346 -j ACCEPT - inet6/filter/limit-1346 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1642 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1347 - inet6/filter/INPUT -i eth0 -j limit-1347 - inet/filter/limit-1347 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1347 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1347 -m limit --limit 1/second -j LOG - inet6/filter/limit-1347 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1643 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1348 - inet6/filter/INPUT -i eth0 -j limit-1348 - inet/filter/limit-1348 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1348 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1348 -j ACCEPT - inet6/filter/limit-1348 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1644 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1645 {"flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1350 - inet6/filter/INPUT -i eth0 -j limit-1350 - inet/filter/limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1646 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1351 - inet6/filter/INPUT -i eth0 -j limit-1351 - inet/filter/limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1647 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1352 - inet6/filter/INPUT -i eth0 -j limit-1352 - inet/filter/limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1352 -m limit --limit 1/second -j LOG - inet6/filter/limit-1352 -m limit --limit 1/second -j LOG - inet/filter/limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1648 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1353 - inet6/filter/INPUT -i eth0 -j limit-1353 - inet/filter/limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1649 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1354 - inet6/filter/INPUT -i eth0 -j limit-1354 - inet/filter/limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1650 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1355 - inet6/filter/INPUT -i eth0 -j limit-1355 - inet/filter/limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1651 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1356 - inet6/filter/INPUT -i eth0 -j limit-1356 - inet/filter/limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1652 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1357 - inet6/filter/INPUT -i eth0 -j limit-1357 - inet/filter/limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1653 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1358 - inet6/filter/INPUT -i eth0 -j limit-1358 - inet/filter/limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1358 -m limit --limit 1/second -j LOG - inet6/filter/limit-1358 -m limit --limit 1/second -j LOG - inet/filter/limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1654 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1359 - inet6/filter/INPUT -i eth0 -j limit-1359 - inet/filter/limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1655 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1360 - inet6/filter/INPUT -i eth0 -j limit-1360 - inet/filter/limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1656 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1361 - inet6/filter/INPUT -i eth0 -j limit-1361 - inet/filter/limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1657 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1362 - inet6/filter/INPUT -i eth0 -j limit-1362 - inet/filter/limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1362 -j ACCEPT - inet6/filter/limit-1362 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1658 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1659 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1364 - inet6/filter/INPUT -i eth0 -j limit-1364 - inet/filter/limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1364 -m limit --limit 1/second -j LOG - inet6/filter/limit-1364 -m limit --limit 1/second -j LOG - inet/filter/limit-1364 -j ACCEPT - inet6/filter/limit-1364 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1660 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1365 - inet6/filter/INPUT -i eth0 -j limit-1365 - inet/filter/limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1365 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1365 -m limit --limit 1/second -j LOG - inet6/filter/limit-1365 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1661 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1366 - inet6/filter/INPUT -i eth0 -j limit-1366 - inet/filter/limit-1366 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1366 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1366 -j ACCEPT - inet6/filter/limit-1366 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1662 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1663 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1368 - inet6/filter/INPUT -i eth0 -j limit-1368 - inet/filter/limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1664 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1369 - inet6/filter/INPUT -i eth0 -j limit-1369 - inet/filter/limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1665 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1370 - inet6/filter/INPUT -i eth0 -j limit-1370 - inet/filter/limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1370 -m limit --limit 1/second -j LOG - inet6/filter/limit-1370 -m limit --limit 1/second -j LOG - inet/filter/limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1666 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1371 - inet6/filter/INPUT -i eth0 -j limit-1371 - inet/filter/limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1667 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1372 - inet6/filter/INPUT -i eth0 -j limit-1372 - inet/filter/limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1668 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1373 - inet6/filter/INPUT -i eth0 -j limit-1373 - inet/filter/limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1669 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1374 - inet6/filter/INPUT -i eth0 -j limit-1374 - inet/filter/limit-1374 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1374 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1374 -j ACCEPT - inet6/filter/limit-1374 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1670 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1671 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1376 - inet6/filter/INPUT -i eth0 -j limit-1376 - inet/filter/limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1376 -m limit --limit 1/second -j LOG - inet6/filter/limit-1376 -m limit --limit 1/second -j LOG - inet/filter/limit-1376 -j ACCEPT - inet6/filter/limit-1376 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1672 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1377 - inet6/filter/INPUT -i eth0 -j limit-1377 - inet/filter/limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1377 -m limit --limit 1/second -j LOG - inet6/filter/limit-1377 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1673 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1378 - inet6/filter/INPUT -i eth0 -j limit-1378 - inet/filter/limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1378 -j ACCEPT - inet6/filter/limit-1378 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1674 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1675 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1380 - inet6/filter/INPUT -i eth0 -j limit-1380 - inet/filter/limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1380 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1380 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1676 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1381 - inet6/filter/INPUT -i eth0 -j limit-1381 - inet/filter/limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1381 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1381 -m recent --name user:C --rsource --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1677 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1382 - inet6/filter/INPUT -i eth0 -j limit-1382 - inet/filter/limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1382 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1382 -m limit --limit 1/second -j LOG - inet6/filter/limit-1382 -m limit --limit 1/second -j LOG - inet/filter/limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1382 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1678 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1383 - inet6/filter/INPUT -i eth0 -j limit-1383 - inet/filter/limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1383 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1383 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1679 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1384 - inet6/filter/INPUT -i eth0 -j limit-1384 - inet/filter/limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1384 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1384 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1680 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1385 - inet6/filter/INPUT -i eth0 -j limit-1385 - inet/filter/limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1385 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-1385 -m recent --name user:C --rsource --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1681 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1386 - inet6/filter/INPUT -i eth0 -j limit-1386 - inet/filter/limit-1386 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1386 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1386 -j ACCEPT - inet6/filter/limit-1386 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1682 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1683 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1388 - inet6/filter/INPUT -i eth0 -j limit-1388 - inet/filter/limit-1388 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1388 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1388 -m limit --limit 1/second -j LOG - inet6/filter/limit-1388 -m limit --limit 1/second -j LOG - inet/filter/limit-1388 -j ACCEPT - inet6/filter/limit-1388 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1684 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1389 - inet6/filter/INPUT -i eth0 -j limit-1389 - inet/filter/limit-1389 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1389 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1389 -m limit --limit 1/second -j LOG - inet6/filter/limit-1389 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1685 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1390 - inet6/filter/INPUT -i eth0 -j limit-1390 - inet/filter/limit-1390 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1390 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1390 -j ACCEPT - inet6/filter/limit-1390 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1686 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1687 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1392 - inet6/filter/INPUT -i eth0 -j limit-1392 - inet/filter/limit-1392 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1392 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1392 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1392 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1688 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1393 - inet6/filter/INPUT -i eth0 -j limit-1393 - inet/filter/limit-1393 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1393 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1393 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1393 -m recent --name user:C --rdest --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1689 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1394 - inet6/filter/INPUT -i eth0 -j limit-1394 - inet/filter/limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1394 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1394 -m limit --limit 1/second -j LOG - inet6/filter/limit-1394 -m limit --limit 1/second -j LOG - inet/filter/limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1394 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1690 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1395 - inet6/filter/INPUT -i eth0 -j limit-1395 - inet/filter/limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1395 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-1395 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1691 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1396 - inet6/filter/INPUT -i eth0 -j limit-1396 - inet/filter/limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1396 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-1396 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1692 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1397 - inet6/filter/INPUT -i eth0 -j limit-1397 - inet/filter/limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1397 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-1397 -m recent --name user:C --rdest --mask fe00:: --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1693 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1398 - inet6/filter/INPUT -i eth0 -j limit-1398 - inet/filter/limit-1398 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1398 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1398 -j ACCEPT - inet6/filter/limit-1398 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1694 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1695 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1400 - inet6/filter/INPUT -i eth0 -j limit-1400 - inet/filter/limit-1400 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1400 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1400 -m limit --limit 1/second -j LOG - inet6/filter/limit-1400 -m limit --limit 1/second -j LOG - inet/filter/limit-1400 -j ACCEPT - inet6/filter/limit-1400 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1696 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1401 - inet6/filter/INPUT -i eth0 -j limit-1401 - inet/filter/limit-1401 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1401 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1401 -m limit --limit 1/second -j LOG - inet6/filter/limit-1401 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1697 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1402 - inet6/filter/INPUT -i eth0 -j limit-1402 - inet/filter/limit-1402 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1402 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1402 -j ACCEPT - inet6/filter/limit-1402 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1698 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1699 {"flow-limit":150,"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1404 - inet6/filter/INPUT -i eth0 -j limit-1404 - inet/filter/limit-1404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1404 -j ACCEPT - inet6/filter/limit-1404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1404 -j ACCEPT - inet/filter/limit-1404 -m limit --limit 1/second -j LOG - inet6/filter/limit-1404 -m limit --limit 1/second -j LOG - inet/filter/limit-1404 -j DROP - inet6/filter/limit-1404 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1700 {"action":"pass","flow-limit":150,"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1405 - inet6/filter/INPUT -i eth0 -j limit-1405 - inet/filter/limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1405 -j RETURN - inet6/filter/limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1405 -j RETURN - inet/filter/limit-1405 -m limit --limit 1/second -j LOG - inet6/filter/limit-1405 -m limit --limit 1/second -j LOG - inet/filter/limit-1405 -j DROP - inet6/filter/limit-1405 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1701 {"flow-limit":150,"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1406 - inet6/filter/INPUT -i eth0 -j limit-1406 - inet/filter/limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1406 -j logaccept-77 - inet6/filter/limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1406 -j logaccept-77 - inet/filter/logaccept-77 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-77 -m limit --limit 1/second -j LOG - inet/filter/logaccept-77 -j ACCEPT - inet6/filter/logaccept-77 -j ACCEPT - inet/filter/limit-1406 -m limit --limit 1/second -j LOG - inet6/filter/limit-1406 -m limit --limit 1/second -j LOG - inet/filter/limit-1406 -j DROP - inet6/filter/limit-1406 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1702 {"flow-limit":150,"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1407 - inet6/filter/INPUT -i eth0 -j limit-1407 - inet/filter/limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1407 -j ACCEPT - inet6/filter/limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1407 -j ACCEPT - inet/filter/limit-1407 -m limit --limit 1/second -j LOG - inet6/filter/limit-1407 -m limit --limit 1/second -j LOG - inet/filter/limit-1407 -j DROP - inet6/filter/limit-1407 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1703 {"flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1408 - inet6/filter/INPUT -i eth0 -j limit-1408 - inet/filter/limit-1408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1408 -j ACCEPT - inet6/filter/limit-1408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1408 -j ACCEPT - inet/filter/limit-1408 -m limit --limit 1/second -j LOG - inet6/filter/limit-1408 -m limit --limit 1/second -j LOG - inet/filter/limit-1408 -j DROP - inet6/filter/limit-1408 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1704 {"action":"pass","flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1409 - inet6/filter/INPUT -i eth0 -j limit-1409 - inet/filter/limit-1409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1409 -j RETURN - inet6/filter/limit-1409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1409 -j RETURN - inet/filter/limit-1409 -m limit --limit 1/second -j LOG - inet6/filter/limit-1409 -m limit --limit 1/second -j LOG - inet/filter/limit-1409 -j DROP - inet6/filter/limit-1409 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1705 {"flow-limit":{"count":150},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1410 - inet6/filter/INPUT -i eth0 -j limit-1410 - inet/filter/limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1410 -j logaccept-78 - inet6/filter/limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1410 -j logaccept-78 - inet/filter/logaccept-78 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-78 -m limit --limit 1/second -j LOG - inet/filter/logaccept-78 -j ACCEPT - inet6/filter/logaccept-78 -j ACCEPT - inet/filter/limit-1410 -m limit --limit 1/second -j LOG - inet6/filter/limit-1410 -m limit --limit 1/second -j LOG - inet/filter/limit-1410 -j DROP - inet6/filter/limit-1410 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1706 {"flow-limit":{"count":150},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1411 - inet6/filter/INPUT -i eth0 -j limit-1411 - inet/filter/limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1411 -j ACCEPT - inet6/filter/limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1411 -j ACCEPT - inet/filter/limit-1411 -m limit --limit 1/second -j LOG - inet6/filter/limit-1411 -m limit --limit 1/second -j LOG - inet/filter/limit-1411 -j DROP - inet6/filter/limit-1411 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1707 {"flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1412 - inet6/filter/INPUT -i eth0 -j limit-1412 - inet/filter/limit-1412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1412 -j ACCEPT - inet6/filter/limit-1412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1412 -j ACCEPT - inet/filter/limit-1412 -j DROP - inet6/filter/limit-1412 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1708 {"action":"pass","flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1413 - inet6/filter/INPUT -i eth0 -j limit-1413 - inet/filter/limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1413 -j RETURN - inet6/filter/limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1413 -j RETURN - inet/filter/limit-1413 -j DROP - inet6/filter/limit-1413 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1709 {"flow-limit":{"count":150,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1414 - inet6/filter/INPUT -i eth0 -j limit-1414 - inet/filter/limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1414 -j logaccept-79 - inet6/filter/limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1414 -j logaccept-79 - inet/filter/logaccept-79 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-79 -m limit --limit 1/second -j LOG - inet/filter/logaccept-79 -j ACCEPT - inet6/filter/logaccept-79 -j ACCEPT - inet/filter/limit-1414 -j DROP - inet6/filter/limit-1414 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1710 {"flow-limit":{"count":150,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1415 - inet6/filter/INPUT -i eth0 -j limit-1415 - inet/filter/limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1415 -j ACCEPT - inet6/filter/limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1415 -j ACCEPT - inet/filter/limit-1415 -j DROP - inet6/filter/limit-1415 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1711 {"flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1416 - inet6/filter/INPUT -i eth0 -j limit-1416 - inet/filter/limit-1416 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1416 -j ACCEPT - inet6/filter/limit-1416 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1416 -j ACCEPT - inet/filter/limit-1416 -j DROP - inet6/filter/limit-1416 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1712 {"action":"pass","flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1417 - inet6/filter/INPUT -i eth0 -j limit-1417 - inet/filter/limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1417 -j RETURN - inet6/filter/limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1417 -j RETURN - inet/filter/limit-1417 -j DROP - inet6/filter/limit-1417 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1713 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1418 - inet6/filter/INPUT -i eth0 -j limit-1418 - inet/filter/limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1418 -j logaccept-80 - inet6/filter/limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1418 -j logaccept-80 - inet/filter/logaccept-80 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-80 -m limit --limit 1/second -j LOG - inet/filter/logaccept-80 -j ACCEPT - inet6/filter/logaccept-80 -j ACCEPT - inet/filter/limit-1418 -j DROP - inet6/filter/limit-1418 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1714 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1419 - inet6/filter/INPUT -i eth0 -j limit-1419 - inet/filter/limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1419 -j ACCEPT - inet6/filter/limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1419 -j ACCEPT - inet/filter/limit-1419 -j DROP - inet6/filter/limit-1419 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1715 {"flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1420 - inet6/filter/INPUT -i eth0 -j limit-1420 - inet/filter/limit-1420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1420 -j ACCEPT - inet6/filter/limit-1420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1420 -j ACCEPT - inet/filter/limit-1420 -m limit --limit 1/second -j LOG - inet6/filter/limit-1420 -m limit --limit 1/second -j LOG - inet/filter/limit-1420 -j DROP - inet6/filter/limit-1420 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1716 {"action":"pass","flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1421 - inet6/filter/INPUT -i eth0 -j limit-1421 - inet/filter/limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1421 -j RETURN - inet6/filter/limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1421 -j RETURN - inet/filter/limit-1421 -m limit --limit 1/second -j LOG - inet6/filter/limit-1421 -m limit --limit 1/second -j LOG - inet/filter/limit-1421 -j DROP - inet6/filter/limit-1421 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1717 {"flow-limit":{"count":150,"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1422 - inet6/filter/INPUT -i eth0 -j limit-1422 - inet/filter/limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1422 -j logaccept-81 - inet6/filter/limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1422 -j logaccept-81 - inet/filter/logaccept-81 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-81 -m limit --limit 1/second -j LOG - inet/filter/logaccept-81 -j ACCEPT - inet6/filter/logaccept-81 -j ACCEPT - inet/filter/limit-1422 -m limit --limit 1/second -j LOG - inet6/filter/limit-1422 -m limit --limit 1/second -j LOG - inet/filter/limit-1422 -j DROP - inet6/filter/limit-1422 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1718 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1423 - inet6/filter/INPUT -i eth0 -j limit-1423 - inet/filter/limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1423 -j ACCEPT - inet6/filter/limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1423 -j ACCEPT - inet/filter/limit-1423 -m limit --limit 1/second -j LOG - inet6/filter/limit-1423 -m limit --limit 1/second -j LOG - inet/filter/limit-1423 -j DROP - inet6/filter/limit-1423 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1719 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1424 - inet6/filter/INPUT -i eth0 -j limit-1424 - inet/filter/limit-1424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1424 -j ACCEPT - inet6/filter/limit-1424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1424 -j ACCEPT - inet/filter/limit-1424 -j DROP - inet6/filter/limit-1424 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1720 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1425 - inet6/filter/INPUT -i eth0 -j limit-1425 - inet/filter/limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1425 -j RETURN - inet6/filter/limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1425 -j RETURN - inet/filter/limit-1425 -j DROP - inet6/filter/limit-1425 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1721 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1426 - inet6/filter/INPUT -i eth0 -j limit-1426 - inet/filter/limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1426 -j logaccept-82 - inet6/filter/limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1426 -j logaccept-82 - inet/filter/logaccept-82 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-82 -m limit --limit 1/second -j LOG - inet/filter/logaccept-82 -j ACCEPT - inet6/filter/logaccept-82 -j ACCEPT - inet/filter/limit-1426 -j DROP - inet6/filter/limit-1426 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1722 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1427 - inet6/filter/INPUT -i eth0 -j limit-1427 - inet/filter/limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1427 -j ACCEPT - inet6/filter/limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1427 -j ACCEPT - inet/filter/limit-1427 -j DROP - inet6/filter/limit-1427 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1723 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1428 - inet6/filter/INPUT -i eth0 -j limit-1428 - inet/filter/limit-1428 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1428 -j ACCEPT - inet6/filter/limit-1428 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1428 -j ACCEPT - inet/filter/limit-1428 -j DROP - inet6/filter/limit-1428 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1724 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1429 - inet6/filter/INPUT -i eth0 -j limit-1429 - inet/filter/limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1429 -j RETURN - inet6/filter/limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1429 -j RETURN - inet/filter/limit-1429 -j DROP - inet6/filter/limit-1429 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 1725 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1430 - inet6/filter/INPUT -i eth0 -j limit-1430 - inet/filter/limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1430 -j logaccept-83 - inet6/filter/limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1430 -j logaccept-83 - inet/filter/logaccept-83 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-83 -m limit --limit 1/second -j LOG - inet/filter/logaccept-83 -j ACCEPT - inet6/filter/logaccept-83 -j ACCEPT - inet/filter/limit-1430 -j DROP - inet6/filter/limit-1430 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1726 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-1431 - inet6/filter/INPUT -i eth0 -j limit-1431 - inet/filter/limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1431 -j ACCEPT - inet6/filter/limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1431 -j ACCEPT - inet/filter/limit-1431 -j DROP - inet6/filter/limit-1431 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/OUTPUT -o eth0 -j ACCEPT - -Filter 1727 {"update-limit":"A"} -(filter-limit) - inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1728 {"update-limit":"B"} -(filter-limit) - inet/filter/FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set - inet/filter/INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set - inet6/filter/OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1729 {"update-limit":"C"} -(filter-limit) - inet/filter/FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/INPUT -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/OUTPUT -m recent --name user:C --rsource --mask fe00:: --set - -Filter 1730 {"update-limit":"D"} -(filter-limit) - inet/filter/FORWARD -m recent --name user:D --rsource --mask 255.255.252.0 --set - inet/filter/INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set - inet6/filter/FORWARD -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set - inet6/filter/INPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set - inet/filter/OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set - inet6/filter/OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set - -Filter 1731 {"update-limit":{"addr":"src","measure":"conn","name":"A"}} -(filter-limit) - inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1732 {"update-limit":{"addr":"dest","measure":"conn","name":"A"}} -(filter-limit) - inet/filter/FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1733 {"update-limit":{"addr":"src","measure":"flow","name":"A"}} -(filter-limit) - inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1734 {"update-limit":{"addr":"dest","measure":"flow","name":"A"}} -(filter-limit) - inet/filter/FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1735 {} -(log) - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1736 {"action":"drop"} -(log) - inet/filter/FORWARD -j logdrop-457 - inet6/filter/FORWARD -j logdrop-457 - inet/filter/INPUT -j logdrop-457 - inet6/filter/INPUT -j logdrop-457 - inet/filter/OUTPUT -j logdrop-457 - inet6/filter/OUTPUT -j logdrop-457 - inet/filter/logdrop-457 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-457 -m limit --limit 1/second -j LOG - inet/filter/logdrop-457 -j DROP - inet6/filter/logdrop-457 -j DROP - -Filter 1737 {"action":"pass"} -(log) - inet/filter/FORWARD - inet6/filter/FORWARD - inet/filter/INPUT - inet6/filter/INPUT - inet/filter/OUTPUT - inet6/filter/OUTPUT - -Filter 1738 {"log":false} -(log) - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1739 {"action":"drop","log":false} -(log) - inet/filter/FORWARD -j DROP - inet6/filter/FORWARD -j DROP - inet/filter/INPUT -j DROP - inet6/filter/INPUT -j DROP - inet/filter/OUTPUT -j DROP - inet6/filter/OUTPUT -j DROP - -Filter 1740 {"action":"pass","log":false} -(log) - inet/filter/FORWARD - inet6/filter/FORWARD - inet/filter/INPUT - inet6/filter/INPUT - inet/filter/OUTPUT - inet6/filter/OUTPUT - -Filter 1741 {"log":true} -(log) - inet/filter/FORWARD -j logaccept-84 - inet6/filter/FORWARD -j logaccept-84 - inet/filter/INPUT -j logaccept-84 - inet6/filter/INPUT -j logaccept-84 - inet/filter/OUTPUT -j logaccept-84 - inet6/filter/OUTPUT -j logaccept-84 - inet/filter/logaccept-84 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-84 -m limit --limit 1/second -j LOG - inet/filter/logaccept-84 -j ACCEPT - inet6/filter/logaccept-84 -j ACCEPT - -Filter 1742 {"action":"drop","log":true} -(log) - inet/filter/FORWARD -j logdrop-458 - inet6/filter/FORWARD -j logdrop-458 - inet/filter/INPUT -j logdrop-458 - inet6/filter/INPUT -j logdrop-458 - inet/filter/OUTPUT -j logdrop-458 - inet6/filter/OUTPUT -j logdrop-458 - inet/filter/logdrop-458 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-458 -m limit --limit 1/second -j LOG - inet/filter/logdrop-458 -j DROP - inet6/filter/logdrop-458 -j DROP - -Filter 1743 {"action":"pass","log":true} -(log) - inet/filter/FORWARD -j logpass-50 - inet6/filter/FORWARD -j logpass-50 - inet/filter/INPUT -j logpass-50 - inet6/filter/INPUT -j logpass-50 - inet/filter/OUTPUT -j logpass-50 - inet6/filter/OUTPUT -j logpass-50 - inet/filter/logpass-50 -m limit --limit 1/second -j LOG - inet6/filter/logpass-50 -m limit --limit 1/second -j LOG - -Filter 1744 {"log":"none"} -(log) - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 1745 {"action":"drop","log":"none"} -(log) - inet/filter/FORWARD -j DROP - inet6/filter/FORWARD -j DROP - inet/filter/INPUT -j DROP - inet6/filter/INPUT -j DROP - inet/filter/OUTPUT -j DROP - inet6/filter/OUTPUT -j DROP - -Filter 1746 {"action":"pass","log":"none"} -(log) - inet/filter/FORWARD - inet6/filter/FORWARD - inet/filter/INPUT - inet6/filter/INPUT - inet/filter/OUTPUT - inet6/filter/OUTPUT - -Filter 1747 {"in":"_fw","no-track":true,"service":"http"} -(no-track) - inet/filter/OUTPUT -p tcp --dport 80 -j ACCEPT - inet6/filter/OUTPUT -p tcp --dport 80 -j ACCEPT - inet/raw/OUTPUT -p tcp --dport 80 -j CT --notrack - inet6/raw/OUTPUT -p tcp --dport 80 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack - inet/filter/INPUT -p tcp --sport 80 -j ACCEPT - inet6/filter/INPUT -p tcp --sport 80 -j ACCEPT - -Filter 1748 {"dest":"172.17.0.0\/16","no-track":true,"service":"radius","src":"172.16.0.0\/16"} -(no-track) - inet/filter/FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT - inet/filter/INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT - inet/filter/FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT - inet/filter/INPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT - inet/filter/OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT - inet/filter/OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT - inet/raw/PREROUTING -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack - inet/raw/PREROUTING -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack - inet/raw/OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack - inet/raw/OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack - inet/raw/PREROUTING -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack - inet/raw/PREROUTING -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack - inet/raw/OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack - inet/raw/OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack - inet/filter/FORWARD -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT - inet/filter/INPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT - inet/filter/FORWARD -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT - inet/filter/INPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT - inet/filter/OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT - inet/filter/OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT - -Filter 1749 {"dest":"172.18.0.0\/16","no-track":true,"service":"ssh"} -(no-track) - inet/filter/FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT - inet/filter/INPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT - inet/filter/OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT - inet/raw/PREROUTING -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack - inet/raw/OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack - inet/raw/PREROUTING -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack - inet/raw/OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack - inet/filter/FORWARD -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT - inet/filter/INPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT - inet/filter/OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT - -Filter 1750 {"no-track":true,"out":"_fw","service":"ipsec"} -(no-track) - inet/filter/INPUT -p esp -j ACCEPT - inet6/filter/INPUT -p esp -j ACCEPT - inet/filter/INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT - inet6/filter/INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack - inet/raw/OUTPUT -p esp -j CT --notrack - inet6/raw/OUTPUT -p esp -j CT --notrack - inet/raw/OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack - inet6/raw/OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack - inet/filter/OUTPUT -p esp -j ACCEPT - inet6/filter/OUTPUT -p esp -j ACCEPT - inet/filter/OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT - inet6/filter/OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT - -Filter 1751 {"in":["_fw","A"]} -(zone) - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - inet/filter/FORWARD -i eth0 -j ACCEPT - inet6/filter/FORWARD -i eth0 -j ACCEPT - inet/filter/INPUT -i eth0 -j ACCEPT - inet6/filter/INPUT -i eth0 -j ACCEPT - -Filter 1752 {"in":"B","out":"C"} -(zone) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT - -Filter 1753 {"out":["_fw","B"]} -(zone) - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT - -Filter 1754 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} -(zone) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT - inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth0 -o eth4 -j ACCEPT - inet6/filter/FORWARD -i eth0 -o eth4 -j ACCEPT - inet/filter/FORWARD -i eth0 -o eth5 -j ACCEPT - inet6/filter/FORWARD -i eth0 -o eth5 -j ACCEPT - inet/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT - inet6/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT - inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT - inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT - inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT - inet6/filter/FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT - inet/filter/FORWARD -i eth4 -o eth0 -j ACCEPT - inet6/filter/FORWARD -i eth4 -o eth0 -j ACCEPT - inet/filter/FORWARD -i eth5 -o eth0 -j ACCEPT - inet6/filter/FORWARD -i eth5 -o eth0 -j ACCEPT - inet/filter/FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet6/filter/FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT - inet/filter/FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet6/filter/FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT - inet/filter/FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth4 -o eth4 -j ACCEPT - inet6/filter/FORWARD -i eth4 -o eth4 -j ACCEPT - inet/filter/FORWARD -i eth4 -o eth5 -j ACCEPT - inet6/filter/FORWARD -i eth4 -o eth5 -j ACCEPT - inet/filter/FORWARD -i eth5 -o eth4 -j ACCEPT - inet6/filter/FORWARD -i eth5 -o eth4 -j ACCEPT - inet/filter/FORWARD -i eth5 -o eth5 -j ACCEPT - inet6/filter/FORWARD -i eth5 -o eth5 -j ACCEPT - inet/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT - inet6/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT - inet/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT - inet6/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT - inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT - inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT - inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT - inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT - inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT - inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT - inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT - inet/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT - inet6/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT - - -Ipset awall-masquerade {"family":"inet","type":"hash:net"} -(masquerade) - - -Limit B true -(limit) - -Limit C 7 -(limit) - -Limit D {"inet":22,"inet6":58} -(limit) - - -Log _default {"limit":1} -(defaults) - -Log none {"mode":"none"} -(log) - - -Mark 1 {"in":["_fw","A"],"mark":0} -(zone) - inet/mangle/OUTPUT -j MARK --set-mark 0 - inet6/mangle/OUTPUT -j MARK --set-mark 0 - inet/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 - inet6/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 - -Mark 2 {"in":"B","mark":1,"out":"C"} -(zone) - inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 - inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 - -Mark 3 {"mark":2,"out":["_fw","B"]} -(zone) - inet/mangle/INPUT -j MARK --set-mark 2 - inet6/mangle/INPUT -j MARK --set-mark 2 - inet/mangle/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 - inet6/mangle/POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 - - -No-track 1 {"in":["_fw","A"]} -(zone) - inet/raw/OUTPUT -j CT --notrack - inet6/raw/OUTPUT -j CT --notrack - inet/raw/PREROUTING -i eth0 -j CT --notrack - inet6/raw/PREROUTING -i eth0 -j CT --notrack - -No-track 2 {"in":"B"} -(zone) - inet/raw/PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack - inet6/raw/PREROUTING -i eth1 -s fc00::/7 -j CT --notrack - -No-track 3 {"out":"_fw"} -(zone) - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack - - -Service babel {"port":6697,"proto":"tcp"} -(services) - -Service bacula-dir {"port":9101,"proto":"tcp"} -(services) - -Service bacula-fd {"port":9102,"proto":"tcp"} -(services) - -Service bacula-sd {"port":9103,"proto":"tcp"} -(services) - -Service bgp {"port":179,"proto":"tcp"} -(services) - -Service dhcp {"family":"inet","port":[67,68],"proto":"udp"} -(services) - -Service discard [{"port":9,"proto":"udp"},{"port":9,"proto":"tcp"}] -(services) - -Service dns [{"port":53,"proto":"udp"},{"port":53,"proto":"tcp"}] -(services) - -Service epmap [{"port":135,"proto":"tcp"},{"port":135,"proto":"udp"}] -(services) - -Service ftp {"ct-helper":"ftp","port":21,"proto":"tcp"} -(services) - -Service gre {"proto":"gre"} -(services) - -Service hp-pdl {"port":9100,"proto":"tcp"} -(services) - -Service http {"port":80,"proto":"tcp"} -(services) - -Service http-alt {"port":8080,"proto":"tcp"} -(services) - -Service https {"port":443,"proto":"tcp"} -(services) - -Service icmp {"proto":"icmp"} -(services) - -Service igmp {"proto":"igmp"} -(services) - -Service imap {"port":143,"proto":"tcp"} -(services) - -Service imaps {"port":993,"proto":"tcp"} -(services) - -Service ipsec [{"proto":"esp"},{"port":[500,4500],"proto":"udp"}] -(services) - -Service irc {"ct-helper":"irc","port":6667,"proto":"tcp"} -(services) - -Service kerberos [{"port":88,"proto":"tcp"},{"port":88,"proto":"udp"}] -(services) - -Service kpasswd [{"port":464,"proto":"tcp"},{"port":464,"proto":"udp"}] -(services) - -Service l2tp {"port":1701,"proto":"udp"} -(services) - -Service ldap [{"port":389,"proto":"tcp"},{"port":389,"proto":"udp"}] -(services) - -Service ldaps [{"port":636,"proto":"tcp"},{"port":636,"proto":"udp"}] -(services) - -Service microsoft-ds [{"port":445,"proto":"tcp"},{"port":445,"proto":"udp"}] -(services) - -Service ms-sql-m {"port":1434,"proto":"tcp"} -(services) - -Service ms-sql-s {"port":1433,"proto":"tcp"} -(services) - -Service msft-gc [{"port":3268,"proto":"tcp"},{"port":3268,"proto":"udp"}] -(services) - -Service msft-gc-ssl [{"port":3269,"proto":"tcp"},{"port":3269,"proto":"udp"}] -(services) - -Service netbios-ds [{"port":138,"proto":"tcp"},{"port":138,"proto":"udp"}] -(services) - -Service netbios-ns [{"family":"inet","port":137,"proto":"tcp"},{"ct-helper":"netbios-ns","family":"inet","port":137,"proto":"udp"}] -(services) - -Service netbios-ssn [{"port":139,"proto":"tcp"},{"port":139,"proto":"udp"}] -(services) - -Service ntp {"port":123,"proto":"udp"} -(services) - -Service ospf {"proto":"ospf"} -(services) - -Service pgsql {"port":5432,"proto":"tcp"} -(services) - -Service ping [{"proto":"icmp","reply-type":0,"type":8},{"proto":"icmpv6","reply-type":129,"type":128}] -(services) - -Service pop3 {"port":110,"proto":"tcp"} -(services) - -Service pop3s {"port":995,"proto":"tcp"} -(services) - -Service radius [{"port":1812,"proto":"udp"},{"port":1812,"proto":"tcp"}] -(services) - -Service radius-acct [{"port":1813,"proto":"udp"},{"port":1813,"proto":"tcp"}] -(services) - -Service rdp {"port":3389,"proto":"tcp"} -(services) - -Service rsync {"port":873,"proto":"tcp"} -(services) - -Service rtmp {"port":1935,"proto":"tcp"} -(services) - -Service rtsp {"port":554,"proto":"tcp"} -(services) - -Service sieve {"port":4190,"proto":"tcp"} -(services) - -Service sip [{"ct-helper":"sip","port":5060,"proto":"udp"},{"ct-helper":"sip","port":5060,"proto":"tcp"}] -(services) - -Service sip-tls [{"port":5061,"proto":"udp"},{"port":5061,"proto":"tcp"}] -(services) - -Service smtp {"port":25,"proto":"tcp"} -(services) - -Service snmp {"port":161,"proto":"udp"} -(services) - -Service snmp-trap {"port":162,"proto":"udp"} -(services) - -Service ssh {"port":22,"proto":"tcp"} -(services) - -Service submission {"port":587,"proto":"tcp"} -(services) - -Service syslog {"port":514,"proto":"udp"} -(services) - -Service telnet {"port":23,"proto":"tcp"} -(services) - -Service teredo {"port":3544,"proto":"udp"} -(services) - -Service tftp {"port":69,"proto":"udp"} -(services) - -Service vnc {"port":5900,"proto":"tcp"} -(services) - - -Snat 1 {"out":["_fw","B"]} -(zone) - inet/nat/INPUT -j MASQUERADE - inet/nat/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE - - -Variable awall_tproxy_mark 1 -(defaults) - - -Zone A {"iface":"eth0"} -(zone) - -Zone B {"addr":["10.0.0.0\/12","fc00::\/7"],"iface":"eth1"} -(zone) - -Zone C {"addr":"10.1.0.0\/12","iface":["eth2","eth3"]} -(zone) - -Zone D {"iface":["eth4","eth5"],"route-back":true} -(zone) - -Zone E {"ipsec":true} -(zone) - - -# ipset awall-masquerade -hash:net family inet - - -# rules-save generated by awall -*filter -:FORWARD DROP [0:0] -:INPUT DROP [0:0] -:OUTPUT DROP [0:0] -:address-0 - [0:0] -:address-1 - [0:0] -:address-10 - [0:0] -:address-100 - [0:0] -:address-101 - [0:0] -:address-102 - [0:0] -:address-103 - [0:0] -:address-104 - [0:0] -:address-105 - [0:0] -:address-106 - [0:0] -:address-107 - [0:0] -:address-108 - [0:0] -:address-109 - [0:0] -:address-11 - [0:0] -:address-110 - [0:0] -:address-111 - [0:0] -:address-112 - [0:0] -:address-113 - [0:0] -:address-114 - [0:0] -:address-115 - [0:0] -:address-116 - [0:0] -:address-117 - [0:0] -:address-118 - [0:0] -:address-119 - [0:0] -:address-12 - [0:0] -:address-120 - [0:0] -:address-121 - [0:0] -:address-122 - [0:0] -:address-123 - [0:0] -:address-124 - [0:0] -:address-125 - [0:0] -:address-126 - [0:0] -:address-127 - [0:0] -:address-13 - [0:0] -:address-14 - [0:0] -:address-15 - [0:0] -:address-16 - [0:0] -:address-17 - [0:0] -:address-18 - [0:0] -:address-19 - [0:0] -:address-2 - [0:0] -:address-20 - [0:0] -:address-21 - [0:0] -:address-22 - [0:0] -:address-23 - [0:0] -:address-24 - [0:0] -:address-25 - [0:0] -:address-26 - [0:0] -:address-27 - [0:0] -:address-28 - [0:0] -:address-29 - [0:0] -:address-3 - [0:0] -:address-30 - [0:0] -:address-31 - [0:0] -:address-32 - [0:0] -:address-33 - [0:0] -:address-34 - [0:0] -:address-35 - [0:0] -:address-36 - [0:0] -:address-37 - [0:0] -:address-38 - [0:0] -:address-39 - [0:0] -:address-4 - [0:0] -:address-40 - [0:0] -:address-41 - [0:0] -:address-42 - [0:0] -:address-43 - [0:0] -:address-44 - [0:0] -:address-45 - [0:0] -:address-46 - [0:0] -:address-47 - [0:0] -:address-48 - [0:0] -:address-49 - [0:0] -:address-5 - [0:0] -:address-50 - [0:0] -:address-51 - [0:0] -:address-52 - [0:0] -:address-53 - [0:0] -:address-54 - [0:0] -:address-55 - [0:0] -:address-56 - [0:0] -:address-57 - [0:0] -:address-58 - [0:0] -:address-59 - [0:0] -:address-6 - [0:0] -:address-60 - [0:0] -:address-61 - [0:0] -:address-62 - [0:0] -:address-63 - [0:0] -:address-64 - [0:0] -:address-65 - [0:0] -:address-66 - [0:0] -:address-67 - [0:0] -:address-68 - [0:0] -:address-69 - [0:0] -:address-7 - [0:0] -:address-70 - [0:0] -:address-71 - [0:0] -:address-72 - [0:0] -:address-73 - [0:0] -:address-74 - [0:0] -:address-75 - [0:0] -:address-76 - [0:0] -:address-77 - [0:0] -:address-78 - [0:0] -:address-79 - [0:0] -:address-8 - [0:0] -:address-80 - [0:0] -:address-81 - [0:0] -:address-82 - [0:0] -:address-83 - [0:0] -:address-84 - [0:0] -:address-85 - [0:0] -:address-86 - [0:0] -:address-87 - [0:0] -:address-88 - [0:0] -:address-89 - [0:0] -:address-9 - [0:0] -:address-90 - [0:0] -:address-91 - [0:0] -:address-92 - [0:0] -:address-93 - [0:0] -:address-94 - [0:0] -:address-95 - [0:0] -:address-96 - [0:0] -:address-97 - [0:0] -:address-98 - [0:0] -:address-99 - [0:0] -:icmp-routing - [0:0] -:limit-0 - [0:0] -:limit-1 - [0:0] -:limit-10 - [0:0] -:limit-100 - [0:0] -:limit-1000 - [0:0] -:limit-1001 - [0:0] -:limit-1002 - [0:0] -:limit-1003 - [0:0] -:limit-1004 - [0:0] -:limit-1005 - [0:0] -:limit-1006 - [0:0] -:limit-1007 - [0:0] -:limit-1008 - [0:0] -:limit-1009 - [0:0] -:limit-101 - [0:0] -:limit-1010 - [0:0] -:limit-1011 - [0:0] -:limit-1012 - [0:0] -:limit-1013 - [0:0] -:limit-1014 - [0:0] -:limit-1015 - [0:0] -:limit-1016 - [0:0] -:limit-1017 - [0:0] -:limit-1018 - [0:0] -:limit-1019 - [0:0] -:limit-102 - [0:0] -:limit-1020 - [0:0] -:limit-1021 - [0:0] -:limit-1022 - [0:0] -:limit-1023 - [0:0] -:limit-1024 - [0:0] -:limit-1025 - [0:0] -:limit-1026 - [0:0] -:limit-1027 - [0:0] -:limit-1028 - [0:0] -:limit-1029 - [0:0] -:limit-103 - [0:0] -:limit-1030 - [0:0] -:limit-1031 - [0:0] -:limit-1032 - [0:0] -:limit-1033 - [0:0] -:limit-1034 - [0:0] -:limit-1035 - [0:0] -:limit-1036 - [0:0] -:limit-1037 - [0:0] -:limit-1038 - [0:0] -:limit-1039 - [0:0] -:limit-104 - [0:0] -:limit-1040 - [0:0] -:limit-1041 - [0:0] -:limit-1042 - [0:0] -:limit-1043 - [0:0] -:limit-1044 - [0:0] -:limit-1045 - [0:0] -:limit-1046 - [0:0] -:limit-1047 - [0:0] -:limit-1048 - [0:0] -:limit-1049 - [0:0] -:limit-105 - [0:0] -:limit-1050 - [0:0] -:limit-1051 - [0:0] -:limit-1052 - [0:0] -:limit-1053 - [0:0] -:limit-1054 - [0:0] -:limit-1055 - [0:0] -:limit-1056 - [0:0] -:limit-1057 - [0:0] -:limit-1058 - [0:0] -:limit-1059 - [0:0] -:limit-106 - [0:0] -:limit-1060 - [0:0] -:limit-1061 - [0:0] -:limit-1062 - [0:0] -:limit-1063 - [0:0] -:limit-1064 - [0:0] -:limit-1065 - [0:0] -:limit-1066 - [0:0] -:limit-1067 - [0:0] -:limit-1068 - [0:0] -:limit-1069 - [0:0] -:limit-107 - [0:0] -:limit-1070 - [0:0] -:limit-1071 - [0:0] -:limit-1072 - [0:0] -:limit-1073 - [0:0] -:limit-1074 - [0:0] -:limit-1075 - [0:0] -:limit-1076 - [0:0] -:limit-1077 - [0:0] -:limit-1078 - [0:0] -:limit-1079 - [0:0] -:limit-108 - [0:0] -:limit-1080 - [0:0] -:limit-1081 - [0:0] -:limit-1082 - [0:0] -:limit-1083 - [0:0] -:limit-1084 - [0:0] -:limit-1085 - [0:0] -:limit-1086 - [0:0] -:limit-1087 - [0:0] -:limit-1088 - [0:0] -:limit-1089 - [0:0] -:limit-109 - [0:0] -:limit-1090 - [0:0] -:limit-1091 - [0:0] -:limit-1092 - [0:0] -:limit-1094 - [0:0] -:limit-1095 - [0:0] -:limit-1096 - [0:0] -:limit-1098 - [0:0] -:limit-1099 - [0:0] -:limit-11 - [0:0] -:limit-110 - [0:0] -:limit-1100 - [0:0] -:limit-1101 - [0:0] -:limit-1102 - [0:0] -:limit-1103 - [0:0] -:limit-1104 - [0:0] -:limit-1106 - [0:0] -:limit-1107 - [0:0] -:limit-1108 - [0:0] -:limit-111 - [0:0] -:limit-1110 - [0:0] -:limit-1111 - [0:0] -:limit-1112 - [0:0] -:limit-1113 - [0:0] -:limit-1114 - [0:0] -:limit-1115 - [0:0] -:limit-1116 - [0:0] -:limit-1118 - [0:0] -:limit-1119 - [0:0] -:limit-112 - [0:0] -:limit-1120 - [0:0] -:limit-1122 - [0:0] -:limit-1123 - [0:0] -:limit-1124 - [0:0] -:limit-1125 - [0:0] -:limit-1126 - [0:0] -:limit-1127 - [0:0] -:limit-1128 - [0:0] -:limit-113 - [0:0] -:limit-1130 - [0:0] -:limit-1131 - [0:0] -:limit-1132 - [0:0] -:limit-1134 - [0:0] -:limit-1135 - [0:0] -:limit-1136 - [0:0] -:limit-1137 - [0:0] -:limit-1138 - [0:0] -:limit-1139 - [0:0] -:limit-114 - [0:0] -:limit-1140 - [0:0] -:limit-1141 - [0:0] -:limit-1142 - [0:0] -:limit-1143 - [0:0] -:limit-1144 - [0:0] -:limit-1145 - [0:0] -:limit-1146 - [0:0] -:limit-1148 - [0:0] -:limit-1149 - [0:0] -:limit-115 - [0:0] -:limit-1150 - [0:0] -:limit-1152 - [0:0] -:limit-1153 - [0:0] -:limit-1154 - [0:0] -:limit-1155 - [0:0] -:limit-1156 - [0:0] -:limit-1157 - [0:0] -:limit-1158 - [0:0] -:limit-116 - [0:0] -:limit-1160 - [0:0] -:limit-1161 - [0:0] -:limit-1162 - [0:0] -:limit-1164 - [0:0] -:limit-1165 - [0:0] -:limit-1166 - [0:0] -:limit-1167 - [0:0] -:limit-1168 - [0:0] -:limit-1169 - [0:0] -:limit-117 - [0:0] -:limit-1170 - [0:0] -:limit-1172 - [0:0] -:limit-1173 - [0:0] -:limit-1174 - [0:0] -:limit-1176 - [0:0] -:limit-1177 - [0:0] -:limit-1178 - [0:0] -:limit-1179 - [0:0] -:limit-118 - [0:0] -:limit-1180 - [0:0] -:limit-1181 - [0:0] -:limit-1182 - [0:0] -:limit-1184 - [0:0] -:limit-1185 - [0:0] -:limit-1186 - [0:0] -:limit-1188 - [0:0] -:limit-1189 - [0:0] -:limit-119 - [0:0] -:limit-1190 - [0:0] -:limit-1191 - [0:0] -:limit-1192 - [0:0] -:limit-1193 - [0:0] -:limit-1194 - [0:0] -:limit-1195 - [0:0] -:limit-1196 - [0:0] -:limit-1197 - [0:0] -:limit-1198 - [0:0] -:limit-1199 - [0:0] -:limit-12 - [0:0] -:limit-120 - [0:0] -:limit-1200 - [0:0] -:limit-1202 - [0:0] -:limit-1203 - [0:0] -:limit-1204 - [0:0] -:limit-1206 - [0:0] -:limit-1207 - [0:0] -:limit-1208 - [0:0] -:limit-1209 - [0:0] -:limit-121 - [0:0] -:limit-1210 - [0:0] -:limit-1211 - [0:0] -:limit-1212 - [0:0] -:limit-1214 - [0:0] -:limit-1215 - [0:0] -:limit-1216 - [0:0] -:limit-1218 - [0:0] -:limit-1219 - [0:0] -:limit-122 - [0:0] -:limit-1220 - [0:0] -:limit-1221 - [0:0] -:limit-1222 - [0:0] -:limit-1223 - [0:0] -:limit-1224 - [0:0] -:limit-1226 - [0:0] -:limit-1227 - [0:0] -:limit-1228 - [0:0] -:limit-123 - [0:0] -:limit-1230 - [0:0] -:limit-1231 - [0:0] -:limit-1232 - [0:0] -:limit-1233 - [0:0] -:limit-1234 - [0:0] -:limit-1235 - [0:0] -:limit-1236 - [0:0] -:limit-1238 - [0:0] -:limit-1239 - [0:0] -:limit-124 - [0:0] -:limit-1240 - [0:0] -:limit-1242 - [0:0] -:limit-1243 - [0:0] -:limit-1244 - [0:0] -:limit-1245 - [0:0] -:limit-1246 - [0:0] -:limit-1247 - [0:0] -:limit-1248 - [0:0] -:limit-1249 - [0:0] -:limit-125 - [0:0] -:limit-1250 - [0:0] -:limit-1251 - [0:0] -:limit-1252 - [0:0] -:limit-1253 - [0:0] -:limit-1254 - [0:0] -:limit-1256 - [0:0] -:limit-1257 - [0:0] -:limit-1258 - [0:0] -:limit-126 - [0:0] -:limit-1260 - [0:0] -:limit-1261 - [0:0] -:limit-1262 - [0:0] -:limit-1263 - [0:0] -:limit-1264 - [0:0] -:limit-1265 - [0:0] -:limit-1266 - [0:0] -:limit-1268 - [0:0] -:limit-1269 - [0:0] -:limit-127 - [0:0] -:limit-1270 - [0:0] -:limit-1272 - [0:0] -:limit-1273 - [0:0] -:limit-1274 - [0:0] -:limit-1275 - [0:0] -:limit-1276 - [0:0] -:limit-1277 - [0:0] -:limit-1278 - [0:0] -:limit-128 - [0:0] -:limit-1280 - [0:0] -:limit-1281 - [0:0] -:limit-1282 - [0:0] -:limit-1284 - [0:0] -:limit-1285 - [0:0] -:limit-1286 - [0:0] -:limit-1287 - [0:0] -:limit-1288 - [0:0] -:limit-1289 - [0:0] -:limit-129 - [0:0] -:limit-1290 - [0:0] -:limit-1292 - [0:0] -:limit-1293 - [0:0] -:limit-1294 - [0:0] -:limit-1296 - [0:0] -:limit-1297 - [0:0] -:limit-1298 - [0:0] -:limit-1299 - [0:0] -:limit-13 - [0:0] -:limit-130 - [0:0] -:limit-1300 - [0:0] -:limit-1301 - [0:0] -:limit-1302 - [0:0] -:limit-1303 - [0:0] -:limit-1304 - [0:0] -:limit-1305 - [0:0] -:limit-1306 - [0:0] -:limit-1307 - [0:0] -:limit-1308 - [0:0] -:limit-131 - [0:0] -:limit-1310 - [0:0] -:limit-1311 - [0:0] -:limit-1312 - [0:0] -:limit-1314 - [0:0] -:limit-1315 - [0:0] -:limit-1316 - [0:0] -:limit-1317 - [0:0] -:limit-1318 - [0:0] -:limit-1319 - [0:0] -:limit-132 - [0:0] -:limit-1320 - [0:0] -:limit-1322 - [0:0] -:limit-1323 - [0:0] -:limit-1324 - [0:0] -:limit-1326 - [0:0] -:limit-1327 - [0:0] -:limit-1328 - [0:0] -:limit-1329 - [0:0] -:limit-133 - [0:0] -:limit-1330 - [0:0] -:limit-1331 - [0:0] -:limit-1332 - [0:0] -:limit-1334 - [0:0] -:limit-1335 - [0:0] -:limit-1336 - [0:0] -:limit-1338 - [0:0] -:limit-1339 - [0:0] -:limit-134 - [0:0] -:limit-1340 - [0:0] -:limit-1341 - [0:0] -:limit-1342 - [0:0] -:limit-1343 - [0:0] -:limit-1344 - [0:0] -:limit-1346 - [0:0] -:limit-1347 - [0:0] -:limit-1348 - [0:0] -:limit-135 - [0:0] -:limit-1350 - [0:0] -:limit-1351 - [0:0] -:limit-1352 - [0:0] -:limit-1353 - [0:0] -:limit-1354 - [0:0] -:limit-1355 - [0:0] -:limit-1356 - [0:0] -:limit-1357 - [0:0] -:limit-1358 - [0:0] -:limit-1359 - [0:0] -:limit-136 - [0:0] -:limit-1360 - [0:0] -:limit-1361 - [0:0] -:limit-1362 - [0:0] -:limit-1364 - [0:0] -:limit-1365 - [0:0] -:limit-1366 - [0:0] -:limit-1368 - [0:0] -:limit-1369 - [0:0] -:limit-137 - [0:0] -:limit-1370 - [0:0] -:limit-1371 - [0:0] -:limit-1372 - [0:0] -:limit-1373 - [0:0] -:limit-1374 - [0:0] -:limit-1376 - [0:0] -:limit-1377 - [0:0] -:limit-1378 - [0:0] -:limit-138 - [0:0] -:limit-1380 - [0:0] -:limit-1381 - [0:0] -:limit-1382 - [0:0] -:limit-1383 - [0:0] -:limit-1384 - [0:0] -:limit-1385 - [0:0] -:limit-1386 - [0:0] -:limit-1388 - [0:0] -:limit-1389 - [0:0] -:limit-139 - [0:0] -:limit-1390 - [0:0] -:limit-1392 - [0:0] -:limit-1393 - [0:0] -:limit-1394 - [0:0] -:limit-1395 - [0:0] -:limit-1396 - [0:0] -:limit-1397 - [0:0] -:limit-1398 - [0:0] -:limit-14 - [0:0] -:limit-140 - [0:0] -:limit-1400 - [0:0] -:limit-1401 - [0:0] -:limit-1402 - [0:0] -:limit-1404 - [0:0] -:limit-1405 - [0:0] -:limit-1406 - [0:0] -:limit-1407 - [0:0] -:limit-1408 - [0:0] -:limit-1409 - [0:0] -:limit-141 - [0:0] -:limit-1410 - [0:0] -:limit-1411 - [0:0] -:limit-1412 - [0:0] -:limit-1413 - [0:0] -:limit-1414 - [0:0] -:limit-1415 - [0:0] -:limit-1416 - [0:0] -:limit-1417 - [0:0] -:limit-1418 - [0:0] -:limit-1419 - [0:0] -:limit-142 - [0:0] -:limit-1420 - [0:0] -:limit-1421 - [0:0] -:limit-1422 - [0:0] -:limit-1423 - [0:0] -:limit-1424 - [0:0] -:limit-1425 - [0:0] -:limit-1426 - [0:0] -:limit-1427 - [0:0] -:limit-1428 - [0:0] -:limit-1429 - [0:0] -:limit-143 - [0:0] -:limit-1430 - [0:0] -:limit-1431 - [0:0] -:limit-144 - [0:0] -:limit-145 - [0:0] -:limit-146 - [0:0] -:limit-147 - [0:0] -:limit-148 - [0:0] -:limit-149 - [0:0] -:limit-15 - [0:0] -:limit-150 - [0:0] -:limit-151 - [0:0] -:limit-152 - [0:0] -:limit-153 - [0:0] -:limit-154 - [0:0] -:limit-155 - [0:0] -:limit-156 - [0:0] -:limit-157 - [0:0] -:limit-158 - [0:0] -:limit-159 - [0:0] -:limit-16 - [0:0] -:limit-160 - [0:0] -:limit-161 - [0:0] -:limit-162 - [0:0] -:limit-163 - [0:0] -:limit-164 - [0:0] -:limit-165 - [0:0] -:limit-166 - [0:0] -:limit-167 - [0:0] -:limit-168 - [0:0] -:limit-169 - [0:0] -:limit-17 - [0:0] -:limit-170 - [0:0] -:limit-171 - [0:0] -:limit-172 - [0:0] -:limit-173 - [0:0] -:limit-174 - [0:0] -:limit-175 - [0:0] -:limit-176 - [0:0] -:limit-177 - [0:0] -:limit-178 - [0:0] -:limit-179 - [0:0] -:limit-18 - [0:0] -:limit-180 - [0:0] -:limit-181 - [0:0] -:limit-182 - [0:0] -:limit-183 - [0:0] -:limit-184 - [0:0] -:limit-185 - [0:0] -:limit-186 - [0:0] -:limit-187 - [0:0] -:limit-188 - [0:0] -:limit-189 - [0:0] -:limit-19 - [0:0] -:limit-190 - [0:0] -:limit-191 - [0:0] -:limit-192 - [0:0] -:limit-193 - [0:0] -:limit-194 - [0:0] -:limit-195 - [0:0] -:limit-196 - [0:0] -:limit-197 - [0:0] -:limit-198 - [0:0] -:limit-199 - [0:0] -:limit-2 - [0:0] -:limit-20 - [0:0] -:limit-200 - [0:0] -:limit-201 - [0:0] -:limit-202 - [0:0] -:limit-203 - [0:0] -:limit-204 - [0:0] -:limit-205 - [0:0] -:limit-206 - [0:0] -:limit-207 - [0:0] -:limit-208 - [0:0] -:limit-209 - [0:0] -:limit-21 - [0:0] -:limit-210 - [0:0] -:limit-211 - [0:0] -:limit-212 - [0:0] -:limit-213 - [0:0] -:limit-214 - [0:0] -:limit-215 - [0:0] -:limit-216 - [0:0] -:limit-217 - [0:0] -:limit-218 - [0:0] -:limit-219 - [0:0] -:limit-22 - [0:0] -:limit-220 - [0:0] -:limit-221 - [0:0] -:limit-222 - [0:0] -:limit-223 - [0:0] -:limit-224 - [0:0] -:limit-225 - [0:0] -:limit-226 - [0:0] -:limit-227 - [0:0] -:limit-228 - [0:0] -:limit-229 - [0:0] -:limit-23 - [0:0] -:limit-230 - [0:0] -:limit-231 - [0:0] -:limit-232 - [0:0] -:limit-233 - [0:0] -:limit-234 - [0:0] -:limit-235 - [0:0] -:limit-236 - [0:0] -:limit-237 - [0:0] -:limit-238 - [0:0] -:limit-239 - [0:0] -:limit-24 - [0:0] -:limit-240 - [0:0] -:limit-241 - [0:0] -:limit-242 - [0:0] -:limit-243 - [0:0] -:limit-244 - [0:0] -:limit-245 - [0:0] -:limit-246 - [0:0] -:limit-247 - [0:0] -:limit-248 - [0:0] -:limit-249 - [0:0] -:limit-25 - [0:0] -:limit-250 - [0:0] -:limit-251 - [0:0] -:limit-252 - [0:0] -:limit-253 - [0:0] -:limit-254 - [0:0] -:limit-255 - [0:0] -:limit-256 - [0:0] -:limit-257 - [0:0] -:limit-258 - [0:0] -:limit-259 - [0:0] -:limit-26 - [0:0] -:limit-260 - [0:0] -:limit-261 - [0:0] -:limit-262 - [0:0] -:limit-263 - [0:0] -:limit-264 - [0:0] -:limit-265 - [0:0] -:limit-266 - [0:0] -:limit-267 - [0:0] -:limit-268 - [0:0] -:limit-269 - [0:0] -:limit-27 - [0:0] -:limit-270 - [0:0] -:limit-271 - [0:0] -:limit-272 - [0:0] -:limit-273 - [0:0] -:limit-274 - [0:0] -:limit-275 - [0:0] -:limit-276 - [0:0] -:limit-277 - [0:0] -:limit-278 - [0:0] -:limit-279 - [0:0] -:limit-28 - [0:0] -:limit-280 - [0:0] -:limit-281 - [0:0] -:limit-282 - [0:0] -:limit-283 - [0:0] -:limit-284 - [0:0] -:limit-285 - [0:0] -:limit-286 - [0:0] -:limit-287 - [0:0] -:limit-288 - [0:0] -:limit-289 - [0:0] -:limit-29 - [0:0] -:limit-290 - [0:0] -:limit-291 - [0:0] -:limit-292 - [0:0] -:limit-293 - [0:0] -:limit-294 - [0:0] -:limit-295 - [0:0] -:limit-296 - [0:0] -:limit-297 - [0:0] -:limit-298 - [0:0] -:limit-299 - [0:0] -:limit-3 - [0:0] -:limit-30 - [0:0] -:limit-300 - [0:0] -:limit-301 - [0:0] -:limit-302 - [0:0] -:limit-303 - [0:0] -:limit-304 - [0:0] -:limit-305 - [0:0] -:limit-306 - [0:0] -:limit-307 - [0:0] -:limit-308 - [0:0] -:limit-309 - [0:0] -:limit-31 - [0:0] -:limit-310 - [0:0] -:limit-311 - [0:0] -:limit-312 - [0:0] -:limit-313 - [0:0] -:limit-314 - [0:0] -:limit-315 - [0:0] -:limit-316 - [0:0] -:limit-317 - [0:0] -:limit-318 - [0:0] -:limit-319 - [0:0] -:limit-32 - [0:0] -:limit-320 - [0:0] -:limit-321 - [0:0] -:limit-322 - [0:0] -:limit-323 - [0:0] -:limit-324 - [0:0] -:limit-325 - [0:0] -:limit-326 - [0:0] -:limit-327 - [0:0] -:limit-328 - [0:0] -:limit-329 - [0:0] -:limit-33 - [0:0] -:limit-330 - [0:0] -:limit-331 - [0:0] -:limit-332 - [0:0] -:limit-333 - [0:0] -:limit-334 - [0:0] -:limit-335 - [0:0] -:limit-336 - [0:0] -:limit-337 - [0:0] -:limit-338 - [0:0] -:limit-339 - [0:0] -:limit-34 - [0:0] -:limit-340 - [0:0] -:limit-341 - [0:0] -:limit-342 - [0:0] -:limit-343 - [0:0] -:limit-344 - [0:0] -:limit-345 - [0:0] -:limit-346 - [0:0] -:limit-347 - [0:0] -:limit-348 - [0:0] -:limit-349 - [0:0] -:limit-35 - [0:0] -:limit-350 - [0:0] -:limit-351 - [0:0] -:limit-352 - [0:0] -:limit-353 - [0:0] -:limit-354 - [0:0] -:limit-355 - [0:0] -:limit-356 - [0:0] -:limit-357 - [0:0] -:limit-358 - [0:0] -:limit-359 - [0:0] -:limit-36 - [0:0] -:limit-360 - [0:0] -:limit-361 - [0:0] -:limit-362 - [0:0] -:limit-363 - [0:0] -:limit-364 - [0:0] -:limit-365 - [0:0] -:limit-366 - [0:0] -:limit-367 - [0:0] -:limit-368 - [0:0] -:limit-369 - [0:0] -:limit-37 - [0:0] -:limit-370 - [0:0] -:limit-371 - [0:0] -:limit-372 - [0:0] -:limit-373 - [0:0] -:limit-374 - [0:0] -:limit-375 - [0:0] -:limit-376 - [0:0] -:limit-378 - [0:0] -:limit-379 - [0:0] -:limit-38 - [0:0] -:limit-380 - [0:0] -:limit-382 - [0:0] -:limit-383 - [0:0] -:limit-384 - [0:0] -:limit-385 - [0:0] -:limit-386 - [0:0] -:limit-387 - [0:0] -:limit-388 - [0:0] -:limit-39 - [0:0] -:limit-390 - [0:0] -:limit-391 - [0:0] -:limit-392 - [0:0] -:limit-394 - [0:0] -:limit-395 - [0:0] -:limit-396 - [0:0] -:limit-397 - [0:0] -:limit-398 - [0:0] -:limit-399 - [0:0] -:limit-4 - [0:0] -:limit-40 - [0:0] -:limit-400 - [0:0] -:limit-402 - [0:0] -:limit-403 - [0:0] -:limit-404 - [0:0] -:limit-406 - [0:0] -:limit-407 - [0:0] -:limit-408 - [0:0] -:limit-409 - [0:0] -:limit-41 - [0:0] -:limit-410 - [0:0] -:limit-411 - [0:0] -:limit-412 - [0:0] -:limit-414 - [0:0] -:limit-415 - [0:0] -:limit-416 - [0:0] -:limit-418 - [0:0] -:limit-419 - [0:0] -:limit-42 - [0:0] -:limit-420 - [0:0] -:limit-421 - [0:0] -:limit-422 - [0:0] -:limit-423 - [0:0] -:limit-424 - [0:0] -:limit-425 - [0:0] -:limit-426 - [0:0] -:limit-427 - [0:0] -:limit-428 - [0:0] -:limit-429 - [0:0] -:limit-43 - [0:0] -:limit-430 - [0:0] -:limit-432 - [0:0] -:limit-433 - [0:0] -:limit-434 - [0:0] -:limit-436 - [0:0] -:limit-437 - [0:0] -:limit-438 - [0:0] -:limit-439 - [0:0] -:limit-44 - [0:0] -:limit-440 - [0:0] -:limit-441 - [0:0] -:limit-442 - [0:0] -:limit-444 - [0:0] -:limit-445 - [0:0] -:limit-446 - [0:0] -:limit-448 - [0:0] -:limit-449 - [0:0] -:limit-45 - [0:0] -:limit-450 - [0:0] -:limit-451 - [0:0] -:limit-452 - [0:0] -:limit-453 - [0:0] -:limit-454 - [0:0] -:limit-456 - [0:0] -:limit-457 - [0:0] -:limit-458 - [0:0] -:limit-46 - [0:0] -:limit-460 - [0:0] -:limit-461 - [0:0] -:limit-462 - [0:0] -:limit-463 - [0:0] -:limit-464 - [0:0] -:limit-465 - [0:0] -:limit-466 - [0:0] -:limit-468 - [0:0] -:limit-469 - [0:0] -:limit-47 - [0:0] -:limit-470 - [0:0] -:limit-472 - [0:0] -:limit-473 - [0:0] -:limit-474 - [0:0] -:limit-475 - [0:0] -:limit-476 - [0:0] -:limit-477 - [0:0] -:limit-478 - [0:0] -:limit-479 - [0:0] -:limit-48 - [0:0] -:limit-480 - [0:0] -:limit-481 - [0:0] -:limit-482 - [0:0] -:limit-483 - [0:0] -:limit-484 - [0:0] -:limit-486 - [0:0] -:limit-487 - [0:0] -:limit-488 - [0:0] -:limit-49 - [0:0] -:limit-490 - [0:0] -:limit-491 - [0:0] -:limit-492 - [0:0] -:limit-493 - [0:0] -:limit-494 - [0:0] -:limit-495 - [0:0] -:limit-496 - [0:0] -:limit-498 - [0:0] -:limit-499 - [0:0] -:limit-5 - [0:0] -:limit-50 - [0:0] -:limit-500 - [0:0] -:limit-502 - [0:0] -:limit-503 - [0:0] -:limit-504 - [0:0] -:limit-505 - [0:0] -:limit-506 - [0:0] -:limit-507 - [0:0] -:limit-508 - [0:0] -:limit-51 - [0:0] -:limit-510 - [0:0] -:limit-511 - [0:0] -:limit-512 - [0:0] -:limit-514 - [0:0] -:limit-515 - [0:0] -:limit-516 - [0:0] -:limit-517 - [0:0] -:limit-518 - [0:0] -:limit-519 - [0:0] -:limit-52 - [0:0] -:limit-520 - [0:0] -:limit-522 - [0:0] -:limit-523 - [0:0] -:limit-524 - [0:0] -:limit-526 - [0:0] -:limit-527 - [0:0] -:limit-528 - [0:0] -:limit-529 - [0:0] -:limit-53 - [0:0] -:limit-530 - [0:0] -:limit-531 - [0:0] -:limit-532 - [0:0] -:limit-533 - [0:0] -:limit-534 - [0:0] -:limit-535 - [0:0] -:limit-536 - [0:0] -:limit-537 - [0:0] -:limit-538 - [0:0] -:limit-54 - [0:0] -:limit-540 - [0:0] -:limit-541 - [0:0] -:limit-542 - [0:0] -:limit-544 - [0:0] -:limit-545 - [0:0] -:limit-546 - [0:0] -:limit-547 - [0:0] -:limit-548 - [0:0] -:limit-549 - [0:0] -:limit-55 - [0:0] -:limit-550 - [0:0] -:limit-552 - [0:0] -:limit-553 - [0:0] -:limit-554 - [0:0] -:limit-556 - [0:0] -:limit-557 - [0:0] -:limit-558 - [0:0] -:limit-559 - [0:0] -:limit-56 - [0:0] -:limit-560 - [0:0] -:limit-561 - [0:0] -:limit-562 - [0:0] -:limit-564 - [0:0] -:limit-565 - [0:0] -:limit-566 - [0:0] -:limit-568 - [0:0] -:limit-569 - [0:0] -:limit-57 - [0:0] -:limit-570 - [0:0] -:limit-571 - [0:0] -:limit-572 - [0:0] -:limit-573 - [0:0] -:limit-574 - [0:0] -:limit-576 - [0:0] -:limit-577 - [0:0] -:limit-578 - [0:0] -:limit-58 - [0:0] -:limit-580 - [0:0] -:limit-581 - [0:0] -:limit-582 - [0:0] -:limit-583 - [0:0] -:limit-584 - [0:0] -:limit-585 - [0:0] -:limit-586 - [0:0] -:limit-587 - [0:0] -:limit-588 - [0:0] -:limit-589 - [0:0] -:limit-59 - [0:0] -:limit-590 - [0:0] -:limit-591 - [0:0] -:limit-592 - [0:0] -:limit-594 - [0:0] -:limit-595 - [0:0] -:limit-596 - [0:0] -:limit-598 - [0:0] -:limit-599 - [0:0] -:limit-6 - [0:0] -:limit-60 - [0:0] -:limit-600 - [0:0] -:limit-601 - [0:0] -:limit-602 - [0:0] -:limit-603 - [0:0] -:limit-604 - [0:0] -:limit-606 - [0:0] -:limit-607 - [0:0] -:limit-608 - [0:0] -:limit-61 - [0:0] -:limit-610 - [0:0] -:limit-611 - [0:0] -:limit-612 - [0:0] -:limit-613 - [0:0] -:limit-614 - [0:0] -:limit-615 - [0:0] -:limit-616 - [0:0] -:limit-618 - [0:0] -:limit-619 - [0:0] -:limit-62 - [0:0] -:limit-620 - [0:0] -:limit-622 - [0:0] -:limit-623 - [0:0] -:limit-624 - [0:0] -:limit-625 - [0:0] -:limit-626 - [0:0] -:limit-627 - [0:0] -:limit-628 - [0:0] -:limit-63 - [0:0] -:limit-630 - [0:0] -:limit-631 - [0:0] -:limit-632 - [0:0] -:limit-634 - [0:0] -:limit-635 - [0:0] -:limit-636 - [0:0] -:limit-637 - [0:0] -:limit-638 - [0:0] -:limit-639 - [0:0] -:limit-64 - [0:0] -:limit-640 - [0:0] -:limit-641 - [0:0] -:limit-642 - [0:0] -:limit-643 - [0:0] -:limit-644 - [0:0] -:limit-645 - [0:0] -:limit-646 - [0:0] -:limit-648 - [0:0] -:limit-649 - [0:0] -:limit-65 - [0:0] -:limit-650 - [0:0] -:limit-652 - [0:0] -:limit-653 - [0:0] -:limit-654 - [0:0] -:limit-655 - [0:0] -:limit-656 - [0:0] -:limit-657 - [0:0] -:limit-658 - [0:0] -:limit-66 - [0:0] -:limit-660 - [0:0] -:limit-661 - [0:0] -:limit-662 - [0:0] -:limit-664 - [0:0] -:limit-665 - [0:0] -:limit-666 - [0:0] -:limit-667 - [0:0] -:limit-668 - [0:0] -:limit-669 - [0:0] -:limit-67 - [0:0] -:limit-670 - [0:0] -:limit-672 - [0:0] -:limit-673 - [0:0] -:limit-674 - [0:0] -:limit-676 - [0:0] -:limit-677 - [0:0] -:limit-678 - [0:0] -:limit-679 - [0:0] -:limit-68 - [0:0] -:limit-680 - [0:0] -:limit-681 - [0:0] -:limit-682 - [0:0] -:limit-684 - [0:0] -:limit-685 - [0:0] -:limit-686 - [0:0] -:limit-688 - [0:0] -:limit-689 - [0:0] -:limit-69 - [0:0] -:limit-690 - [0:0] -:limit-691 - [0:0] -:limit-692 - [0:0] -:limit-693 - [0:0] -:limit-694 - [0:0] -:limit-695 - [0:0] -:limit-696 - [0:0] -:limit-697 - [0:0] -:limit-698 - [0:0] -:limit-699 - [0:0] -:limit-7 - [0:0] -:limit-70 - [0:0] -:limit-700 - [0:0] -:limit-701 - [0:0] -:limit-702 - [0:0] -:limit-703 - [0:0] -:limit-704 - [0:0] -:limit-705 - [0:0] -:limit-706 - [0:0] -:limit-707 - [0:0] -:limit-708 - [0:0] -:limit-709 - [0:0] -:limit-71 - [0:0] -:limit-710 - [0:0] -:limit-711 - [0:0] -:limit-712 - [0:0] -:limit-713 - [0:0] -:limit-714 - [0:0] -:limit-715 - [0:0] -:limit-716 - [0:0] -:limit-717 - [0:0] -:limit-718 - [0:0] -:limit-719 - [0:0] -:limit-72 - [0:0] -:limit-720 - [0:0] -:limit-721 - [0:0] -:limit-722 - [0:0] -:limit-723 - [0:0] -:limit-724 - [0:0] -:limit-725 - [0:0] -:limit-726 - [0:0] -:limit-727 - [0:0] -:limit-728 - [0:0] -:limit-729 - [0:0] -:limit-73 - [0:0] -:limit-730 - [0:0] -:limit-731 - [0:0] -:limit-732 - [0:0] -:limit-733 - [0:0] -:limit-734 - [0:0] -:limit-735 - [0:0] -:limit-736 - [0:0] -:limit-737 - [0:0] -:limit-738 - [0:0] -:limit-739 - [0:0] -:limit-74 - [0:0] -:limit-740 - [0:0] -:limit-741 - [0:0] -:limit-742 - [0:0] -:limit-743 - [0:0] -:limit-744 - [0:0] -:limit-745 - [0:0] -:limit-746 - [0:0] -:limit-747 - [0:0] -:limit-748 - [0:0] -:limit-749 - [0:0] -:limit-75 - [0:0] -:limit-750 - [0:0] -:limit-751 - [0:0] -:limit-752 - [0:0] -:limit-753 - [0:0] -:limit-754 - [0:0] -:limit-755 - [0:0] -:limit-756 - [0:0] -:limit-757 - [0:0] -:limit-758 - [0:0] -:limit-759 - [0:0] -:limit-76 - [0:0] -:limit-760 - [0:0] -:limit-761 - [0:0] -:limit-762 - [0:0] -:limit-763 - [0:0] -:limit-764 - [0:0] -:limit-765 - [0:0] -:limit-766 - [0:0] -:limit-767 - [0:0] -:limit-768 - [0:0] -:limit-769 - [0:0] -:limit-77 - [0:0] -:limit-770 - [0:0] -:limit-771 - [0:0] -:limit-772 - [0:0] -:limit-773 - [0:0] -:limit-774 - [0:0] -:limit-775 - [0:0] -:limit-776 - [0:0] -:limit-777 - [0:0] -:limit-778 - [0:0] -:limit-779 - [0:0] -:limit-78 - [0:0] -:limit-780 - [0:0] -:limit-781 - [0:0] -:limit-782 - [0:0] -:limit-783 - [0:0] -:limit-784 - [0:0] -:limit-785 - [0:0] -:limit-786 - [0:0] -:limit-787 - [0:0] -:limit-788 - [0:0] -:limit-789 - [0:0] -:limit-79 - [0:0] -:limit-790 - [0:0] -:limit-791 - [0:0] -:limit-792 - [0:0] -:limit-793 - [0:0] -:limit-794 - [0:0] -:limit-795 - [0:0] -:limit-796 - [0:0] -:limit-797 - [0:0] -:limit-798 - [0:0] -:limit-799 - [0:0] -:limit-8 - [0:0] -:limit-80 - [0:0] -:limit-800 - [0:0] -:limit-801 - [0:0] -:limit-802 - [0:0] -:limit-803 - [0:0] -:limit-804 - [0:0] -:limit-805 - [0:0] -:limit-806 - [0:0] -:limit-807 - [0:0] -:limit-808 - [0:0] -:limit-809 - [0:0] -:limit-81 - [0:0] -:limit-810 - [0:0] -:limit-811 - [0:0] -:limit-812 - [0:0] -:limit-813 - [0:0] -:limit-814 - [0:0] -:limit-815 - [0:0] -:limit-816 - [0:0] -:limit-817 - [0:0] -:limit-818 - [0:0] -:limit-819 - [0:0] -:limit-82 - [0:0] -:limit-820 - [0:0] -:limit-821 - [0:0] -:limit-822 - [0:0] -:limit-823 - [0:0] -:limit-824 - [0:0] -:limit-825 - [0:0] -:limit-826 - [0:0] -:limit-827 - [0:0] -:limit-828 - [0:0] -:limit-829 - [0:0] -:limit-83 - [0:0] -:limit-830 - [0:0] -:limit-831 - [0:0] -:limit-832 - [0:0] -:limit-833 - [0:0] -:limit-834 - [0:0] -:limit-835 - [0:0] -:limit-836 - [0:0] -:limit-837 - [0:0] -:limit-838 - [0:0] -:limit-839 - [0:0] -:limit-84 - [0:0] -:limit-840 - [0:0] -:limit-841 - [0:0] -:limit-842 - [0:0] -:limit-843 - [0:0] -:limit-844 - [0:0] -:limit-845 - [0:0] -:limit-846 - [0:0] -:limit-847 - [0:0] -:limit-848 - [0:0] -:limit-849 - [0:0] -:limit-85 - [0:0] -:limit-850 - [0:0] -:limit-851 - [0:0] -:limit-852 - [0:0] -:limit-853 - [0:0] -:limit-854 - [0:0] -:limit-855 - [0:0] -:limit-856 - [0:0] -:limit-857 - [0:0] -:limit-858 - [0:0] -:limit-859 - [0:0] -:limit-86 - [0:0] -:limit-860 - [0:0] -:limit-861 - [0:0] -:limit-862 - [0:0] -:limit-863 - [0:0] -:limit-864 - [0:0] -:limit-865 - [0:0] -:limit-866 - [0:0] -:limit-867 - [0:0] -:limit-868 - [0:0] -:limit-869 - [0:0] -:limit-87 - [0:0] -:limit-870 - [0:0] -:limit-871 - [0:0] -:limit-872 - [0:0] -:limit-873 - [0:0] -:limit-874 - [0:0] -:limit-875 - [0:0] -:limit-876 - [0:0] -:limit-877 - [0:0] -:limit-878 - [0:0] -:limit-879 - [0:0] -:limit-88 - [0:0] -:limit-880 - [0:0] -:limit-881 - [0:0] -:limit-882 - [0:0] -:limit-883 - [0:0] -:limit-884 - [0:0] -:limit-885 - [0:0] -:limit-886 - [0:0] -:limit-887 - [0:0] -:limit-888 - [0:0] -:limit-889 - [0:0] -:limit-89 - [0:0] -:limit-890 - [0:0] -:limit-891 - [0:0] -:limit-892 - [0:0] -:limit-893 - [0:0] -:limit-894 - [0:0] -:limit-895 - [0:0] -:limit-896 - [0:0] -:limit-897 - [0:0] -:limit-898 - [0:0] -:limit-899 - [0:0] -:limit-9 - [0:0] -:limit-90 - [0:0] -:limit-900 - [0:0] -:limit-901 - [0:0] -:limit-902 - [0:0] -:limit-903 - [0:0] -:limit-904 - [0:0] -:limit-905 - [0:0] -:limit-906 - [0:0] -:limit-907 - [0:0] -:limit-908 - [0:0] -:limit-909 - [0:0] -:limit-91 - [0:0] -:limit-910 - [0:0] -:limit-911 - [0:0] -:limit-912 - [0:0] -:limit-913 - [0:0] -:limit-914 - [0:0] -:limit-915 - [0:0] -:limit-916 - [0:0] -:limit-917 - [0:0] -:limit-918 - [0:0] -:limit-919 - [0:0] -:limit-92 - [0:0] -:limit-920 - [0:0] -:limit-921 - [0:0] -:limit-922 - [0:0] -:limit-923 - [0:0] -:limit-924 - [0:0] -:limit-925 - [0:0] -:limit-926 - [0:0] -:limit-927 - [0:0] -:limit-928 - [0:0] -:limit-929 - [0:0] -:limit-93 - [0:0] -:limit-930 - [0:0] -:limit-931 - [0:0] -:limit-932 - [0:0] -:limit-933 - [0:0] -:limit-934 - [0:0] -:limit-935 - [0:0] -:limit-936 - [0:0] -:limit-937 - [0:0] -:limit-938 - [0:0] -:limit-939 - [0:0] -:limit-94 - [0:0] -:limit-940 - [0:0] -:limit-941 - [0:0] -:limit-942 - [0:0] -:limit-943 - [0:0] -:limit-944 - [0:0] -:limit-945 - [0:0] -:limit-946 - [0:0] -:limit-947 - [0:0] -:limit-948 - [0:0] -:limit-949 - [0:0] -:limit-95 - [0:0] -:limit-950 - [0:0] -:limit-951 - [0:0] -:limit-952 - [0:0] -:limit-953 - [0:0] -:limit-954 - [0:0] -:limit-955 - [0:0] -:limit-956 - [0:0] -:limit-957 - [0:0] -:limit-958 - [0:0] -:limit-959 - [0:0] -:limit-96 - [0:0] -:limit-960 - [0:0] -:limit-961 - [0:0] -:limit-962 - [0:0] -:limit-963 - [0:0] -:limit-964 - [0:0] -:limit-965 - [0:0] -:limit-966 - [0:0] -:limit-967 - [0:0] -:limit-968 - [0:0] -:limit-969 - [0:0] -:limit-97 - [0:0] -:limit-970 - [0:0] -:limit-971 - [0:0] -:limit-972 - [0:0] -:limit-973 - [0:0] -:limit-974 - [0:0] -:limit-975 - [0:0] -:limit-976 - [0:0] -:limit-977 - [0:0] -:limit-978 - [0:0] -:limit-979 - [0:0] -:limit-98 - [0:0] -:limit-980 - [0:0] -:limit-981 - [0:0] -:limit-982 - [0:0] -:limit-983 - [0:0] -:limit-984 - [0:0] -:limit-985 - [0:0] -:limit-986 - [0:0] -:limit-987 - [0:0] -:limit-988 - [0:0] -:limit-989 - [0:0] -:limit-99 - [0:0] -:limit-990 - [0:0] -:limit-991 - [0:0] -:limit-992 - [0:0] -:limit-993 - [0:0] -:limit-994 - [0:0] -:limit-995 - [0:0] -:limit-996 - [0:0] -:limit-997 - [0:0] -:limit-998 - [0:0] -:limit-999 - [0:0] -:logaccept-0 - [0:0] -:logaccept-1 - [0:0] -:logaccept-10 - [0:0] -:logaccept-11 - [0:0] -:logaccept-12 - [0:0] -:logaccept-13 - [0:0] -:logaccept-14 - [0:0] -:logaccept-15 - [0:0] -:logaccept-16 - [0:0] -:logaccept-17 - [0:0] -:logaccept-18 - [0:0] -:logaccept-19 - [0:0] -:logaccept-2 - [0:0] -:logaccept-20 - [0:0] -:logaccept-21 - [0:0] -:logaccept-22 - [0:0] -:logaccept-23 - [0:0] -:logaccept-24 - [0:0] -:logaccept-25 - [0:0] -:logaccept-26 - [0:0] -:logaccept-27 - [0:0] -:logaccept-28 - [0:0] -:logaccept-29 - [0:0] -:logaccept-3 - [0:0] -:logaccept-30 - [0:0] -:logaccept-31 - [0:0] -:logaccept-32 - [0:0] -:logaccept-33 - [0:0] -:logaccept-34 - [0:0] -:logaccept-35 - [0:0] -:logaccept-36 - [0:0] -:logaccept-37 - [0:0] -:logaccept-38 - [0:0] -:logaccept-39 - [0:0] -:logaccept-4 - [0:0] -:logaccept-40 - [0:0] -:logaccept-41 - [0:0] -:logaccept-42 - [0:0] -:logaccept-43 - [0:0] -:logaccept-44 - [0:0] -:logaccept-45 - [0:0] -:logaccept-46 - [0:0] -:logaccept-47 - [0:0] -:logaccept-48 - [0:0] -:logaccept-49 - [0:0] -:logaccept-5 - [0:0] -:logaccept-50 - [0:0] -:logaccept-51 - [0:0] -:logaccept-52 - [0:0] -:logaccept-53 - [0:0] -:logaccept-54 - [0:0] -:logaccept-55 - [0:0] -:logaccept-56 - [0:0] -:logaccept-57 - [0:0] -:logaccept-58 - [0:0] -:logaccept-59 - [0:0] -:logaccept-6 - [0:0] -:logaccept-60 - [0:0] -:logaccept-61 - [0:0] -:logaccept-62 - [0:0] -:logaccept-63 - [0:0] -:logaccept-64 - [0:0] -:logaccept-65 - [0:0] -:logaccept-66 - [0:0] -:logaccept-67 - [0:0] -:logaccept-68 - [0:0] -:logaccept-69 - [0:0] -:logaccept-7 - [0:0] -:logaccept-70 - [0:0] -:logaccept-71 - [0:0] -:logaccept-72 - [0:0] -:logaccept-73 - [0:0] -:logaccept-74 - [0:0] -:logaccept-75 - [0:0] -:logaccept-76 - [0:0] -:logaccept-77 - [0:0] -:logaccept-78 - [0:0] -:logaccept-79 - [0:0] -:logaccept-8 - [0:0] -:logaccept-80 - [0:0] -:logaccept-81 - [0:0] -:logaccept-82 - [0:0] -:logaccept-83 - [0:0] -:logaccept-84 - [0:0] -:logaccept-9 - [0:0] -:logaccept-final-0 - [0:0] -:logaccept-final-1 - [0:0] -:logaccept-final-10 - [0:0] -:logaccept-final-11 - [0:0] -:logaccept-final-12 - [0:0] -:logaccept-final-13 - [0:0] -:logaccept-final-14 - [0:0] -:logaccept-final-15 - [0:0] -:logaccept-final-16 - [0:0] -:logaccept-final-17 - [0:0] -:logaccept-final-18 - [0:0] -:logaccept-final-19 - [0:0] -:logaccept-final-2 - [0:0] -:logaccept-final-20 - [0:0] -:logaccept-final-21 - [0:0] -:logaccept-final-22 - [0:0] -:logaccept-final-23 - [0:0] -:logaccept-final-24 - [0:0] -:logaccept-final-25 - [0:0] -:logaccept-final-26 - [0:0] -:logaccept-final-27 - [0:0] -:logaccept-final-28 - [0:0] -:logaccept-final-29 - [0:0] -:logaccept-final-3 - [0:0] -:logaccept-final-30 - [0:0] -:logaccept-final-31 - [0:0] -:logaccept-final-32 - [0:0] -:logaccept-final-33 - [0:0] -:logaccept-final-34 - [0:0] -:logaccept-final-35 - [0:0] -:logaccept-final-36 - [0:0] -:logaccept-final-37 - [0:0] -:logaccept-final-38 - [0:0] -:logaccept-final-39 - [0:0] -:logaccept-final-4 - [0:0] -:logaccept-final-40 - [0:0] -:logaccept-final-41 - [0:0] -:logaccept-final-42 - [0:0] -:logaccept-final-43 - [0:0] -:logaccept-final-44 - [0:0] -:logaccept-final-45 - [0:0] -:logaccept-final-46 - [0:0] -:logaccept-final-47 - [0:0] -:logaccept-final-48 - [0:0] -:logaccept-final-49 - [0:0] -:logaccept-final-5 - [0:0] -:logaccept-final-50 - [0:0] -:logaccept-final-51 - [0:0] -:logaccept-final-52 - [0:0] -:logaccept-final-53 - [0:0] -:logaccept-final-54 - [0:0] -:logaccept-final-55 - [0:0] -:logaccept-final-56 - [0:0] -:logaccept-final-57 - [0:0] -:logaccept-final-58 - [0:0] -:logaccept-final-59 - [0:0] -:logaccept-final-6 - [0:0] -:logaccept-final-60 - [0:0] -:logaccept-final-61 - [0:0] -:logaccept-final-7 - [0:0] -:logaccept-final-8 - [0:0] -:logaccept-final-9 - [0:0] -:logdrop-0 - [0:0] -:logdrop-1 - [0:0] -:logdrop-10 - [0:0] -:logdrop-100 - [0:0] -:logdrop-101 - [0:0] -:logdrop-102 - [0:0] -:logdrop-103 - [0:0] -:logdrop-104 - [0:0] -:logdrop-105 - [0:0] -:logdrop-106 - [0:0] -:logdrop-107 - [0:0] -:logdrop-108 - [0:0] -:logdrop-109 - [0:0] -:logdrop-11 - [0:0] -:logdrop-110 - [0:0] -:logdrop-111 - [0:0] -:logdrop-112 - [0:0] -:logdrop-113 - [0:0] -:logdrop-114 - [0:0] -:logdrop-115 - [0:0] -:logdrop-116 - [0:0] -:logdrop-117 - [0:0] -:logdrop-118 - [0:0] -:logdrop-119 - [0:0] -:logdrop-12 - [0:0] -:logdrop-120 - [0:0] -:logdrop-121 - [0:0] -:logdrop-122 - [0:0] -:logdrop-123 - [0:0] -:logdrop-124 - [0:0] -:logdrop-125 - [0:0] -:logdrop-126 - [0:0] -:logdrop-127 - [0:0] -:logdrop-128 - [0:0] -:logdrop-129 - [0:0] -:logdrop-13 - [0:0] -:logdrop-130 - [0:0] -:logdrop-131 - [0:0] -:logdrop-132 - [0:0] -:logdrop-133 - [0:0] -:logdrop-134 - [0:0] -:logdrop-135 - [0:0] -:logdrop-136 - [0:0] -:logdrop-137 - [0:0] -:logdrop-138 - [0:0] -:logdrop-139 - [0:0] -:logdrop-14 - [0:0] -:logdrop-140 - [0:0] -:logdrop-141 - [0:0] -:logdrop-142 - [0:0] -:logdrop-143 - [0:0] -:logdrop-144 - [0:0] -:logdrop-145 - [0:0] -:logdrop-146 - [0:0] -:logdrop-147 - [0:0] -:logdrop-148 - [0:0] -:logdrop-149 - [0:0] -:logdrop-15 - [0:0] -:logdrop-150 - [0:0] -:logdrop-151 - [0:0] -:logdrop-152 - [0:0] -:logdrop-153 - [0:0] -:logdrop-154 - [0:0] -:logdrop-155 - [0:0] -:logdrop-156 - [0:0] -:logdrop-157 - [0:0] -:logdrop-158 - [0:0] -:logdrop-159 - [0:0] -:logdrop-16 - [0:0] -:logdrop-160 - [0:0] -:logdrop-161 - [0:0] -:logdrop-162 - [0:0] -:logdrop-163 - [0:0] -:logdrop-164 - [0:0] -:logdrop-165 - [0:0] -:logdrop-166 - [0:0] -:logdrop-167 - [0:0] -:logdrop-168 - [0:0] -:logdrop-169 - [0:0] -:logdrop-17 - [0:0] -:logdrop-170 - [0:0] -:logdrop-171 - [0:0] -:logdrop-172 - [0:0] -:logdrop-173 - [0:0] -:logdrop-174 - [0:0] -:logdrop-175 - [0:0] -:logdrop-176 - [0:0] -:logdrop-177 - [0:0] -:logdrop-178 - [0:0] -:logdrop-179 - [0:0] -:logdrop-18 - [0:0] -:logdrop-180 - [0:0] -:logdrop-181 - [0:0] -:logdrop-182 - [0:0] -:logdrop-183 - [0:0] -:logdrop-184 - [0:0] -:logdrop-185 - [0:0] -:logdrop-186 - [0:0] -:logdrop-187 - [0:0] -:logdrop-188 - [0:0] -:logdrop-189 - [0:0] -:logdrop-19 - [0:0] -:logdrop-190 - [0:0] -:logdrop-191 - [0:0] -:logdrop-192 - [0:0] -:logdrop-193 - [0:0] -:logdrop-194 - [0:0] -:logdrop-195 - [0:0] -:logdrop-196 - [0:0] -:logdrop-197 - [0:0] -:logdrop-198 - [0:0] -:logdrop-199 - [0:0] -:logdrop-2 - [0:0] -:logdrop-20 - [0:0] -:logdrop-200 - [0:0] -:logdrop-201 - [0:0] -:logdrop-202 - [0:0] -:logdrop-203 - [0:0] -:logdrop-204 - [0:0] -:logdrop-205 - [0:0] -:logdrop-206 - [0:0] -:logdrop-207 - [0:0] -:logdrop-208 - [0:0] -:logdrop-209 - [0:0] -:logdrop-21 - [0:0] -:logdrop-210 - [0:0] -:logdrop-211 - [0:0] -:logdrop-212 - [0:0] -:logdrop-213 - [0:0] -:logdrop-214 - [0:0] -:logdrop-215 - [0:0] -:logdrop-216 - [0:0] -:logdrop-217 - [0:0] -:logdrop-218 - [0:0] -:logdrop-219 - [0:0] -:logdrop-22 - [0:0] -:logdrop-220 - [0:0] -:logdrop-221 - [0:0] -:logdrop-222 - [0:0] -:logdrop-223 - [0:0] -:logdrop-224 - [0:0] -:logdrop-225 - [0:0] -:logdrop-226 - [0:0] -:logdrop-227 - [0:0] -:logdrop-228 - [0:0] -:logdrop-229 - [0:0] -:logdrop-23 - [0:0] -:logdrop-230 - [0:0] -:logdrop-231 - [0:0] -:logdrop-232 - [0:0] -:logdrop-233 - [0:0] -:logdrop-234 - [0:0] -:logdrop-235 - [0:0] -:logdrop-236 - [0:0] -:logdrop-237 - [0:0] -:logdrop-238 - [0:0] -:logdrop-239 - [0:0] -:logdrop-24 - [0:0] -:logdrop-240 - [0:0] -:logdrop-241 - [0:0] -:logdrop-242 - [0:0] -:logdrop-243 - [0:0] -:logdrop-244 - [0:0] -:logdrop-245 - [0:0] -:logdrop-246 - [0:0] -:logdrop-247 - [0:0] -:logdrop-248 - [0:0] -:logdrop-249 - [0:0] -:logdrop-25 - [0:0] -:logdrop-250 - [0:0] -:logdrop-251 - [0:0] -:logdrop-252 - [0:0] -:logdrop-253 - [0:0] -:logdrop-254 - [0:0] -:logdrop-255 - [0:0] -:logdrop-256 - [0:0] -:logdrop-257 - [0:0] -:logdrop-258 - [0:0] -:logdrop-259 - [0:0] -:logdrop-26 - [0:0] -:logdrop-260 - [0:0] -:logdrop-261 - [0:0] -:logdrop-262 - [0:0] -:logdrop-263 - [0:0] -:logdrop-264 - [0:0] -:logdrop-265 - [0:0] -:logdrop-266 - [0:0] -:logdrop-267 - [0:0] -:logdrop-268 - [0:0] -:logdrop-269 - [0:0] -:logdrop-27 - [0:0] -:logdrop-270 - [0:0] -:logdrop-271 - [0:0] -:logdrop-272 - [0:0] -:logdrop-273 - [0:0] -:logdrop-274 - [0:0] -:logdrop-275 - [0:0] -:logdrop-276 - [0:0] -:logdrop-277 - [0:0] -:logdrop-278 - [0:0] -:logdrop-279 - [0:0] -:logdrop-28 - [0:0] -:logdrop-280 - [0:0] -:logdrop-281 - [0:0] -:logdrop-282 - [0:0] -:logdrop-283 - [0:0] -:logdrop-284 - [0:0] -:logdrop-285 - [0:0] -:logdrop-286 - [0:0] -:logdrop-287 - [0:0] -:logdrop-288 - [0:0] -:logdrop-289 - [0:0] -:logdrop-29 - [0:0] -:logdrop-290 - [0:0] -:logdrop-291 - [0:0] -:logdrop-292 - [0:0] -:logdrop-293 - [0:0] -:logdrop-294 - [0:0] -:logdrop-295 - [0:0] -:logdrop-296 - [0:0] -:logdrop-297 - [0:0] -:logdrop-298 - [0:0] -:logdrop-299 - [0:0] -:logdrop-3 - [0:0] -:logdrop-30 - [0:0] -:logdrop-300 - [0:0] -:logdrop-301 - [0:0] -:logdrop-302 - [0:0] -:logdrop-303 - [0:0] -:logdrop-304 - [0:0] -:logdrop-305 - [0:0] -:logdrop-306 - [0:0] -:logdrop-307 - [0:0] -:logdrop-308 - [0:0] -:logdrop-309 - [0:0] -:logdrop-31 - [0:0] -:logdrop-310 - [0:0] -:logdrop-311 - [0:0] -:logdrop-312 - [0:0] -:logdrop-313 - [0:0] -:logdrop-314 - [0:0] -:logdrop-315 - [0:0] -:logdrop-316 - [0:0] -:logdrop-317 - [0:0] -:logdrop-318 - [0:0] -:logdrop-319 - [0:0] -:logdrop-32 - [0:0] -:logdrop-320 - [0:0] -:logdrop-321 - [0:0] -:logdrop-322 - [0:0] -:logdrop-323 - [0:0] -:logdrop-324 - [0:0] -:logdrop-325 - [0:0] -:logdrop-326 - [0:0] -:logdrop-327 - [0:0] -:logdrop-328 - [0:0] -:logdrop-329 - [0:0] -:logdrop-33 - [0:0] -:logdrop-330 - [0:0] -:logdrop-331 - [0:0] -:logdrop-332 - [0:0] -:logdrop-333 - [0:0] -:logdrop-334 - [0:0] -:logdrop-335 - [0:0] -:logdrop-336 - [0:0] -:logdrop-337 - [0:0] -:logdrop-338 - [0:0] -:logdrop-339 - [0:0] -:logdrop-34 - [0:0] -:logdrop-340 - [0:0] -:logdrop-341 - [0:0] -:logdrop-342 - [0:0] -:logdrop-343 - [0:0] -:logdrop-344 - [0:0] -:logdrop-345 - [0:0] -:logdrop-346 - [0:0] -:logdrop-347 - [0:0] -:logdrop-348 - [0:0] -:logdrop-349 - [0:0] -:logdrop-35 - [0:0] -:logdrop-350 - [0:0] -:logdrop-351 - [0:0] -:logdrop-352 - [0:0] -:logdrop-353 - [0:0] -:logdrop-354 - [0:0] -:logdrop-355 - [0:0] -:logdrop-356 - [0:0] -:logdrop-357 - [0:0] -:logdrop-358 - [0:0] -:logdrop-359 - [0:0] -:logdrop-36 - [0:0] -:logdrop-360 - [0:0] -:logdrop-361 - [0:0] -:logdrop-362 - [0:0] -:logdrop-363 - [0:0] -:logdrop-364 - [0:0] -:logdrop-365 - [0:0] -:logdrop-366 - [0:0] -:logdrop-367 - [0:0] -:logdrop-368 - [0:0] -:logdrop-369 - [0:0] -:logdrop-37 - [0:0] -:logdrop-370 - [0:0] -:logdrop-371 - [0:0] -:logdrop-372 - [0:0] -:logdrop-373 - [0:0] -:logdrop-374 - [0:0] -:logdrop-375 - [0:0] -:logdrop-376 - [0:0] -:logdrop-377 - [0:0] -:logdrop-378 - [0:0] -:logdrop-379 - [0:0] -:logdrop-38 - [0:0] -:logdrop-380 - [0:0] -:logdrop-381 - [0:0] -:logdrop-382 - [0:0] -:logdrop-383 - [0:0] -:logdrop-384 - [0:0] -:logdrop-385 - [0:0] -:logdrop-386 - [0:0] -:logdrop-387 - [0:0] -:logdrop-388 - [0:0] -:logdrop-389 - [0:0] -:logdrop-39 - [0:0] -:logdrop-390 - [0:0] -:logdrop-391 - [0:0] -:logdrop-392 - [0:0] -:logdrop-393 - [0:0] -:logdrop-394 - [0:0] -:logdrop-395 - [0:0] -:logdrop-396 - [0:0] -:logdrop-397 - [0:0] -:logdrop-398 - [0:0] -:logdrop-399 - [0:0] -:logdrop-4 - [0:0] -:logdrop-40 - [0:0] -:logdrop-400 - [0:0] -:logdrop-401 - [0:0] -:logdrop-402 - [0:0] -:logdrop-403 - [0:0] -:logdrop-404 - [0:0] -:logdrop-405 - [0:0] -:logdrop-406 - [0:0] -:logdrop-407 - [0:0] -:logdrop-408 - [0:0] -:logdrop-409 - [0:0] -:logdrop-41 - [0:0] -:logdrop-410 - [0:0] -:logdrop-411 - [0:0] -:logdrop-412 - [0:0] -:logdrop-413 - [0:0] -:logdrop-414 - [0:0] -:logdrop-415 - [0:0] -:logdrop-416 - [0:0] -:logdrop-417 - [0:0] -:logdrop-418 - [0:0] -:logdrop-419 - [0:0] -:logdrop-42 - [0:0] -:logdrop-420 - [0:0] -:logdrop-421 - [0:0] -:logdrop-422 - [0:0] -:logdrop-423 - [0:0] -:logdrop-424 - [0:0] -:logdrop-425 - [0:0] -:logdrop-426 - [0:0] -:logdrop-427 - [0:0] -:logdrop-428 - [0:0] -:logdrop-429 - [0:0] -:logdrop-43 - [0:0] -:logdrop-430 - [0:0] -:logdrop-431 - [0:0] -:logdrop-432 - [0:0] -:logdrop-433 - [0:0] -:logdrop-434 - [0:0] -:logdrop-435 - [0:0] -:logdrop-436 - [0:0] -:logdrop-437 - [0:0] -:logdrop-438 - [0:0] -:logdrop-439 - [0:0] -:logdrop-44 - [0:0] -:logdrop-440 - [0:0] -:logdrop-441 - [0:0] -:logdrop-442 - [0:0] -:logdrop-443 - [0:0] -:logdrop-444 - [0:0] -:logdrop-445 - [0:0] -:logdrop-446 - [0:0] -:logdrop-447 - [0:0] -:logdrop-448 - [0:0] -:logdrop-449 - [0:0] -:logdrop-45 - [0:0] -:logdrop-450 - [0:0] -:logdrop-451 - [0:0] -:logdrop-452 - [0:0] -:logdrop-453 - [0:0] -:logdrop-454 - [0:0] -:logdrop-455 - [0:0] -:logdrop-456 - [0:0] -:logdrop-457 - [0:0] -:logdrop-458 - [0:0] -:logdrop-46 - [0:0] -:logdrop-47 - [0:0] -:logdrop-48 - [0:0] -:logdrop-49 - [0:0] -:logdrop-5 - [0:0] -:logdrop-50 - [0:0] -:logdrop-51 - [0:0] -:logdrop-52 - [0:0] -:logdrop-53 - [0:0] -:logdrop-54 - [0:0] -:logdrop-55 - [0:0] -:logdrop-56 - [0:0] -:logdrop-57 - [0:0] -:logdrop-58 - [0:0] -:logdrop-59 - [0:0] -:logdrop-6 - [0:0] -:logdrop-60 - [0:0] -:logdrop-61 - [0:0] -:logdrop-62 - [0:0] -:logdrop-63 - [0:0] -:logdrop-64 - [0:0] -:logdrop-65 - [0:0] -:logdrop-66 - [0:0] -:logdrop-67 - [0:0] -:logdrop-68 - [0:0] -:logdrop-69 - [0:0] -:logdrop-7 - [0:0] -:logdrop-70 - [0:0] -:logdrop-71 - [0:0] -:logdrop-72 - [0:0] -:logdrop-73 - [0:0] -:logdrop-74 - [0:0] -:logdrop-75 - [0:0] -:logdrop-76 - [0:0] -:logdrop-77 - [0:0] -:logdrop-78 - [0:0] -:logdrop-79 - [0:0] -:logdrop-8 - [0:0] -:logdrop-80 - [0:0] -:logdrop-81 - [0:0] -:logdrop-82 - [0:0] -:logdrop-83 - [0:0] -:logdrop-84 - [0:0] -:logdrop-85 - [0:0] -:logdrop-86 - [0:0] -:logdrop-87 - [0:0] -:logdrop-88 - [0:0] -:logdrop-89 - [0:0] -:logdrop-9 - [0:0] -:logdrop-90 - [0:0] -:logdrop-91 - [0:0] -:logdrop-92 - [0:0] -:logdrop-93 - [0:0] -:logdrop-94 - [0:0] -:logdrop-95 - [0:0] -:logdrop-96 - [0:0] -:logdrop-97 - [0:0] -:logdrop-98 - [0:0] -:logdrop-99 - [0:0] -:logpass-0 - [0:0] -:logpass-1 - [0:0] -:logpass-10 - [0:0] -:logpass-11 - [0:0] -:logpass-12 - [0:0] -:logpass-13 - [0:0] -:logpass-14 - [0:0] -:logpass-15 - [0:0] -:logpass-16 - [0:0] -:logpass-17 - [0:0] -:logpass-18 - [0:0] -:logpass-19 - [0:0] -:logpass-2 - [0:0] -:logpass-20 - [0:0] -:logpass-21 - [0:0] -:logpass-22 - [0:0] -:logpass-23 - [0:0] -:logpass-24 - [0:0] -:logpass-25 - [0:0] -:logpass-26 - [0:0] -:logpass-27 - [0:0] -:logpass-28 - [0:0] -:logpass-29 - [0:0] -:logpass-3 - [0:0] -:logpass-30 - [0:0] -:logpass-31 - [0:0] -:logpass-32 - [0:0] -:logpass-33 - [0:0] -:logpass-34 - [0:0] -:logpass-35 - [0:0] -:logpass-36 - [0:0] -:logpass-37 - [0:0] -:logpass-38 - [0:0] -:logpass-39 - [0:0] -:logpass-4 - [0:0] -:logpass-40 - [0:0] -:logpass-41 - [0:0] -:logpass-42 - [0:0] -:logpass-43 - [0:0] -:logpass-44 - [0:0] -:logpass-45 - [0:0] -:logpass-46 - [0:0] -:logpass-47 - [0:0] -:logpass-48 - [0:0] -:logpass-49 - [0:0] -:logpass-5 - [0:0] -:logpass-50 - [0:0] -:logpass-6 - [0:0] -:logpass-7 - [0:0] -:logpass-8 - [0:0] -:logpass-9 - [0:0] -:logreject-0 - [0:0] -:logtarpit-0 - [0:0] -:tarpit - [0:0] --A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set --A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set --A FORWARD -j limit-1073 --A FORWARD -j limit-1072 --A FORWARD -j limit-1071 --A FORWARD -j limit-1070 --A FORWARD -j limit-1069 --A FORWARD -j limit-1068 --A FORWARD -j limit-1067 --A FORWARD -j limit-1066 --A FORWARD -j limit-1065 --A FORWARD -j limit-1064 --A FORWARD -j limit-1063 --A FORWARD -j limit-1062 --A FORWARD -j limit-1061 --A FORWARD -j limit-1060 --A FORWARD -j limit-1059 --A FORWARD -j limit-1058 --A FORWARD -j limit-1057 --A FORWARD -j limit-1056 --A FORWARD -j limit-1055 --A FORWARD -j limit-1054 --A FORWARD -j limit-1053 --A FORWARD -j limit-1052 --A FORWARD -j limit-1051 --A FORWARD -j limit-1050 --A FORWARD -j limit-1049 --A FORWARD -j limit-1048 --A FORWARD -j limit-1047 --A FORWARD -j limit-1046 --A FORWARD -j limit-1045 --A FORWARD -j limit-1044 --A FORWARD -j limit-1043 --A FORWARD -j limit-1042 --A FORWARD -j limit-1041 --A FORWARD -j limit-1040 --A FORWARD -j limit-1039 --A FORWARD -j limit-1038 --A FORWARD -j limit-1037 --A FORWARD -j limit-1036 --A FORWARD -j limit-1035 --A FORWARD -j limit-1034 --A FORWARD -j limit-1033 --A FORWARD -j limit-1032 --A FORWARD -j limit-1031 --A FORWARD -j limit-1030 --A FORWARD -j limit-1029 --A FORWARD -j limit-1028 --A FORWARD -j limit-1027 --A FORWARD -j limit-1026 --A FORWARD -j limit-1025 --A FORWARD -j limit-1024 --A FORWARD -j limit-1023 --A FORWARD -j limit-1022 --A FORWARD -j limit-1021 --A FORWARD -j limit-1020 --A FORWARD -j limit-1019 --A FORWARD -j limit-1018 --A FORWARD -j limit-1017 --A FORWARD -j limit-1016 --A FORWARD -j limit-1015 --A FORWARD -j limit-1014 --A FORWARD -j limit-1013 --A FORWARD -j limit-1012 --A FORWARD -j limit-1011 --A FORWARD -j limit-1010 --A FORWARD -j limit-1009 --A FORWARD -j limit-1008 --A FORWARD -j limit-1007 --A FORWARD -j limit-1006 --A FORWARD -j limit-1005 --A FORWARD -j limit-1004 --A FORWARD -j limit-1003 --A FORWARD -j limit-1002 --A FORWARD -j limit-1001 --A FORWARD -j limit-1000 --A FORWARD -j limit-999 --A FORWARD -j limit-998 --A FORWARD -j limit-997 --A FORWARD -j limit-996 --A FORWARD -j limit-995 --A FORWARD -j limit-994 --A FORWARD -j limit-993 --A FORWARD -j limit-992 --A FORWARD -j limit-991 --A FORWARD -j limit-990 --A FORWARD -j limit-989 --A FORWARD -j limit-988 --A FORWARD -j limit-987 --A FORWARD -j limit-986 --A FORWARD -j limit-985 --A FORWARD -j limit-984 --A FORWARD -j limit-983 --A FORWARD -j limit-982 --A FORWARD -j limit-981 --A FORWARD -j limit-980 --A FORWARD -j limit-979 --A FORWARD -j limit-978 --A FORWARD -j limit-977 --A FORWARD -j limit-976 --A FORWARD -j limit-975 --A FORWARD -j limit-974 --A FORWARD -j limit-973 --A FORWARD -j limit-972 --A FORWARD -j limit-971 --A FORWARD -j limit-970 --A FORWARD -j limit-969 --A FORWARD -j limit-968 --A FORWARD -j limit-967 --A FORWARD -j limit-966 --A FORWARD -j limit-965 --A FORWARD -j limit-964 --A FORWARD -j limit-963 --A FORWARD -j limit-962 --A FORWARD -j limit-961 --A FORWARD -j limit-960 --A FORWARD -j limit-959 --A FORWARD -j limit-958 --A FORWARD -j limit-957 --A FORWARD -j limit-956 --A FORWARD -j limit-955 --A FORWARD -j limit-954 --A FORWARD -j limit-953 --A FORWARD -j limit-952 --A FORWARD -j limit-951 --A FORWARD -j limit-950 --A FORWARD -j limit-949 --A FORWARD -j limit-948 --A FORWARD -j limit-947 --A FORWARD -j limit-946 --A FORWARD -j limit-945 --A FORWARD -j limit-944 --A FORWARD -j limit-943 --A FORWARD -j limit-942 --A FORWARD -j limit-941 --A FORWARD -j limit-940 --A FORWARD -j limit-939 --A FORWARD -j limit-938 --A FORWARD -j limit-937 --A FORWARD -j limit-936 --A FORWARD -j limit-935 --A FORWARD -j limit-934 --A FORWARD -j limit-933 --A FORWARD -j limit-932 --A FORWARD -j limit-931 --A FORWARD -j limit-930 --A FORWARD -j limit-929 --A FORWARD -j limit-928 --A FORWARD -j limit-927 --A FORWARD -j limit-926 --A FORWARD -j limit-925 --A FORWARD -j limit-924 --A FORWARD -j limit-923 --A FORWARD -j limit-922 --A FORWARD -j limit-921 --A FORWARD -j limit-920 --A FORWARD -j limit-919 --A FORWARD -j limit-918 --A FORWARD -j limit-917 --A FORWARD -j limit-916 --A FORWARD -j limit-915 --A FORWARD -j limit-914 --A FORWARD -j limit-913 --A FORWARD -j limit-912 --A FORWARD -j limit-911 --A FORWARD -j limit-910 --A FORWARD -j limit-909 --A FORWARD -j limit-908 --A FORWARD -j limit-907 --A FORWARD -j limit-906 --A FORWARD -j limit-905 --A FORWARD -j limit-904 --A FORWARD -j limit-903 --A FORWARD -j limit-902 --A FORWARD -j limit-901 --A FORWARD -j limit-900 --A FORWARD -j limit-899 --A FORWARD -j limit-898 --A FORWARD -j limit-897 --A FORWARD -j limit-896 --A FORWARD -j limit-895 --A FORWARD -j limit-894 --A FORWARD -j limit-893 --A FORWARD -j limit-892 --A FORWARD -j limit-891 --A FORWARD -j limit-890 --A FORWARD -j limit-889 --A FORWARD -j limit-888 --A FORWARD -j limit-887 --A FORWARD -j limit-886 --A FORWARD -j limit-885 --A FORWARD -j limit-884 --A FORWARD -j limit-883 --A FORWARD -j limit-882 --A FORWARD -j limit-881 --A FORWARD -j limit-880 --A FORWARD -j limit-879 --A FORWARD -j limit-878 --A FORWARD -j limit-877 --A FORWARD -j limit-876 --A FORWARD -j limit-875 --A FORWARD -j limit-874 --A FORWARD -j limit-873 --A FORWARD -j limit-872 --A FORWARD -j limit-871 --A FORWARD -j limit-870 --A FORWARD -j limit-869 --A FORWARD -j limit-868 --A FORWARD -j limit-867 --A FORWARD -j limit-866 --A FORWARD -j limit-865 --A FORWARD -j limit-864 --A FORWARD -j limit-863 --A FORWARD -j limit-862 --A FORWARD -j limit-861 --A FORWARD -j limit-860 --A FORWARD -j limit-859 --A FORWARD -j limit-858 --A FORWARD -j limit-857 --A FORWARD -j limit-856 --A FORWARD -j limit-855 --A FORWARD -j limit-854 --A FORWARD -j limit-853 --A FORWARD -j limit-852 --A FORWARD -j limit-851 --A FORWARD -j limit-850 --A FORWARD -j limit-849 --A FORWARD -j limit-848 --A FORWARD -j limit-847 --A FORWARD -j limit-846 --A FORWARD -j limit-845 --A FORWARD -j limit-844 --A FORWARD -j limit-843 --A FORWARD -j limit-842 --A FORWARD -j limit-841 --A FORWARD -j limit-840 --A FORWARD -j limit-839 --A FORWARD -j limit-838 --A FORWARD -j limit-837 --A FORWARD -j limit-836 --A FORWARD -j limit-835 --A FORWARD -j limit-834 --A FORWARD -j limit-833 --A FORWARD -j limit-832 --A FORWARD -j limit-831 --A FORWARD -j limit-830 --A FORWARD -j limit-829 --A FORWARD -j limit-828 --A FORWARD -j limit-827 --A FORWARD -j limit-826 --A FORWARD -j limit-825 --A FORWARD -j limit-824 --A FORWARD -j limit-823 --A FORWARD -j limit-822 --A FORWARD -j limit-821 --A FORWARD -j limit-820 --A FORWARD -j limit-819 --A FORWARD -j limit-818 --A FORWARD -j limit-817 --A FORWARD -j limit-816 --A FORWARD -j limit-815 --A FORWARD -j limit-814 --A FORWARD -j limit-813 --A FORWARD -j limit-812 --A FORWARD -j limit-811 --A FORWARD -j limit-810 --A FORWARD -j limit-809 --A FORWARD -j limit-808 --A FORWARD -j limit-807 --A FORWARD -j limit-806 --A FORWARD -j limit-805 --A FORWARD -j limit-804 --A FORWARD -j limit-803 --A FORWARD -j limit-802 --A FORWARD -j limit-801 --A FORWARD -j limit-800 --A FORWARD -j limit-799 --A FORWARD -j limit-798 --A FORWARD -j limit-797 --A FORWARD -j limit-796 --A FORWARD -j limit-795 --A FORWARD -j limit-794 --A FORWARD -j limit-793 --A FORWARD -j limit-792 --A FORWARD -j limit-791 --A FORWARD -j limit-790 --A FORWARD -j limit-789 --A FORWARD -j limit-788 --A FORWARD -j limit-787 --A FORWARD -j limit-786 --A FORWARD -j limit-785 --A FORWARD -j limit-784 --A FORWARD -j limit-783 --A FORWARD -j limit-782 --A FORWARD -j limit-781 --A FORWARD -j limit-780 --A FORWARD -j limit-779 --A FORWARD -j limit-778 --A FORWARD -j limit-777 --A FORWARD -j limit-776 --A FORWARD -j limit-775 --A FORWARD -j limit-774 --A FORWARD -j limit-773 --A FORWARD -j limit-772 --A FORWARD -j limit-771 --A FORWARD -j limit-770 --A FORWARD -j limit-769 --A FORWARD -j limit-768 --A FORWARD -j limit-767 --A FORWARD -j limit-766 --A FORWARD -j limit-765 --A FORWARD -j limit-764 --A FORWARD -j limit-763 --A FORWARD -j limit-762 --A FORWARD -j limit-761 --A FORWARD -j limit-760 --A FORWARD -j limit-759 --A FORWARD -j limit-758 --A FORWARD -j limit-757 --A FORWARD -j limit-756 --A FORWARD -j limit-755 --A FORWARD -j limit-754 --A FORWARD -j limit-753 --A FORWARD -j limit-752 --A FORWARD -j limit-751 --A FORWARD -j limit-750 --A FORWARD -j limit-749 --A FORWARD -j limit-748 --A FORWARD -j limit-747 --A FORWARD -j limit-746 --A FORWARD -j limit-745 --A FORWARD -j limit-744 --A FORWARD -j limit-743 --A FORWARD -j limit-742 --A FORWARD -j limit-741 --A FORWARD -j limit-740 --A FORWARD -j limit-739 --A FORWARD -j limit-738 --A FORWARD -j limit-737 --A FORWARD -j limit-736 --A FORWARD -j limit-735 --A FORWARD -j limit-734 --A FORWARD -j limit-733 --A FORWARD -j limit-732 --A FORWARD -j limit-731 --A FORWARD -j limit-730 --A FORWARD -j limit-729 --A FORWARD -j limit-728 --A FORWARD -j limit-727 --A FORWARD -j limit-726 --A FORWARD -j limit-725 --A FORWARD -j limit-724 --A FORWARD -j limit-723 --A FORWARD -j limit-722 --A FORWARD -j limit-721 --A FORWARD -j limit-720 --A FORWARD -j limit-719 --A FORWARD -j limit-718 --A FORWARD -j limit-717 --A FORWARD -j limit-716 --A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD --A FORWARD -j logaccept-0 --A FORWARD -j logpass-0 --A FORWARD -d 172.16.0.0/16 -j ACCEPT --A FORWARD -d 172.16.0.0/16 --A FORWARD -d 172.16.0.0/16 -j logaccept-1 --A FORWARD -d 172.16.0.0/16 -j logpass-1 --A FORWARD -d 172.16.0.0/16 -j ACCEPT --A FORWARD -d 172.16.2.0/16 -j ACCEPT --A FORWARD -d 172.16.0.0/16 --A FORWARD -d 172.16.2.0/16 --A FORWARD -d 172.16.0.0/16 -j logaccept-2 --A FORWARD -d 172.16.2.0/16 -j logaccept-2 --A FORWARD -d 172.16.0.0/16 -j logpass-2 --A FORWARD -d 172.16.2.0/16 -j logpass-2 --A FORWARD -s 10.0.0.1 -j ACCEPT --A FORWARD -s 10.0.0.1 --A FORWARD -s 10.0.0.1 -j logaccept-3 --A FORWARD -s 10.0.0.1 -j logpass-3 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 --A FORWARD -s 10.0.0.1 -j ACCEPT --A FORWARD -s 10.0.0.2 -j ACCEPT --A FORWARD -s 10.0.0.1 --A FORWARD -s 10.0.0.2 --A FORWARD -s 10.0.0.1 -j logaccept-6 --A FORWARD -s 10.0.0.2 -j logaccept-6 --A FORWARD -s 10.0.0.1 -j logpass-6 --A FORWARD -s 10.0.0.2 -j logpass-6 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 --A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 --A FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 --A FORWARD -o eth1 -d 10.0.0.0/12 -j logpass-9 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 --A FORWARD -i eth0 -j ACCEPT --A FORWARD -i eth0 --A FORWARD -i eth0 -j logaccept-18 --A FORWARD -i eth0 -j logpass-16 --A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -d 172.16.0.0/16 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-17 --A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -d 172.16.0.0/16 --A FORWARD -i eth0 -d 172.16.2.0/16 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 --A FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-18 --A FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-18 --A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 --A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 --A FORWARD -i eth0 -s 10.0.0.1 -j logpass-19 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 --A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 --A FORWARD -i eth0 -s 10.0.0.2 --A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 --A FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 --A FORWARD -i eth0 -s 10.0.0.1 -j logpass-22 --A FORWARD -i eth0 -s 10.0.0.2 -j logpass-22 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 --A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-30 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 --A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 --A FORWARD -i eth2 -s 10.1.0.0/12 --A FORWARD -i eth3 -s 10.1.0.0/12 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 --A FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 --A FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-37 --A FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-37 --A FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-37 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logdrop-0 --A FORWARD --A FORWARD -j logreject-0 --A FORWARD -j logtarpit-0 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-0 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-1 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-2 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-3 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-4 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-5 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-6 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-7 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-8 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-9 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-10 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-11 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-12 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-13 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-14 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-15 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-16 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-17 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-18 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-19 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-20 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-21 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-22 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-23 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-24 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-25 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-26 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-27 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-28 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-29 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-30 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-31 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-32 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-33 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-34 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-35 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-36 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-37 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-38 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-39 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-43 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-47 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-55 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-59 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-69 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-73 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-77 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-85 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-89 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-97 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-101 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-105 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-109 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-113 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-117 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-127 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-131 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-135 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-139 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-143 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-147 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-151 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-155 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-159 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-163 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-167 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-177 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-181 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-185 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-189 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-193 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-197 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-201 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-205 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-209 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-217 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-221 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-235 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-239 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-247 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-251 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-259 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-263 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-271 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-275 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-289 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-293 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-301 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-305 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-313 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-317 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-325 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-329 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-0 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-1 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-2 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-3 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-4 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-5 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-6 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-7 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-8 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-9 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-10 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-11 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-12 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-13 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-14 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-15 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-16 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-17 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-18 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-19 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-20 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-21 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-22 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-23 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-24 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-25 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-26 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-27 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-28 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-29 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-30 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-31 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-32 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-33 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-34 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-35 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-36 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-37 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-38 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-39 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-40 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-41 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-42 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-43 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-44 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-45 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-46 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-47 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-48 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-49 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-50 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-51 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-52 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-53 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-54 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-55 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-56 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-57 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-58 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-59 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-60 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-61 --A FORWARD -j ACCEPT --A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set --A FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set --A FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set --A FORWARD -m recent --name user:D --rsource --mask 255.255.252.0 --set --A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set --A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set --A FORWARD -j ACCEPT --A FORWARD -j logdrop-457 --A FORWARD --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD --A FORWARD -j logaccept-84 --A FORWARD -j logdrop-458 --A FORWARD -j logpass-50 --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD --A FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A FORWARD -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A FORWARD -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT --A FORWARD -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT --A FORWARD -i eth0 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth0 -o eth4 -j ACCEPT --A FORWARD -i eth0 -o eth5 -j ACCEPT --A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth4 -o eth0 -j ACCEPT --A FORWARD -i eth5 -o eth0 -j ACCEPT --A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth4 -o eth4 -j ACCEPT --A FORWARD -i eth4 -o eth5 -j ACCEPT --A FORWARD -i eth5 -o eth4 -j ACCEPT --A FORWARD -i eth5 -o eth5 -j ACCEPT --A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -p icmp -j icmp-routing --A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set --A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A INPUT -j limit-1073 --A INPUT -j limit-1072 --A INPUT -j limit-1071 --A INPUT -j limit-1070 --A INPUT -j limit-1069 --A INPUT -j limit-1068 --A INPUT -j limit-1067 --A INPUT -j limit-1066 --A INPUT -j limit-1065 --A INPUT -j limit-1064 --A INPUT -j limit-1063 --A INPUT -j limit-1062 --A INPUT -j limit-1061 --A INPUT -j limit-1060 --A INPUT -j limit-1059 --A INPUT -j limit-1058 --A INPUT -j limit-1057 --A INPUT -j limit-1056 --A INPUT -j limit-1055 --A INPUT -j limit-1054 --A INPUT -j limit-1053 --A INPUT -j limit-1052 --A INPUT -j limit-1051 --A INPUT -j limit-1050 --A INPUT -j limit-1049 --A INPUT -j limit-1048 --A INPUT -j limit-1047 --A INPUT -j limit-1046 --A INPUT -j limit-1045 --A INPUT -j limit-1044 --A INPUT -j limit-1043 --A INPUT -j limit-1042 --A INPUT -j limit-1041 --A INPUT -j limit-1040 --A INPUT -j limit-1039 --A INPUT -j limit-1038 --A INPUT -j limit-1037 --A INPUT -j limit-1036 --A INPUT -j limit-1035 --A INPUT -j limit-1034 --A INPUT -j limit-1033 --A INPUT -j limit-1032 --A INPUT -j limit-1031 --A INPUT -j limit-1030 --A INPUT -j limit-1029 --A INPUT -j limit-1028 --A INPUT -j limit-1027 --A INPUT -j limit-1026 --A INPUT -j limit-1025 --A INPUT -j limit-1024 --A INPUT -j limit-1023 --A INPUT -j limit-1022 --A INPUT -j limit-1021 --A INPUT -j limit-1020 --A INPUT -j limit-1019 --A INPUT -j limit-1018 --A INPUT -j limit-1017 --A INPUT -j limit-1016 --A INPUT -j limit-1015 --A INPUT -j limit-1014 --A INPUT -j limit-1013 --A INPUT -j limit-1012 --A INPUT -j limit-1011 --A INPUT -j limit-1010 --A INPUT -j limit-1009 --A INPUT -j limit-1008 --A INPUT -j limit-1007 --A INPUT -j limit-1006 --A INPUT -j limit-1005 --A INPUT -j limit-1004 --A INPUT -j limit-1003 --A INPUT -j limit-1002 --A INPUT -j limit-1001 --A INPUT -j limit-1000 --A INPUT -j limit-999 --A INPUT -j limit-998 --A INPUT -j limit-997 --A INPUT -j limit-996 --A INPUT -j limit-995 --A INPUT -j limit-994 --A INPUT -j limit-993 --A INPUT -j limit-992 --A INPUT -j limit-991 --A INPUT -j limit-990 --A INPUT -j limit-989 --A INPUT -j limit-988 --A INPUT -j limit-987 --A INPUT -j limit-986 --A INPUT -j limit-985 --A INPUT -j limit-984 --A INPUT -j limit-983 --A INPUT -j limit-982 --A INPUT -j limit-981 --A INPUT -j limit-980 --A INPUT -j limit-979 --A INPUT -j limit-978 --A INPUT -j limit-977 --A INPUT -j limit-976 --A INPUT -j limit-975 --A INPUT -j limit-974 --A INPUT -j limit-973 --A INPUT -j limit-972 --A INPUT -j limit-971 --A INPUT -j limit-970 --A INPUT -j limit-969 --A INPUT -j limit-968 --A INPUT -j limit-967 --A INPUT -j limit-966 --A INPUT -j limit-965 --A INPUT -j limit-964 --A INPUT -j limit-963 --A INPUT -j limit-962 --A INPUT -j limit-961 --A INPUT -j limit-960 --A INPUT -j limit-959 --A INPUT -j limit-958 --A INPUT -j limit-957 --A INPUT -j limit-956 --A INPUT -j limit-955 --A INPUT -j limit-954 --A INPUT -j limit-953 --A INPUT -j limit-952 --A INPUT -j limit-951 --A INPUT -j limit-950 --A INPUT -j limit-949 --A INPUT -j limit-948 --A INPUT -j limit-947 --A INPUT -j limit-946 --A INPUT -j limit-945 --A INPUT -j limit-944 --A INPUT -j limit-943 --A INPUT -j limit-942 --A INPUT -j limit-941 --A INPUT -j limit-940 --A INPUT -j limit-939 --A INPUT -j limit-938 --A INPUT -j limit-937 --A INPUT -j limit-936 --A INPUT -j limit-935 --A INPUT -j limit-934 --A INPUT -j limit-933 --A INPUT -j limit-932 --A INPUT -j limit-931 --A INPUT -j limit-930 --A INPUT -j limit-929 --A INPUT -j limit-928 --A INPUT -j limit-927 --A INPUT -j limit-926 --A INPUT -j limit-925 --A INPUT -j limit-924 --A INPUT -j limit-923 --A INPUT -j limit-922 --A INPUT -j limit-921 --A INPUT -j limit-920 --A INPUT -j limit-919 --A INPUT -j limit-918 --A INPUT -j limit-917 --A INPUT -j limit-916 --A INPUT -j limit-915 --A INPUT -j limit-914 --A INPUT -j limit-913 --A INPUT -j limit-912 --A INPUT -j limit-911 --A INPUT -j limit-910 --A INPUT -j limit-909 --A INPUT -j limit-908 --A INPUT -j limit-907 --A INPUT -j limit-906 --A INPUT -j limit-905 --A INPUT -j limit-904 --A INPUT -j limit-903 --A INPUT -j limit-902 --A INPUT -j limit-901 --A INPUT -j limit-900 --A INPUT -j limit-899 --A INPUT -j limit-898 --A INPUT -j limit-897 --A INPUT -j limit-896 --A INPUT -j limit-895 --A INPUT -j limit-894 --A INPUT -j limit-893 --A INPUT -j limit-892 --A INPUT -j limit-891 --A INPUT -j limit-890 --A INPUT -j limit-889 --A INPUT -j limit-888 --A INPUT -j limit-887 --A INPUT -j limit-886 --A INPUT -j limit-885 --A INPUT -j limit-884 --A INPUT -j limit-883 --A INPUT -j limit-882 --A INPUT -j limit-881 --A INPUT -j limit-880 --A INPUT -j limit-879 --A INPUT -j limit-878 --A INPUT -j limit-877 --A INPUT -j limit-876 --A INPUT -j limit-875 --A INPUT -j limit-874 --A INPUT -j limit-873 --A INPUT -j limit-872 --A INPUT -j limit-871 --A INPUT -j limit-870 --A INPUT -j limit-869 --A INPUT -j limit-868 --A INPUT -j limit-867 --A INPUT -j limit-866 --A INPUT -j limit-865 --A INPUT -j limit-864 --A INPUT -j limit-863 --A INPUT -j limit-862 --A INPUT -j limit-861 --A INPUT -j limit-860 --A INPUT -j limit-859 --A INPUT -j limit-858 --A INPUT -j limit-857 --A INPUT -j limit-856 --A INPUT -j limit-855 --A INPUT -j limit-854 --A INPUT -j limit-853 --A INPUT -j limit-852 --A INPUT -j limit-851 --A INPUT -j limit-850 --A INPUT -j limit-849 --A INPUT -j limit-848 --A INPUT -j limit-847 --A INPUT -j limit-846 --A INPUT -j limit-845 --A INPUT -j limit-844 --A INPUT -j limit-843 --A INPUT -j limit-842 --A INPUT -j limit-841 --A INPUT -j limit-840 --A INPUT -j limit-839 --A INPUT -j limit-838 --A INPUT -j limit-837 --A INPUT -j limit-836 --A INPUT -j limit-835 --A INPUT -j limit-834 --A INPUT -j limit-833 --A INPUT -j limit-832 --A INPUT -j limit-831 --A INPUT -j limit-830 --A INPUT -j limit-829 --A INPUT -j limit-828 --A INPUT -j limit-827 --A INPUT -j limit-826 --A INPUT -j limit-825 --A INPUT -j limit-824 --A INPUT -j limit-823 --A INPUT -j limit-822 --A INPUT -j limit-821 --A INPUT -j limit-820 --A INPUT -j limit-819 --A INPUT -j limit-818 --A INPUT -j limit-817 --A INPUT -j limit-816 --A INPUT -j limit-815 --A INPUT -j limit-814 --A INPUT -j limit-813 --A INPUT -j limit-812 --A INPUT -j limit-811 --A INPUT -j limit-810 --A INPUT -j limit-809 --A INPUT -j limit-808 --A INPUT -j limit-807 --A INPUT -j limit-806 --A INPUT -j limit-805 --A INPUT -j limit-804 --A INPUT -j limit-803 --A INPUT -j limit-802 --A INPUT -j limit-801 --A INPUT -j limit-800 --A INPUT -j limit-799 --A INPUT -j limit-798 --A INPUT -j limit-797 --A INPUT -j limit-796 --A INPUT -j limit-795 --A INPUT -j limit-794 --A INPUT -j limit-793 --A INPUT -j limit-792 --A INPUT -j limit-791 --A INPUT -j limit-790 --A INPUT -j limit-789 --A INPUT -j limit-788 --A INPUT -j limit-787 --A INPUT -j limit-786 --A INPUT -j limit-785 --A INPUT -j limit-784 --A INPUT -j limit-783 --A INPUT -j limit-782 --A INPUT -j limit-781 --A INPUT -j limit-780 --A INPUT -j limit-779 --A INPUT -j limit-778 --A INPUT -j limit-777 --A INPUT -j limit-776 --A INPUT -j limit-775 --A INPUT -j limit-774 --A INPUT -j limit-773 --A INPUT -j limit-772 --A INPUT -j limit-771 --A INPUT -j limit-770 --A INPUT -j limit-769 --A INPUT -j limit-768 --A INPUT -j limit-767 --A INPUT -j limit-766 --A INPUT -j limit-765 --A INPUT -j limit-764 --A INPUT -j limit-763 --A INPUT -j limit-762 --A INPUT -j limit-761 --A INPUT -j limit-760 --A INPUT -j limit-759 --A INPUT -j limit-758 --A INPUT -j limit-757 --A INPUT -j limit-756 --A INPUT -j limit-755 --A INPUT -j limit-754 --A INPUT -j limit-753 --A INPUT -j limit-752 --A INPUT -j limit-751 --A INPUT -j limit-750 --A INPUT -j limit-749 --A INPUT -j limit-748 --A INPUT -j limit-747 --A INPUT -j limit-746 --A INPUT -j limit-745 --A INPUT -j limit-744 --A INPUT -j limit-743 --A INPUT -j limit-742 --A INPUT -j limit-741 --A INPUT -j limit-740 --A INPUT -j limit-739 --A INPUT -j limit-738 --A INPUT -j limit-737 --A INPUT -j limit-736 --A INPUT -j limit-735 --A INPUT -j limit-734 --A INPUT -j limit-733 --A INPUT -j limit-732 --A INPUT -j limit-731 --A INPUT -j limit-730 --A INPUT -j limit-729 --A INPUT -j limit-728 --A INPUT -j limit-727 --A INPUT -j limit-726 --A INPUT -j limit-725 --A INPUT -j limit-724 --A INPUT -j limit-723 --A INPUT -j limit-722 --A INPUT -j limit-721 --A INPUT -j limit-720 --A INPUT -j limit-719 --A INPUT -j limit-718 --A INPUT -j limit-717 --A INPUT -j limit-716 --A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT --A INPUT -i lo -j ACCEPT --A INPUT -j ACCEPT --A INPUT --A INPUT -j logaccept-0 --A INPUT -j logpass-0 --A INPUT -d 172.16.0.0/16 -j ACCEPT --A INPUT -d 172.16.0.0/16 --A INPUT -d 172.16.0.0/16 -j logaccept-1 --A INPUT -d 172.16.0.0/16 -j logpass-1 --A INPUT -d 172.16.0.0/16 -j ACCEPT --A INPUT -d 172.16.2.0/16 -j ACCEPT --A INPUT -d 172.16.0.0/16 --A INPUT -d 172.16.2.0/16 --A INPUT -d 172.16.0.0/16 -j logaccept-2 --A INPUT -d 172.16.2.0/16 -j logaccept-2 --A INPUT -d 172.16.0.0/16 -j logpass-2 --A INPUT -d 172.16.2.0/16 -j logpass-2 --A INPUT -s 10.0.0.1 -j ACCEPT --A INPUT -s 10.0.0.1 --A INPUT -s 10.0.0.1 -j logaccept-3 --A INPUT -s 10.0.0.1 -j logpass-3 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 --A INPUT -s 10.0.0.1 -j ACCEPT --A INPUT -s 10.0.0.2 -j ACCEPT --A INPUT -s 10.0.0.1 --A INPUT -s 10.0.0.2 --A INPUT -s 10.0.0.1 -j logaccept-6 --A INPUT -s 10.0.0.2 -j logaccept-6 --A INPUT -s 10.0.0.1 -j logpass-6 --A INPUT -s 10.0.0.2 -j logpass-6 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 --A INPUT -i eth0 -j ACCEPT --A INPUT -i eth0 --A INPUT -i eth0 -j logaccept-18 --A INPUT -i eth0 -j logpass-16 --A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -d 172.16.0.0/16 --A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 --A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-17 --A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -d 172.16.0.0/16 --A INPUT -i eth0 -d 172.16.2.0/16 --A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 --A INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 --A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-18 --A INPUT -i eth0 -d 172.16.2.0/16 -j logpass-18 --A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 --A INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 --A INPUT -i eth0 -s 10.0.0.1 -j logpass-19 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 --A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 --A INPUT -i eth0 -s 10.0.0.2 --A INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 --A INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 --A INPUT -i eth0 -s 10.0.0.1 -j logpass-22 --A INPUT -i eth0 -s 10.0.0.2 -j logpass-22 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 --A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 --A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 --A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-30 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-48 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-49 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-50 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-51 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-52 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-53 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-54 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-55 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-56 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-57 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-58 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-59 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-60 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-61 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-62 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-63 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-64 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-65 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-66 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-67 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-68 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-69 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-70 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-71 --A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 --A INPUT -i eth2 -s 10.1.0.0/12 --A INPUT -i eth3 -s 10.1.0.0/12 --A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 --A INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 --A INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 --A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-37 --A INPUT -i eth2 -s 10.1.0.0/12 -j logpass-37 --A INPUT -i eth3 -s 10.1.0.0/12 -j logpass-37 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-72 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-72 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-72 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-73 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-73 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-73 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-74 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-74 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-74 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-75 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-75 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-75 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-76 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-76 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-76 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-77 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-77 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-77 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-78 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-78 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-78 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-79 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-79 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-79 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-80 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-80 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-80 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-81 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-81 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-81 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-82 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-82 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-82 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-83 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-83 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-83 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-84 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-84 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-84 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-85 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-85 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-85 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-86 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-86 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-86 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-87 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-87 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-87 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-88 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-88 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-88 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-89 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-89 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-89 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-90 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-90 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-90 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-91 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-91 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-91 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-92 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-92 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-92 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-93 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-93 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-93 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-94 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-94 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-94 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-95 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-95 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-95 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logdrop-0 --A INPUT --A INPUT -j logreject-0 --A INPUT -j logtarpit-0 --A INPUT -j ACCEPT --A INPUT -j logaccept-final-0 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-1 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-2 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-3 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-4 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-5 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-6 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-7 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-8 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-9 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-10 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-11 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-12 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-13 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-14 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-15 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-16 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-17 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-18 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-19 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-20 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-21 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-22 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-23 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-24 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-25 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-26 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-27 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-28 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-29 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-30 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-31 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-32 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-33 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-34 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-35 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-36 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-37 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-38 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-39 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-40 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-41 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-42 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-43 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-44 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-45 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-46 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-47 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-48 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-49 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-50 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-51 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-52 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-53 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-54 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-55 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-56 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-57 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-58 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-59 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-60 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-61 --A INPUT -j ACCEPT --A INPUT -i eth0 -j limit-1074 --A INPUT -i eth0 -j limit-1075 --A INPUT -i eth0 -j limit-1076 --A INPUT -i eth0 -j limit-1077 --A INPUT -i eth0 -j limit-1078 --A INPUT -i eth0 -j limit-1079 --A INPUT -i eth0 -j limit-1080 --A INPUT -i eth0 -j limit-1081 --A INPUT -i eth0 -j limit-1082 --A INPUT -i eth0 -j limit-1083 --A INPUT -i eth0 -j limit-1084 --A INPUT -i eth0 -j limit-1085 --A INPUT -i eth0 -j limit-1086 --A INPUT -i eth0 -j limit-1087 --A INPUT -i eth0 -j limit-1088 --A INPUT -i eth0 -j limit-1089 --A INPUT -i eth0 -j limit-1090 --A INPUT -i eth0 -j limit-1091 --A INPUT -i eth0 -j limit-1092 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-362 --A INPUT -i eth0 -j limit-1094 --A INPUT -i eth0 -j limit-1095 --A INPUT -i eth0 -j limit-1096 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-366 --A INPUT -i eth0 -j limit-1098 --A INPUT -i eth0 -j limit-1099 --A INPUT -i eth0 -j limit-1100 --A INPUT -i eth0 -j limit-1101 --A INPUT -i eth0 -j limit-1102 --A INPUT -i eth0 -j limit-1103 --A INPUT -i eth0 -j limit-1104 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 --A INPUT -i eth0 -j limit-1106 --A INPUT -i eth0 -j limit-1107 --A INPUT -i eth0 -j limit-1108 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-378 --A INPUT -i eth0 -j limit-1110 --A INPUT -i eth0 -j limit-1111 --A INPUT -i eth0 -j limit-1112 --A INPUT -i eth0 -j limit-1113 --A INPUT -i eth0 -j limit-1114 --A INPUT -i eth0 -j limit-1115 --A INPUT -i eth0 -j limit-1116 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-386 --A INPUT -i eth0 -j limit-1118 --A INPUT -i eth0 -j limit-1119 --A INPUT -i eth0 -j limit-1120 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-390 --A INPUT -i eth0 -j limit-1122 --A INPUT -i eth0 -j limit-1123 --A INPUT -i eth0 -j limit-1124 --A INPUT -i eth0 -j limit-1125 --A INPUT -i eth0 -j limit-1126 --A INPUT -i eth0 -j limit-1127 --A INPUT -i eth0 -j limit-1128 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 --A INPUT -i eth0 -j limit-1130 --A INPUT -i eth0 -j limit-1131 --A INPUT -i eth0 -j limit-1132 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-402 --A INPUT -i eth0 -j limit-1134 --A INPUT -i eth0 -j limit-1135 --A INPUT -i eth0 -j limit-1136 --A INPUT -i eth0 -j limit-1137 --A INPUT -i eth0 -j limit-1138 --A INPUT -i eth0 -j limit-1139 --A INPUT -i eth0 -j limit-1140 --A INPUT -i eth0 -j limit-1141 --A INPUT -i eth0 -j limit-1142 --A INPUT -i eth0 -j limit-1143 --A INPUT -i eth0 -j limit-1144 --A INPUT -i eth0 -j limit-1145 --A INPUT -i eth0 -j limit-1146 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1148 --A INPUT -i eth0 -j limit-1149 --A INPUT -i eth0 -j limit-1150 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1152 --A INPUT -i eth0 -j limit-1153 --A INPUT -i eth0 -j limit-1154 --A INPUT -i eth0 -j limit-1155 --A INPUT -i eth0 -j limit-1156 --A INPUT -i eth0 -j limit-1157 --A INPUT -i eth0 -j limit-1158 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1160 --A INPUT -i eth0 -j limit-1161 --A INPUT -i eth0 -j limit-1162 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1164 --A INPUT -i eth0 -j limit-1165 --A INPUT -i eth0 -j limit-1166 --A INPUT -i eth0 -j limit-1167 --A INPUT -i eth0 -j limit-1168 --A INPUT -i eth0 -j limit-1169 --A INPUT -i eth0 -j limit-1170 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1172 --A INPUT -i eth0 -j limit-1173 --A INPUT -i eth0 -j limit-1174 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1176 --A INPUT -i eth0 -j limit-1177 --A INPUT -i eth0 -j limit-1178 --A INPUT -i eth0 -j limit-1179 --A INPUT -i eth0 -j limit-1180 --A INPUT -i eth0 -j limit-1181 --A INPUT -i eth0 -j limit-1182 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1184 --A INPUT -i eth0 -j limit-1185 --A INPUT -i eth0 -j limit-1186 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1188 --A INPUT -i eth0 -j limit-1189 --A INPUT -i eth0 -j limit-1190 --A INPUT -i eth0 -j limit-1191 --A INPUT -i eth0 -j limit-1192 --A INPUT -i eth0 -j limit-1193 --A INPUT -i eth0 -j limit-1194 --A INPUT -i eth0 -j limit-1195 --A INPUT -i eth0 -j limit-1196 --A INPUT -i eth0 -j limit-1197 --A INPUT -i eth0 -j limit-1198 --A INPUT -i eth0 -j limit-1199 --A INPUT -i eth0 -j limit-1200 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1202 --A INPUT -i eth0 -j limit-1203 --A INPUT -i eth0 -j limit-1204 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1206 --A INPUT -i eth0 -j limit-1207 --A INPUT -i eth0 -j limit-1208 --A INPUT -i eth0 -j limit-1209 --A INPUT -i eth0 -j limit-1210 --A INPUT -i eth0 -j limit-1211 --A INPUT -i eth0 -j limit-1212 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1214 --A INPUT -i eth0 -j limit-1215 --A INPUT -i eth0 -j limit-1216 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1218 --A INPUT -i eth0 -j limit-1219 --A INPUT -i eth0 -j limit-1220 --A INPUT -i eth0 -j limit-1221 --A INPUT -i eth0 -j limit-1222 --A INPUT -i eth0 -j limit-1223 --A INPUT -i eth0 -j limit-1224 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1226 --A INPUT -i eth0 -j limit-1227 --A INPUT -i eth0 -j limit-1228 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1230 --A INPUT -i eth0 -j limit-1231 --A INPUT -i eth0 -j limit-1232 --A INPUT -i eth0 -j limit-1233 --A INPUT -i eth0 -j limit-1234 --A INPUT -i eth0 -j limit-1235 --A INPUT -i eth0 -j limit-1236 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1238 --A INPUT -i eth0 -j limit-1239 --A INPUT -i eth0 -j limit-1240 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1242 --A INPUT -i eth0 -j limit-1243 --A INPUT -i eth0 -j limit-1244 --A INPUT -i eth0 -j limit-1245 --A INPUT -i eth0 -j limit-1246 --A INPUT -i eth0 -j limit-1247 --A INPUT -i eth0 -j limit-1248 --A INPUT -i eth0 -j limit-1249 --A INPUT -i eth0 -j limit-1250 --A INPUT -i eth0 -j limit-1251 --A INPUT -i eth0 -j limit-1252 --A INPUT -i eth0 -j limit-1253 --A INPUT -i eth0 -j limit-1254 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 --A INPUT -i eth0 -j limit-1256 --A INPUT -i eth0 -j limit-1257 --A INPUT -i eth0 -j limit-1258 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-420 --A INPUT -i eth0 -j limit-1260 --A INPUT -i eth0 -j limit-1261 --A INPUT -i eth0 -j limit-1262 --A INPUT -i eth0 -j limit-1263 --A INPUT -i eth0 -j limit-1264 --A INPUT -i eth0 -j limit-1265 --A INPUT -i eth0 -j limit-1266 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-428 --A INPUT -i eth0 -j limit-1268 --A INPUT -i eth0 -j limit-1269 --A INPUT -i eth0 -j limit-1270 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-432 --A INPUT -i eth0 -j limit-1272 --A INPUT -i eth0 -j limit-1273 --A INPUT -i eth0 -j limit-1274 --A INPUT -i eth0 -j limit-1275 --A INPUT -i eth0 -j limit-1276 --A INPUT -i eth0 -j limit-1277 --A INPUT -i eth0 -j limit-1278 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-440 --A INPUT -i eth0 -j limit-1280 --A INPUT -i eth0 -j limit-1281 --A INPUT -i eth0 -j limit-1282 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-444 --A INPUT -i eth0 -j limit-1284 --A INPUT -i eth0 -j limit-1285 --A INPUT -i eth0 -j limit-1286 --A INPUT -i eth0 -j limit-1287 --A INPUT -i eth0 -j limit-1288 --A INPUT -i eth0 -j limit-1289 --A INPUT -i eth0 -j limit-1290 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 --A INPUT -i eth0 -j limit-1292 --A INPUT -i eth0 -j limit-1293 --A INPUT -i eth0 -j limit-1294 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-456 --A INPUT -i eth0 -j limit-1296 --A INPUT -i eth0 -j limit-1297 --A INPUT -i eth0 -j limit-1298 --A INPUT -i eth0 -j limit-1299 --A INPUT -i eth0 -j limit-1300 --A INPUT -i eth0 -j limit-1301 --A INPUT -i eth0 -j limit-1302 --A INPUT -i eth0 -j limit-1303 --A INPUT -i eth0 -j limit-1304 --A INPUT -i eth0 -j limit-1305 --A INPUT -i eth0 -j limit-1306 --A INPUT -i eth0 -j limit-1307 --A INPUT -i eth0 -j limit-1308 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1310 --A INPUT -i eth0 -j limit-1311 --A INPUT -i eth0 -j limit-1312 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1314 --A INPUT -i eth0 -j limit-1315 --A INPUT -i eth0 -j limit-1316 --A INPUT -i eth0 -j limit-1317 --A INPUT -i eth0 -j limit-1318 --A INPUT -i eth0 -j limit-1319 --A INPUT -i eth0 -j limit-1320 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1322 --A INPUT -i eth0 -j limit-1323 --A INPUT -i eth0 -j limit-1324 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1326 --A INPUT -i eth0 -j limit-1327 --A INPUT -i eth0 -j limit-1328 --A INPUT -i eth0 -j limit-1329 --A INPUT -i eth0 -j limit-1330 --A INPUT -i eth0 -j limit-1331 --A INPUT -i eth0 -j limit-1332 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1334 --A INPUT -i eth0 -j limit-1335 --A INPUT -i eth0 -j limit-1336 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1338 --A INPUT -i eth0 -j limit-1339 --A INPUT -i eth0 -j limit-1340 --A INPUT -i eth0 -j limit-1341 --A INPUT -i eth0 -j limit-1342 --A INPUT -i eth0 -j limit-1343 --A INPUT -i eth0 -j limit-1344 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1346 --A INPUT -i eth0 -j limit-1347 --A INPUT -i eth0 -j limit-1348 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1350 --A INPUT -i eth0 -j limit-1351 --A INPUT -i eth0 -j limit-1352 --A INPUT -i eth0 -j limit-1353 --A INPUT -i eth0 -j limit-1354 --A INPUT -i eth0 -j limit-1355 --A INPUT -i eth0 -j limit-1356 --A INPUT -i eth0 -j limit-1357 --A INPUT -i eth0 -j limit-1358 --A INPUT -i eth0 -j limit-1359 --A INPUT -i eth0 -j limit-1360 --A INPUT -i eth0 -j limit-1361 --A INPUT -i eth0 -j limit-1362 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1364 --A INPUT -i eth0 -j limit-1365 --A INPUT -i eth0 -j limit-1366 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1368 --A INPUT -i eth0 -j limit-1369 --A INPUT -i eth0 -j limit-1370 --A INPUT -i eth0 -j limit-1371 --A INPUT -i eth0 -j limit-1372 --A INPUT -i eth0 -j limit-1373 --A INPUT -i eth0 -j limit-1374 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1376 --A INPUT -i eth0 -j limit-1377 --A INPUT -i eth0 -j limit-1378 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1380 --A INPUT -i eth0 -j limit-1381 --A INPUT -i eth0 -j limit-1382 --A INPUT -i eth0 -j limit-1383 --A INPUT -i eth0 -j limit-1384 --A INPUT -i eth0 -j limit-1385 --A INPUT -i eth0 -j limit-1386 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1388 --A INPUT -i eth0 -j limit-1389 --A INPUT -i eth0 -j limit-1390 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1392 --A INPUT -i eth0 -j limit-1393 --A INPUT -i eth0 -j limit-1394 --A INPUT -i eth0 -j limit-1395 --A INPUT -i eth0 -j limit-1396 --A INPUT -i eth0 -j limit-1397 --A INPUT -i eth0 -j limit-1398 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1400 --A INPUT -i eth0 -j limit-1401 --A INPUT -i eth0 -j limit-1402 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1404 --A INPUT -i eth0 -j limit-1405 --A INPUT -i eth0 -j limit-1406 --A INPUT -i eth0 -j limit-1407 --A INPUT -i eth0 -j limit-1408 --A INPUT -i eth0 -j limit-1409 --A INPUT -i eth0 -j limit-1410 --A INPUT -i eth0 -j limit-1411 --A INPUT -i eth0 -j limit-1412 --A INPUT -i eth0 -j limit-1413 --A INPUT -i eth0 -j limit-1414 --A INPUT -i eth0 -j limit-1415 --A INPUT -i eth0 -j limit-1416 --A INPUT -i eth0 -j limit-1417 --A INPUT -i eth0 -j limit-1418 --A INPUT -i eth0 -j limit-1419 --A INPUT -i eth0 -j limit-1420 --A INPUT -i eth0 -j limit-1421 --A INPUT -i eth0 -j limit-1422 --A INPUT -i eth0 -j limit-1423 --A INPUT -i eth0 -j limit-1424 --A INPUT -i eth0 -j limit-1425 --A INPUT -i eth0 -j limit-1426 --A INPUT -i eth0 -j limit-1427 --A INPUT -i eth0 -j limit-1428 --A INPUT -i eth0 -j limit-1429 --A INPUT -i eth0 -j limit-1430 --A INPUT -i eth0 -j limit-1431 --A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set --A INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set --A INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set --A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set --A INPUT -j ACCEPT --A INPUT -j logdrop-457 --A INPUT --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT --A INPUT -j logaccept-84 --A INPUT -j logdrop-458 --A INPUT -j logpass-50 --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT --A INPUT -p tcp --sport 80 -j ACCEPT --A INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A INPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A INPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A INPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A INPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT --A INPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT --A INPUT -p esp -j ACCEPT --A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT --A INPUT -i eth0 -j ACCEPT --A INPUT -j ACCEPT --A INPUT -p icmp -j icmp-routing --A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set --A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A OUTPUT -j limit-1073 --A OUTPUT -j limit-1072 --A OUTPUT -j limit-1071 --A OUTPUT -j limit-1070 --A OUTPUT -j limit-1069 --A OUTPUT -j limit-1068 --A OUTPUT -j limit-1067 --A OUTPUT -j limit-1066 --A OUTPUT -j limit-1065 --A OUTPUT -j limit-1064 --A OUTPUT -j limit-1063 --A OUTPUT -j limit-1062 --A OUTPUT -j limit-1061 --A OUTPUT -j limit-1060 --A OUTPUT -j limit-1059 --A OUTPUT -j limit-1058 --A OUTPUT -j limit-1057 --A OUTPUT -j limit-1056 --A OUTPUT -j limit-1055 --A OUTPUT -j limit-1054 --A OUTPUT -j limit-1053 --A OUTPUT -j limit-1052 --A OUTPUT -j limit-1051 --A OUTPUT -j limit-1050 --A OUTPUT -j limit-1049 --A OUTPUT -j limit-1048 --A OUTPUT -j limit-1047 --A OUTPUT -j limit-1046 --A OUTPUT -j limit-1045 --A OUTPUT -j limit-1044 --A OUTPUT -j limit-1043 --A OUTPUT -j limit-1042 --A OUTPUT -j limit-1041 --A OUTPUT -j limit-1040 --A OUTPUT -j limit-1039 --A OUTPUT -j limit-1038 --A OUTPUT -j limit-1037 --A OUTPUT -j limit-1036 --A OUTPUT -j limit-1035 --A OUTPUT -j limit-1034 --A OUTPUT -j limit-1033 --A OUTPUT -j limit-1032 --A OUTPUT -j limit-1031 --A OUTPUT -j limit-1030 --A OUTPUT -j limit-1029 --A OUTPUT -j limit-1028 --A OUTPUT -j limit-1027 --A OUTPUT -j limit-1026 --A OUTPUT -j limit-1025 --A OUTPUT -j limit-1024 --A OUTPUT -j limit-1023 --A OUTPUT -j limit-1022 --A OUTPUT -j limit-1021 --A OUTPUT -j limit-1020 --A OUTPUT -j limit-1019 --A OUTPUT -j limit-1018 --A OUTPUT -j limit-1017 --A OUTPUT -j limit-1016 --A OUTPUT -j limit-1015 --A OUTPUT -j limit-1014 --A OUTPUT -j limit-1013 --A OUTPUT -j limit-1012 --A OUTPUT -j limit-1011 --A OUTPUT -j limit-1010 --A OUTPUT -j limit-1009 --A OUTPUT -j limit-1008 --A OUTPUT -j limit-1007 --A OUTPUT -j limit-1006 --A OUTPUT -j limit-1005 --A OUTPUT -j limit-1004 --A OUTPUT -j limit-1003 --A OUTPUT -j limit-1002 --A OUTPUT -j limit-1001 --A OUTPUT -j limit-1000 --A OUTPUT -j limit-999 --A OUTPUT -j limit-998 --A OUTPUT -j limit-997 --A OUTPUT -j limit-996 --A OUTPUT -j limit-995 --A OUTPUT -j limit-994 --A OUTPUT -j limit-993 --A OUTPUT -j limit-992 --A OUTPUT -j limit-991 --A OUTPUT -j limit-990 --A OUTPUT -j limit-989 --A OUTPUT -j limit-988 --A OUTPUT -j limit-987 --A OUTPUT -j limit-986 --A OUTPUT -j limit-985 --A OUTPUT -j limit-984 --A OUTPUT -j limit-983 --A OUTPUT -j limit-982 --A OUTPUT -j limit-981 --A OUTPUT -j limit-980 --A OUTPUT -j limit-979 --A OUTPUT -j limit-978 --A OUTPUT -j limit-977 --A OUTPUT -j limit-976 --A OUTPUT -j limit-975 --A OUTPUT -j limit-974 --A OUTPUT -j limit-973 --A OUTPUT -j limit-972 --A OUTPUT -j limit-971 --A OUTPUT -j limit-970 --A OUTPUT -j limit-969 --A OUTPUT -j limit-968 --A OUTPUT -j limit-967 --A OUTPUT -j limit-966 --A OUTPUT -j limit-965 --A OUTPUT -j limit-964 --A OUTPUT -j limit-963 --A OUTPUT -j limit-962 --A OUTPUT -j limit-961 --A OUTPUT -j limit-960 --A OUTPUT -j limit-959 --A OUTPUT -j limit-958 --A OUTPUT -j limit-957 --A OUTPUT -j limit-956 --A OUTPUT -j limit-955 --A OUTPUT -j limit-954 --A OUTPUT -j limit-953 --A OUTPUT -j limit-952 --A OUTPUT -j limit-951 --A OUTPUT -j limit-950 --A OUTPUT -j limit-949 --A OUTPUT -j limit-948 --A OUTPUT -j limit-947 --A OUTPUT -j limit-946 --A OUTPUT -j limit-945 --A OUTPUT -j limit-944 --A OUTPUT -j limit-943 --A OUTPUT -j limit-942 --A OUTPUT -j limit-941 --A OUTPUT -j limit-940 --A OUTPUT -j limit-939 --A OUTPUT -j limit-938 --A OUTPUT -j limit-937 --A OUTPUT -j limit-936 --A OUTPUT -j limit-935 --A OUTPUT -j limit-934 --A OUTPUT -j limit-933 --A OUTPUT -j limit-932 --A OUTPUT -j limit-931 --A OUTPUT -j limit-930 --A OUTPUT -j limit-929 --A OUTPUT -j limit-928 --A OUTPUT -j limit-927 --A OUTPUT -j limit-926 --A OUTPUT -j limit-925 --A OUTPUT -j limit-924 --A OUTPUT -j limit-923 --A OUTPUT -j limit-922 --A OUTPUT -j limit-921 --A OUTPUT -j limit-920 --A OUTPUT -j limit-919 --A OUTPUT -j limit-918 --A OUTPUT -j limit-917 --A OUTPUT -j limit-916 --A OUTPUT -j limit-915 --A OUTPUT -j limit-914 --A OUTPUT -j limit-913 --A OUTPUT -j limit-912 --A OUTPUT -j limit-911 --A OUTPUT -j limit-910 --A OUTPUT -j limit-909 --A OUTPUT -j limit-908 --A OUTPUT -j limit-907 --A OUTPUT -j limit-906 --A OUTPUT -j limit-905 --A OUTPUT -j limit-904 --A OUTPUT -j limit-903 --A OUTPUT -j limit-902 --A OUTPUT -j limit-901 --A OUTPUT -j limit-900 --A OUTPUT -j limit-899 --A OUTPUT -j limit-898 --A OUTPUT -j limit-897 --A OUTPUT -j limit-896 --A OUTPUT -j limit-895 --A OUTPUT -j limit-894 --A OUTPUT -j limit-893 --A OUTPUT -j limit-892 --A OUTPUT -j limit-891 --A OUTPUT -j limit-890 --A OUTPUT -j limit-889 --A OUTPUT -j limit-888 --A OUTPUT -j limit-887 --A OUTPUT -j limit-886 --A OUTPUT -j limit-885 --A OUTPUT -j limit-884 --A OUTPUT -j limit-883 --A OUTPUT -j limit-882 --A OUTPUT -j limit-881 --A OUTPUT -j limit-880 --A OUTPUT -j limit-879 --A OUTPUT -j limit-878 --A OUTPUT -j limit-877 --A OUTPUT -j limit-876 --A OUTPUT -j limit-875 --A OUTPUT -j limit-874 --A OUTPUT -j limit-873 --A OUTPUT -j limit-872 --A OUTPUT -j limit-871 --A OUTPUT -j limit-870 --A OUTPUT -j limit-869 --A OUTPUT -j limit-868 --A OUTPUT -j limit-867 --A OUTPUT -j limit-866 --A OUTPUT -j limit-865 --A OUTPUT -j limit-864 --A OUTPUT -j limit-863 --A OUTPUT -j limit-862 --A OUTPUT -j limit-861 --A OUTPUT -j limit-860 --A OUTPUT -j limit-859 --A OUTPUT -j limit-858 --A OUTPUT -j limit-857 --A OUTPUT -j limit-856 --A OUTPUT -j limit-855 --A OUTPUT -j limit-854 --A OUTPUT -j limit-853 --A OUTPUT -j limit-852 --A OUTPUT -j limit-851 --A OUTPUT -j limit-850 --A OUTPUT -j limit-849 --A OUTPUT -j limit-848 --A OUTPUT -j limit-847 --A OUTPUT -j limit-846 --A OUTPUT -j limit-845 --A OUTPUT -j limit-844 --A OUTPUT -j limit-843 --A OUTPUT -j limit-842 --A OUTPUT -j limit-841 --A OUTPUT -j limit-840 --A OUTPUT -j limit-839 --A OUTPUT -j limit-838 --A OUTPUT -j limit-837 --A OUTPUT -j limit-836 --A OUTPUT -j limit-835 --A OUTPUT -j limit-834 --A OUTPUT -j limit-833 --A OUTPUT -j limit-832 --A OUTPUT -j limit-831 --A OUTPUT -j limit-830 --A OUTPUT -j limit-829 --A OUTPUT -j limit-828 --A OUTPUT -j limit-827 --A OUTPUT -j limit-826 --A OUTPUT -j limit-825 --A OUTPUT -j limit-824 --A OUTPUT -j limit-823 --A OUTPUT -j limit-822 --A OUTPUT -j limit-821 --A OUTPUT -j limit-820 --A OUTPUT -j limit-819 --A OUTPUT -j limit-818 --A OUTPUT -j limit-817 --A OUTPUT -j limit-816 --A OUTPUT -j limit-815 --A OUTPUT -j limit-814 --A OUTPUT -j limit-813 --A OUTPUT -j limit-812 --A OUTPUT -j limit-811 --A OUTPUT -j limit-810 --A OUTPUT -j limit-809 --A OUTPUT -j limit-808 --A OUTPUT -j limit-807 --A OUTPUT -j limit-806 --A OUTPUT -j limit-805 --A OUTPUT -j limit-804 --A OUTPUT -j limit-803 --A OUTPUT -j limit-802 --A OUTPUT -j limit-801 --A OUTPUT -j limit-800 --A OUTPUT -j limit-799 --A OUTPUT -j limit-798 --A OUTPUT -j limit-797 --A OUTPUT -j limit-796 --A OUTPUT -j limit-795 --A OUTPUT -j limit-794 --A OUTPUT -j limit-793 --A OUTPUT -j limit-792 --A OUTPUT -j limit-791 --A OUTPUT -j limit-790 --A OUTPUT -j limit-789 --A OUTPUT -j limit-788 --A OUTPUT -j limit-787 --A OUTPUT -j limit-786 --A OUTPUT -j limit-785 --A OUTPUT -j limit-784 --A OUTPUT -j limit-783 --A OUTPUT -j limit-782 --A OUTPUT -j limit-781 --A OUTPUT -j limit-780 --A OUTPUT -j limit-779 --A OUTPUT -j limit-778 --A OUTPUT -j limit-777 --A OUTPUT -j limit-776 --A OUTPUT -j limit-775 --A OUTPUT -j limit-774 --A OUTPUT -j limit-773 --A OUTPUT -j limit-772 --A OUTPUT -j limit-771 --A OUTPUT -j limit-770 --A OUTPUT -j limit-769 --A OUTPUT -j limit-768 --A OUTPUT -j limit-767 --A OUTPUT -j limit-766 --A OUTPUT -j limit-765 --A OUTPUT -j limit-764 --A OUTPUT -j limit-763 --A OUTPUT -j limit-762 --A OUTPUT -j limit-761 --A OUTPUT -j limit-760 --A OUTPUT -j limit-759 --A OUTPUT -j limit-758 --A OUTPUT -j limit-757 --A OUTPUT -j limit-756 --A OUTPUT -j limit-755 --A OUTPUT -j limit-754 --A OUTPUT -j limit-753 --A OUTPUT -j limit-752 --A OUTPUT -j limit-751 --A OUTPUT -j limit-750 --A OUTPUT -j limit-749 --A OUTPUT -j limit-748 --A OUTPUT -j limit-747 --A OUTPUT -j limit-746 --A OUTPUT -j limit-745 --A OUTPUT -j limit-744 --A OUTPUT -j limit-743 --A OUTPUT -j limit-742 --A OUTPUT -j limit-741 --A OUTPUT -j limit-740 --A OUTPUT -j limit-739 --A OUTPUT -j limit-738 --A OUTPUT -j limit-737 --A OUTPUT -j limit-736 --A OUTPUT -j limit-735 --A OUTPUT -j limit-734 --A OUTPUT -j limit-733 --A OUTPUT -j limit-732 --A OUTPUT -j limit-731 --A OUTPUT -j limit-730 --A OUTPUT -j limit-729 --A OUTPUT -j limit-728 --A OUTPUT -j limit-727 --A OUTPUT -j limit-726 --A OUTPUT -j limit-725 --A OUTPUT -j limit-724 --A OUTPUT -j limit-723 --A OUTPUT -j limit-722 --A OUTPUT -j limit-721 --A OUTPUT -j limit-720 --A OUTPUT -j limit-719 --A OUTPUT -j limit-718 --A OUTPUT -j limit-717 --A OUTPUT -j limit-716 --A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT --A OUTPUT -o lo -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT --A OUTPUT -j logaccept-0 --A OUTPUT -j logpass-0 --A OUTPUT -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -d 172.16.0.0/16 --A OUTPUT -d 172.16.0.0/16 -j logaccept-1 --A OUTPUT -d 172.16.0.0/16 -j logpass-1 --A OUTPUT -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -d 172.16.0.0/16 --A OUTPUT -d 172.16.2.0/16 --A OUTPUT -d 172.16.0.0/16 -j logaccept-2 --A OUTPUT -d 172.16.2.0/16 -j logaccept-2 --A OUTPUT -d 172.16.0.0/16 -j logpass-2 --A OUTPUT -d 172.16.2.0/16 -j logpass-2 --A OUTPUT -s 10.0.0.1 -j ACCEPT --A OUTPUT -s 10.0.0.1 --A OUTPUT -s 10.0.0.1 -j logaccept-3 --A OUTPUT -s 10.0.0.1 -j logpass-3 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 --A OUTPUT -s 10.0.0.1 -j ACCEPT --A OUTPUT -s 10.0.0.2 -j ACCEPT --A OUTPUT -s 10.0.0.1 --A OUTPUT -s 10.0.0.2 --A OUTPUT -s 10.0.0.1 -j logaccept-6 --A OUTPUT -s 10.0.0.2 -j logaccept-6 --A OUTPUT -s 10.0.0.1 -j logpass-6 --A OUTPUT -s 10.0.0.2 -j logpass-6 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j logpass-9 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-0 --A OUTPUT --A OUTPUT -j logreject-0 --A OUTPUT -j logtarpit-0 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-0 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-2 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-3 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-4 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-5 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-6 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-7 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-8 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-9 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-10 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-11 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-12 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-13 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-14 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-15 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-16 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-17 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-18 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-19 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-20 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-21 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-22 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-23 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-24 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-25 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-26 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-27 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-28 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-29 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-30 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-31 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-32 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-33 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-34 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-35 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-36 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-37 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-38 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-39 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-43 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-47 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-55 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-59 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-69 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-73 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-77 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-85 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-89 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-97 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-101 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-105 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-109 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-113 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-117 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-127 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-131 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-135 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-139 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-143 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-147 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-151 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-155 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-159 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-163 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-167 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-177 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-181 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-185 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-189 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-193 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-197 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-201 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-205 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-209 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-217 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-221 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-235 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-239 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-247 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-251 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-259 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-263 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-271 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-275 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-289 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-293 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-301 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-305 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-313 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-317 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-325 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-329 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-358 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-359 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-360 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-361 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-362 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-363 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-364 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-365 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-366 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-367 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-368 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-369 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-370 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-371 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-372 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-373 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-374 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-375 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-376 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-378 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-379 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-380 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-138 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-382 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-383 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-384 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-385 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-386 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-387 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-388 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-390 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-391 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-392 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-394 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-395 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-396 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-397 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-398 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-399 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-400 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-402 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-403 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-404 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-406 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-407 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-408 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-409 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-410 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-411 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-412 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-414 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-415 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-416 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-174 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-418 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-419 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-420 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-421 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-422 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-423 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-424 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-425 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-426 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-427 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-428 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-429 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-430 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-432 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-433 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-434 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-436 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-437 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-438 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-439 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-440 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-441 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-442 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-444 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-445 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-446 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-448 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-449 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-450 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-451 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-452 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-453 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-454 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-456 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-457 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-458 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-460 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-461 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-462 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-463 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-464 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-465 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-466 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-468 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-469 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-470 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-472 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-473 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-474 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-475 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-476 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-477 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-478 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-479 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-480 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-481 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-482 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-483 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-484 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-486 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-487 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-488 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-490 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-491 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-492 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-493 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-494 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-495 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-496 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-498 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-499 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-500 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-502 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-503 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-504 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-505 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-506 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-507 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-508 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-510 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-511 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-512 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-514 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-515 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-516 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-517 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-518 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-519 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-520 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-522 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-523 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-524 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-526 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-527 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-528 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-529 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-530 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-531 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-532 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-533 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-534 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-535 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-536 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-537 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-538 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-540 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-541 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-542 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-192 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-544 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-545 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-546 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-547 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-548 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-549 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-550 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-552 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-553 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-554 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-556 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-557 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-558 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-559 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-560 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-561 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-562 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-564 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-565 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-566 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-568 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-569 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-570 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-571 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-572 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-573 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-574 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-576 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-577 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-578 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-228 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-580 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-581 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-582 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-583 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-584 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-585 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-586 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-587 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-588 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-589 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-590 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-591 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-592 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-594 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-595 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-596 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-598 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-599 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-600 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-601 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-602 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-603 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-604 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-606 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-607 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-608 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-610 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-611 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-612 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-613 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-614 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-615 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-616 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-618 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-619 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-620 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-622 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-623 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-624 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-625 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-626 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-627 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-628 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-630 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-631 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-632 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-634 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-635 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-636 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-637 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-638 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-639 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-640 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-641 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-642 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-643 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-644 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-645 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-646 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-648 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-649 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-650 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-652 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-653 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-654 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-655 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-656 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-657 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-658 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-660 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-661 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-662 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-664 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-665 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-666 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-667 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-668 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-669 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-670 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-672 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-673 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-674 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-676 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-677 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-678 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-679 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-680 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-681 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-682 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-684 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-685 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-686 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-688 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-689 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-690 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-691 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-692 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-693 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-694 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-695 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-696 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-697 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-698 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-699 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-700 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-701 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-702 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-703 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-704 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-705 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-706 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-707 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-708 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-709 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-710 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-711 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-712 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-713 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-714 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-715 --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-0 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-1 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-2 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-3 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-4 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-5 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-6 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-7 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-8 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-9 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-10 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-11 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-12 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-13 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-14 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-15 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-16 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-17 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-18 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-19 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-20 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-21 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-22 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-23 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-24 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-25 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-26 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-27 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-28 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-29 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-30 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-31 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-32 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-33 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-34 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-35 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-36 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-37 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-38 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-39 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-40 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-41 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-42 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-43 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-44 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-45 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-46 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-47 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-48 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-49 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-50 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-51 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-52 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-53 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-54 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-55 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-56 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-57 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-58 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-59 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-60 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-61 --A OUTPUT -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set --A OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set --A OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set --A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set --A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-457 --A OUTPUT --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT --A OUTPUT -j logaccept-84 --A OUTPUT -j logdrop-458 --A OUTPUT -j logpass-50 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT --A OUTPUT -p tcp --dport 80 -j ACCEPT --A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT --A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT --A OUTPUT -p esp -j ACCEPT --A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT --A OUTPUT -p icmp -j icmp-routing --A address-0 -d 172.16.0.0/16 -j ACCEPT --A address-1 -d 172.16.0.0/16 --A address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 --A address-100 -d 172.16.0.0/16 -j ACCEPT --A address-100 -d 172.16.2.0/16 -j ACCEPT --A address-101 -d 172.16.0.0/16 --A address-101 -d 172.16.2.0/16 --A address-102 -d 172.16.0.0/16 -j logaccept-56 --A address-102 -d 172.16.2.0/16 -j logaccept-56 --A address-103 -d 172.16.0.0/16 -j logpass-45 --A address-103 -d 172.16.2.0/16 -j logpass-45 --A address-104 -s 10.0.0.1 -j ACCEPT --A address-105 -s 10.0.0.1 --A address-106 -s 10.0.0.1 -j logaccept-57 --A address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-109 -s 10.0.0.1 -d 172.16.0.0/16 --A address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 --A address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-113 -s 10.0.0.1 -d 172.16.0.0/16 --A address-113 -s 10.0.0.1 -d 172.16.2.0/16 --A address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 --A address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 --A address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-46 --A address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-46 --A address-116 -s 10.0.0.1 -j ACCEPT --A address-116 -s 10.0.0.2 -j ACCEPT --A address-117 -s 10.0.0.1 --A address-117 -s 10.0.0.2 --A address-118 -s 10.0.0.1 -j logaccept-60 --A address-118 -s 10.0.0.2 -j logaccept-60 --A address-119 -s 10.0.0.1 -j logpass-47 --A address-119 -s 10.0.0.2 -j logpass-47 --A address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-121 -s 10.0.0.1 -d 172.16.0.0/16 --A address-121 -s 10.0.0.2 -d 172.16.0.0/16 --A address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 --A address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 --A address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-48 --A address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-48 --A address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-125 -s 10.0.0.1 -d 172.16.0.0/16 --A address-125 -s 10.0.0.1 -d 172.16.2.0/16 --A address-125 -s 10.0.0.2 -d 172.16.0.0/16 --A address-125 -s 10.0.0.2 -d 172.16.2.0/16 --A address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 --A address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 --A address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 --A address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 --A address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-49 --A address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-49 --A address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-49 --A address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-49 --A address-13 -s 10.0.0.1 -d 172.16.0.0/16 --A address-13 -s 10.0.0.1 -d 172.16.2.0/16 --A address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 --A address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 --A address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 --A address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-12 --A address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-17 -s 10.0.0.1 -d 172.16.0.0/16 --A address-17 -s 10.0.0.2 -d 172.16.0.0/16 --A address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 --A address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 --A address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-14 --A address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-14 --A address-2 -d 172.16.0.0/16 -j logaccept-10 --A address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-21 -s 10.0.0.1 -d 172.16.0.0/16 --A address-21 -s 10.0.0.1 -d 172.16.2.0/16 --A address-21 -s 10.0.0.2 -d 172.16.0.0/16 --A address-21 -s 10.0.0.2 -d 172.16.2.0/16 --A address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 --A address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 --A address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 --A address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 --A address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 --A address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 --A address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-15 --A address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-15 --A address-24 -d 172.16.0.0/16 -j ACCEPT --A address-25 -d 172.16.0.0/16 --A address-26 -d 172.16.0.0/16 -j logaccept-28 --A address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-28 -d 172.16.0.0/16 -j ACCEPT --A address-28 -d 172.16.2.0/16 -j ACCEPT --A address-29 -d 172.16.0.0/16 --A address-29 -d 172.16.2.0/16 --A address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-30 -d 172.16.0.0/16 -j logaccept-29 --A address-30 -d 172.16.2.0/16 -j logaccept-29 --A address-31 -d 172.16.0.0/16 -j logpass-25 --A address-31 -d 172.16.2.0/16 -j logpass-25 --A address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-33 -s 10.0.0.1 -d 172.16.0.0/16 --A address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 --A address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-37 -s 10.0.0.1 -d 172.16.0.0/16 --A address-37 -s 10.0.0.1 -d 172.16.2.0/16 --A address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 --A address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 --A address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-26 --A address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-26 --A address-4 -d 172.16.0.0/16 -j ACCEPT --A address-4 -d 172.16.2.0/16 -j ACCEPT --A address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-41 -s 10.0.0.1 -d 172.16.0.0/16 --A address-41 -s 10.0.0.2 -d 172.16.0.0/16 --A address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 --A address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 --A address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 --A address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 --A address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-45 -s 10.0.0.1 -d 172.16.0.0/16 --A address-45 -s 10.0.0.1 -d 172.16.2.0/16 --A address-45 -s 10.0.0.2 -d 172.16.0.0/16 --A address-45 -s 10.0.0.2 -d 172.16.2.0/16 --A address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 --A address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 --A address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 --A address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 --A address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-29 --A address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-29 --A address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-29 --A address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-29 --A address-48 -s 10.0.0.1 -j ACCEPT --A address-49 -s 10.0.0.1 --A address-5 -d 172.16.0.0/16 --A address-5 -d 172.16.2.0/16 --A address-50 -s 10.0.0.1 -j logaccept-39 --A address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-53 -s 10.0.0.1 -d 172.16.0.0/16 --A address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 --A address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-57 -s 10.0.0.1 -d 172.16.0.0/16 --A address-57 -s 10.0.0.1 -d 172.16.2.0/16 --A address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 --A address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 --A address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-33 --A address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-33 --A address-6 -d 172.16.0.0/16 -j logaccept-11 --A address-6 -d 172.16.2.0/16 -j logaccept-11 --A address-60 -s 10.0.0.1 -j ACCEPT --A address-60 -s 10.0.0.2 -j ACCEPT --A address-61 -s 10.0.0.1 --A address-61 -s 10.0.0.2 --A address-62 -s 10.0.0.1 -j logaccept-42 --A address-62 -s 10.0.0.2 -j logaccept-42 --A address-63 -s 10.0.0.1 -j logpass-34 --A address-63 -s 10.0.0.2 -j logpass-34 --A address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-65 -s 10.0.0.1 -d 172.16.0.0/16 --A address-65 -s 10.0.0.2 -d 172.16.0.0/16 --A address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 --A address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 --A address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 --A address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 --A address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-69 -s 10.0.0.1 -d 172.16.0.0/16 --A address-69 -s 10.0.0.1 -d 172.16.2.0/16 --A address-69 -s 10.0.0.2 -d 172.16.0.0/16 --A address-69 -s 10.0.0.2 -d 172.16.2.0/16 --A address-7 -d 172.16.0.0/16 -j logpass-10 --A address-7 -d 172.16.2.0/16 -j logpass-10 --A address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 --A address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 --A address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 --A address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 --A address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-36 --A address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-36 --A address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-36 --A address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-36 --A address-72 -s 10.0.0.1 -j ACCEPT --A address-73 -s 10.0.0.1 --A address-74 -s 10.0.0.1 -j logaccept-48 --A address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-77 -s 10.0.0.1 -d 172.16.0.0/16 --A address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 --A address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-81 -s 10.0.0.1 -d 172.16.0.0/16 --A address-81 -s 10.0.0.1 -d 172.16.2.0/16 --A address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 --A address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 --A address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 --A address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-40 --A address-84 -s 10.0.0.1 -j ACCEPT --A address-84 -s 10.0.0.2 -j ACCEPT --A address-85 -s 10.0.0.1 --A address-85 -s 10.0.0.2 --A address-86 -s 10.0.0.1 -j logaccept-51 --A address-86 -s 10.0.0.2 -j logaccept-51 --A address-87 -s 10.0.0.1 -j logpass-41 --A address-87 -s 10.0.0.2 -j logpass-41 --A address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-89 -s 10.0.0.1 -d 172.16.0.0/16 --A address-89 -s 10.0.0.2 -d 172.16.0.0/16 --A address-9 -s 10.0.0.1 -d 172.16.0.0/16 --A address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 --A address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 --A address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-42 --A address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-42 --A address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-93 -s 10.0.0.1 -d 172.16.0.0/16 --A address-93 -s 10.0.0.1 -d 172.16.2.0/16 --A address-93 -s 10.0.0.2 -d 172.16.0.0/16 --A address-93 -s 10.0.0.2 -d 172.16.2.0/16 --A address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 --A address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 --A address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 --A address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 --A address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-43 --A address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-43 --A address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-43 --A address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-43 --A address-96 -d 172.16.0.0/16 -j ACCEPT --A address-97 -d 172.16.0.0/16 --A address-98 -d 172.16.0.0/16 -j logaccept-55 --A address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A icmp-routing -p icmp --icmp-type 3 -j ACCEPT --A icmp-routing -p icmp --icmp-type 11 -j ACCEPT --A icmp-routing -p icmp --icmp-type 12 -j ACCEPT --A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 --A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 --A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set --A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 --A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-100 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-100 -j ACCEPT --A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1007 -m limit --limit 1/second -j LOG --A limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-101 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1019 -m limit --limit 1/second -j LOG --A limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1029 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1031 -m limit --limit 1/second -j LOG --A limit-1032 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1033 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-104 -m limit --limit 1/second -j LOG --A limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1040 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1041 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1043 -m limit --limit 1/second -j LOG --A limit-1044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1045 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1046 -j RETURN --A limit-1046 -m limit --limit 1/second -j LOG --A limit-1046 -j DROP --A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1047 -j RETURN --A limit-1047 -m limit --limit 1/second -j LOG --A limit-1047 -j DROP --A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j RETURN --A limit-1048 -m limit --limit 1/second -j LOG --A limit-1048 -j DROP --A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1049 -j RETURN --A limit-1049 -m limit --limit 1/second -j LOG --A limit-1049 -j DROP --A limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1050 -j RETURN --A limit-1050 -m limit --limit 1/second -j LOG --A limit-1050 -j DROP --A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1051 -j RETURN --A limit-1051 -m limit --limit 1/second -j LOG --A limit-1051 -j DROP --A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j RETURN --A limit-1052 -m limit --limit 1/second -j LOG --A limit-1052 -j DROP --A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1053 -j RETURN --A limit-1053 -m limit --limit 1/second -j LOG --A limit-1053 -j DROP --A limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1054 -j RETURN --A limit-1054 -j DROP --A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1055 -j RETURN --A limit-1055 -j DROP --A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j RETURN --A limit-1056 -j DROP --A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1057 -j RETURN --A limit-1057 -j DROP --A limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1058 -j RETURN --A limit-1058 -j DROP --A limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1059 -j RETURN --A limit-1059 -j DROP --A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j RETURN --A limit-1060 -j DROP --A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1061 -j RETURN --A limit-1061 -j DROP --A limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1062 -j RETURN --A limit-1062 -m limit --limit 1/second -j LOG --A limit-1062 -j DROP --A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1063 -j RETURN --A limit-1063 -m limit --limit 1/second -j LOG --A limit-1063 -j DROP --A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j RETURN --A limit-1064 -m limit --limit 1/second -j LOG --A limit-1064 -j DROP --A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1065 -j RETURN --A limit-1065 -m limit --limit 1/second -j LOG --A limit-1065 -j DROP --A limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1066 -j RETURN --A limit-1066 -j DROP --A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1067 -j RETURN --A limit-1067 -j DROP --A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j RETURN --A limit-1068 -j DROP --A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1069 -j RETURN --A limit-1069 -j DROP --A limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1070 -j RETURN --A limit-1070 -j DROP --A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1071 -j RETURN --A limit-1071 -j DROP --A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j RETURN --A limit-1072 -j DROP --A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1073 -j RETURN --A limit-1073 -j DROP --A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-343 --A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-344 --A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --set --A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-345 --A limit-1076 -m limit --limit 1/second -j LOG --A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-346 --A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-347 --A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-348 --A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set --A limit-108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-108 -j ACCEPT --A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-349 --A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-350 --A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set --A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-351 --A limit-1082 -m limit --limit 1/second -j LOG --A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-352 --A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-353 --A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-354 --A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set --A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-355 --A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-356 --A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-357 --A limit-1088 -m limit --limit 1/second -j LOG --A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-358 --A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-109 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-359 --A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-360 --A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-361 --A limit-1092 -j ACCEPT --A limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-363 --A limit-1094 -m limit --limit 1/second -j LOG --A limit-1094 -j ACCEPT --A limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-364 --A limit-1095 -m limit --limit 1/second -j LOG --A limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-365 --A limit-1096 -j ACCEPT --A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-367 --A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-368 --A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 --A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set --A limit-110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-110 -m limit --limit 1/second -j LOG --A limit-110 -j ACCEPT --A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-369 --A limit-1100 -m limit --limit 1/second -j LOG --A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-370 --A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-371 --A limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-372 --A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 --A limit-1104 -j ACCEPT --A limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 --A limit-1106 -m limit --limit 1/second -j LOG --A limit-1106 -j ACCEPT --A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-376 --A limit-1107 -m limit --limit 1/second -j LOG --A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-377 --A limit-1108 -j ACCEPT --A limit-111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-111 -m limit --limit 1/second -j LOG --A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-379 --A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-380 --A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-381 --A limit-1112 -m limit --limit 1/second -j LOG --A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-382 --A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-383 --A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-384 --A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-385 --A limit-1116 -j ACCEPT --A limit-1118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-387 --A limit-1118 -m limit --limit 1/second -j LOG --A limit-1118 -j ACCEPT --A limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-388 --A limit-1119 -m limit --limit 1/second -j LOG --A limit-112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-112 -j ACCEPT --A limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-389 --A limit-1120 -j ACCEPT --A limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-391 --A limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-392 --A limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-393 --A limit-1124 -m limit --limit 1/second -j LOG --A limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-394 --A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-395 --A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-396 --A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 --A limit-1128 -j ACCEPT --A limit-113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 --A limit-1130 -m limit --limit 1/second -j LOG --A limit-1130 -j ACCEPT --A limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-400 --A limit-1131 -m limit --limit 1/second -j LOG --A limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-401 --A limit-1132 -j ACCEPT --A limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1135 -m recent --name limit-1135 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1135 -m recent --name limit-1135 --rsource --mask 255.255.255.255 --set --A limit-1136 -m recent --name limit-1136 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1136 -m limit --limit 1/second -j LOG --A limit-1136 -m recent --name limit-1136 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1137 -m recent --name limit-1137 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1137 -m recent --name limit-1137 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1138 -m recent --name limit-1138 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1138 -m recent --name limit-1138 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1139 -m recent --name limit-1139 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1139 -m recent --name limit-1139 --rsource --mask 255.255.255.255 --set --A limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1140 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1140 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1141 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1141 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1142 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1142 -m limit --limit 1/second -j LOG --A limit-1142 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1143 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1143 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1144 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1144 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1145 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1145 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1146 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1146 -j ACCEPT --A limit-1148 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1148 -m limit --limit 1/second -j LOG --A limit-1148 -j ACCEPT --A limit-1149 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1149 -m limit --limit 1/second -j LOG --A limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --set --A limit-1150 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1150 -j ACCEPT --A limit-1152 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1152 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1153 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1153 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1154 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1154 -m limit --limit 1/second -j LOG --A limit-1154 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1155 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1155 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1156 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1156 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1157 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1157 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1158 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1158 -j ACCEPT --A limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-116 -m limit --limit 1/second -j LOG --A limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1160 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1160 -m limit --limit 1/second -j LOG --A limit-1160 -j ACCEPT --A limit-1161 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1161 -m limit --limit 1/second -j LOG --A limit-1162 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1162 -j ACCEPT --A limit-1164 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1164 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1165 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1165 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1166 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1166 -m limit --limit 1/second -j LOG --A limit-1166 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1167 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1167 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1168 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1168 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1169 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1169 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1170 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1170 -j ACCEPT --A limit-1172 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1172 -m limit --limit 1/second -j LOG --A limit-1172 -j ACCEPT --A limit-1173 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1173 -m limit --limit 1/second -j LOG --A limit-1174 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1174 -j ACCEPT --A limit-1176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1177 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1178 -m limit --limit 1/second -j LOG --A limit-1178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1180 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1180 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1181 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1181 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1182 -j ACCEPT --A limit-1184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1184 -m limit --limit 1/second -j LOG --A limit-1184 -j ACCEPT --A limit-1185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1185 -m limit --limit 1/second -j LOG --A limit-1186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1186 -j ACCEPT --A limit-1188 -m recent --name limit-1188 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1188 -m recent --name limit-1188 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1189 -m recent --name limit-1189 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1189 -m recent --name limit-1189 --rsource --mask 255.255.255.255 --set --A limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --set --A limit-1190 -m recent --name limit-1190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1190 -m limit --limit 1/second -j LOG --A limit-1190 -m recent --name limit-1190 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1191 -m recent --name limit-1191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1191 -m recent --name limit-1191 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1192 -m recent --name limit-1192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1192 -m recent --name limit-1192 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1193 -m recent --name limit-1193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1193 -m recent --name limit-1193 --rsource --mask 255.255.255.255 --set --A limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1196 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1196 -m limit --limit 1/second -j LOG --A limit-1196 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1197 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1197 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1198 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1198 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 --A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1200 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1200 -j ACCEPT --A limit-1202 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1202 -m limit --limit 1/second -j LOG --A limit-1202 -j ACCEPT --A limit-1203 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1203 -m limit --limit 1/second -j LOG --A limit-1204 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1204 -j ACCEPT --A limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1207 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1207 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1208 -m limit --limit 1/second -j LOG --A limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1212 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1212 -j ACCEPT --A limit-1214 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1214 -m limit --limit 1/second -j LOG --A limit-1214 -j ACCEPT --A limit-1215 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1215 -m limit --limit 1/second -j LOG --A limit-1216 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1216 -j ACCEPT --A limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-122 -m limit --limit 1/second -j LOG --A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1220 -m limit --limit 1/second -j LOG --A limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1224 -j ACCEPT --A limit-1226 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1226 -m limit --limit 1/second -j LOG --A limit-1226 -j ACCEPT --A limit-1227 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1227 -m limit --limit 1/second -j LOG --A limit-1228 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1228 -j ACCEPT --A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1230 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1230 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1231 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1231 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1232 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1232 -m limit --limit 1/second -j LOG --A limit-1232 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1233 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1233 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1234 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1234 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1235 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1235 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1236 -j ACCEPT --A limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1238 -m limit --limit 1/second -j LOG --A limit-1238 -j ACCEPT --A limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1239 -m limit --limit 1/second -j LOG --A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1240 -j ACCEPT --A limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 --A limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 --A limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --set --A limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 --A limit-1244 -m limit --limit 1/second -j LOG --A limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 --A limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 --A limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 --A limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --set --A limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 --A limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-410 --A limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-411 --A limit-1250 -m limit --limit 1/second -j LOG --A limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-412 --A limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-413 --A limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-414 --A limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 --A limit-1254 -j ACCEPT --A limit-1256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 --A limit-1256 -m limit --limit 1/second -j LOG --A limit-1256 -j ACCEPT --A limit-1257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 --A limit-1257 -m limit --limit 1/second -j LOG --A limit-1258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 --A limit-1258 -j ACCEPT --A limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-126 -j ACCEPT --A limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-421 --A limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-422 --A limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-423 --A limit-1262 -m limit --limit 1/second -j LOG --A limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-424 --A limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-425 --A limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-426 --A limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1266 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-427 --A limit-1266 -j ACCEPT --A limit-1268 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-429 --A limit-1268 -m limit --limit 1/second -j LOG --A limit-1268 -j ACCEPT --A limit-1269 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 --A limit-1269 -m limit --limit 1/second -j LOG --A limit-127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1270 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 --A limit-1270 -j ACCEPT --A limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-433 --A limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-434 --A limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-435 --A limit-1274 -m limit --limit 1/second -j LOG --A limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-436 --A limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-437 --A limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-438 --A limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 --A limit-1278 -j ACCEPT --A limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-128 -m limit --limit 1/second -j LOG --A limit-128 -j ACCEPT --A limit-1280 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-441 --A limit-1280 -m limit --limit 1/second -j LOG --A limit-1280 -j ACCEPT --A limit-1281 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-442 --A limit-1281 -m limit --limit 1/second -j LOG --A limit-1282 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-443 --A limit-1282 -j ACCEPT --A limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 --A limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 --A limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 --A limit-1286 -m limit --limit 1/second -j LOG --A limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 --A limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 --A limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-450 --A limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-129 -m limit --limit 1/second -j LOG --A limit-1290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 --A limit-1290 -j ACCEPT --A limit-1292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 --A limit-1292 -m limit --limit 1/second -j LOG --A limit-1292 -j ACCEPT --A limit-1293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 --A limit-1293 -m limit --limit 1/second -j LOG --A limit-1294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 --A limit-1294 -j ACCEPT --A limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1297 -m recent --name limit-1297 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1297 -m recent --name limit-1297 --rsource --mask 255.255.255.255 --set --A limit-1298 -m recent --name limit-1298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1298 -m limit --limit 1/second -j LOG --A limit-1298 -m recent --name limit-1298 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 --A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-130 -j ACCEPT --A limit-1300 -m recent --name limit-1300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1300 -m recent --name limit-1300 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1301 -m recent --name limit-1301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1301 -m recent --name limit-1301 --rsource --mask 255.255.255.255 --set --A limit-1302 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1302 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1303 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1303 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1304 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1304 -m limit --limit 1/second -j LOG --A limit-1304 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1305 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1305 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1306 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1306 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1307 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1307 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1308 -j ACCEPT --A limit-131 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1310 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1310 -m limit --limit 1/second -j LOG --A limit-1310 -j ACCEPT --A limit-1311 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1311 -m limit --limit 1/second -j LOG --A limit-1312 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1312 -j ACCEPT --A limit-1314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1315 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1316 -m limit --limit 1/second -j LOG --A limit-1316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1317 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1319 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1320 -j ACCEPT --A limit-1322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1322 -m limit --limit 1/second -j LOG --A limit-1322 -j ACCEPT --A limit-1323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1323 -m limit --limit 1/second -j LOG --A limit-1324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1324 -j ACCEPT --A limit-1326 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1326 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1327 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1327 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1328 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1328 -m limit --limit 1/second -j LOG --A limit-1328 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1329 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1329 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1331 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1332 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1332 -j ACCEPT --A limit-1334 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1334 -m limit --limit 1/second -j LOG --A limit-1334 -j ACCEPT --A limit-1335 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1335 -m limit --limit 1/second -j LOG --A limit-1336 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1336 -j ACCEPT --A limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-134 -m limit --limit 1/second -j LOG --A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1340 -m limit --limit 1/second -j LOG --A limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1343 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1343 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1344 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1344 -j ACCEPT --A limit-1346 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1346 -m limit --limit 1/second -j LOG --A limit-1346 -j ACCEPT --A limit-1347 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1347 -m limit --limit 1/second -j LOG --A limit-1348 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1348 -j ACCEPT --A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set --A limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1352 -m limit --limit 1/second -j LOG --A limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --set --A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1358 -m limit --limit 1/second -j LOG --A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1362 -j ACCEPT --A limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1364 -m limit --limit 1/second -j LOG --A limit-1364 -j ACCEPT --A limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1365 -m limit --limit 1/second -j LOG --A limit-1366 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1366 -j ACCEPT --A limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1370 -m limit --limit 1/second -j LOG --A limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1374 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1374 -j ACCEPT --A limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1376 -m limit --limit 1/second -j LOG --A limit-1376 -j ACCEPT --A limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1377 -m limit --limit 1/second -j LOG --A limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1378 -j ACCEPT --A limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-138 -j ACCEPT --A limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1382 -m limit --limit 1/second -j LOG --A limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1386 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1386 -j ACCEPT --A limit-1388 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1388 -m limit --limit 1/second -j LOG --A limit-1388 -j ACCEPT --A limit-1389 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1389 -m limit --limit 1/second -j LOG --A limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1390 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1390 -j ACCEPT --A limit-1392 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1392 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1393 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1393 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1394 -m limit --limit 1/second -j LOG --A limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1398 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1398 -j ACCEPT --A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 --A limit-14 -m limit --limit 1/second -j LOG --A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-140 -m limit --limit 1/second -j LOG --A limit-140 -j ACCEPT --A limit-1400 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1400 -m limit --limit 1/second -j LOG --A limit-1400 -j ACCEPT --A limit-1401 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1401 -m limit --limit 1/second -j LOG --A limit-1402 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1402 -j ACCEPT --A limit-1404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1404 -j ACCEPT --A limit-1404 -m limit --limit 1/second -j LOG --A limit-1404 -j DROP --A limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1405 -j RETURN --A limit-1405 -m limit --limit 1/second -j LOG --A limit-1405 -j DROP --A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1406 -j logaccept-77 --A limit-1406 -m limit --limit 1/second -j LOG --A limit-1406 -j DROP --A limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1407 -j ACCEPT --A limit-1407 -m limit --limit 1/second -j LOG --A limit-1407 -j DROP --A limit-1408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1408 -j ACCEPT --A limit-1408 -m limit --limit 1/second -j LOG --A limit-1408 -j DROP --A limit-1409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1409 -j RETURN --A limit-1409 -m limit --limit 1/second -j LOG --A limit-1409 -j DROP --A limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-141 -m limit --limit 1/second -j LOG --A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1410 -j logaccept-78 --A limit-1410 -m limit --limit 1/second -j LOG --A limit-1410 -j DROP --A limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1411 -j ACCEPT --A limit-1411 -m limit --limit 1/second -j LOG --A limit-1411 -j DROP --A limit-1412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1412 -j ACCEPT --A limit-1412 -j DROP --A limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1413 -j RETURN --A limit-1413 -j DROP --A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1414 -j logaccept-79 --A limit-1414 -j DROP --A limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1415 -j ACCEPT --A limit-1415 -j DROP --A limit-1416 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1416 -j ACCEPT --A limit-1416 -j DROP --A limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1417 -j RETURN --A limit-1417 -j DROP --A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1418 -j logaccept-80 --A limit-1418 -j DROP --A limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1419 -j ACCEPT --A limit-1419 -j DROP --A limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-142 -j ACCEPT --A limit-1420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1420 -j ACCEPT --A limit-1420 -m limit --limit 1/second -j LOG --A limit-1420 -j DROP --A limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1421 -j RETURN --A limit-1421 -m limit --limit 1/second -j LOG --A limit-1421 -j DROP --A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1422 -j logaccept-81 --A limit-1422 -m limit --limit 1/second -j LOG --A limit-1422 -j DROP --A limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1423 -j ACCEPT --A limit-1423 -m limit --limit 1/second -j LOG --A limit-1423 -j DROP --A limit-1424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1424 -j ACCEPT --A limit-1424 -j DROP --A limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1425 -j RETURN --A limit-1425 -j DROP --A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1426 -j logaccept-82 --A limit-1426 -j DROP --A limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1427 -j ACCEPT --A limit-1427 -j DROP --A limit-1428 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1428 -j ACCEPT --A limit-1428 -j DROP --A limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1429 -j RETURN --A limit-1429 -j DROP --A limit-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1430 -j logaccept-83 --A limit-1430 -j DROP --A limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1431 -j ACCEPT --A limit-1431 -j DROP --A limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-146 -m limit --limit 1/second -j LOG --A limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 --A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-150 -j ACCEPT --A limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-152 -m limit --limit 1/second -j LOG --A limit-152 -j ACCEPT --A limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-153 -m limit --limit 1/second -j LOG --A limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-154 -j ACCEPT --A limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-158 -m limit --limit 1/second -j LOG --A limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 --A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-162 -j ACCEPT --A limit-163 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-164 -m limit --limit 1/second -j LOG --A limit-164 -j ACCEPT --A limit-165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-165 -m limit --limit 1/second -j LOG --A limit-166 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-166 -j ACCEPT --A limit-167 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 --A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 --A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --set --A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 --A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 --A limit-170 -m limit --limit 1/second -j LOG --A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 --A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 --A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 --A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --set --A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 --A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 --A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 --A limit-176 -m limit --limit 1/second -j LOG --A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 --A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 --A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-72 --A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-19 --A limit-18 -j ACCEPT --A limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 --A limit-180 -j ACCEPT --A limit-181 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 --A limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 --A limit-182 -m limit --limit 1/second -j LOG --A limit-182 -j ACCEPT --A limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 --A limit-183 -m limit --limit 1/second -j LOG --A limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 --A limit-184 -j ACCEPT --A limit-185 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 --A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 --A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 --A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 --A limit-188 -m limit --limit 1/second -j LOG --A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 --A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20 --A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 --A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-84 --A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 --A limit-192 -j ACCEPT --A limit-193 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 --A limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 --A limit-194 -m limit --limit 1/second -j LOG --A limit-194 -j ACCEPT --A limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 --A limit-195 -m limit --limit 1/second -j LOG --A limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 --A limit-196 -j ACCEPT --A limit-197 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 --A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 --A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 --A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 --A limit-2 -m limit --limit 1/second -j LOG --A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-21 --A limit-20 -m limit --limit 1/second -j LOG --A limit-20 -j ACCEPT --A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 --A limit-200 -m limit --limit 1/second -j LOG --A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 --A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 --A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-96 --A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 --A limit-204 -j ACCEPT --A limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 --A limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 --A limit-206 -m limit --limit 1/second -j LOG --A limit-206 -j ACCEPT --A limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 --A limit-207 -m limit --limit 1/second -j LOG --A limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 --A limit-208 -j ACCEPT --A limit-209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 --A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-22 --A limit-21 -m limit --limit 1/second -j LOG --A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 --A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 --A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 --A limit-212 -m limit --limit 1/second -j LOG --A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 --A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 --A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-108 --A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 --A limit-216 -j ACCEPT --A limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 --A limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 --A limit-218 -m limit --limit 1/second -j LOG --A limit-218 -j ACCEPT --A limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 --A limit-219 -m limit --limit 1/second -j LOG --A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-23 --A limit-22 -j ACCEPT --A limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 --A limit-220 -j ACCEPT --A limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 --A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set --A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-224 -m limit --limit 1/second -j LOG --A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set --A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-24 --A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-230 -m limit --limit 1/second -j LOG --A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-234 -j ACCEPT --A limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-236 -m limit --limit 1/second -j LOG --A limit-236 -j ACCEPT --A limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-237 -m limit --limit 1/second -j LOG --A limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-238 -j ACCEPT --A limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 --A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-242 -m limit --limit 1/second -j LOG --A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-246 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-246 -j ACCEPT --A limit-247 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-248 -m limit --limit 1/second -j LOG --A limit-248 -j ACCEPT --A limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-249 -m limit --limit 1/second -j LOG --A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 --A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-250 -j ACCEPT --A limit-251 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-254 -m limit --limit 1/second -j LOG --A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-258 -j ACCEPT --A limit-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 --A limit-26 -m limit --limit 1/second -j LOG --A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-260 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-260 -m limit --limit 1/second -j LOG --A limit-260 -j ACCEPT --A limit-261 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-261 -m limit --limit 1/second -j LOG --A limit-262 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-262 -j ACCEPT --A limit-263 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-266 -m limit --limit 1/second -j LOG --A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 --A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-270 -j ACCEPT --A limit-271 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-272 -m limit --limit 1/second -j LOG --A limit-272 -j ACCEPT --A limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-273 -m limit --limit 1/second -j LOG --A limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-274 -j ACCEPT --A limit-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --set --A limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-278 -m limit --limit 1/second -j LOG --A limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 --A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set --A limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-284 -m limit --limit 1/second -j LOG --A limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-288 -j ACCEPT --A limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-30 --A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-290 -m limit --limit 1/second -j LOG --A limit-290 -j ACCEPT --A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-291 -m limit --limit 1/second -j LOG --A limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-292 -j ACCEPT --A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-296 -m limit --limit 1/second -j LOG --A limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 --A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-30 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 --A limit-30 -j ACCEPT --A limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-300 -j ACCEPT --A limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-302 -m limit --limit 1/second -j LOG --A limit-302 -j ACCEPT --A limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-303 -m limit --limit 1/second -j LOG --A limit-304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-304 -j ACCEPT --A limit-305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-308 -m limit --limit 1/second -j LOG --A limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-31 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 --A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-312 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-312 -j ACCEPT --A limit-313 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m limit --limit 1/second -j LOG --A limit-314 -j ACCEPT --A limit-315 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-315 -m limit --limit 1/second -j LOG --A limit-316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-316 -j ACCEPT --A limit-317 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 --A limit-32 -m limit --limit 1/second -j LOG --A limit-32 -j ACCEPT --A limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-320 -m limit --limit 1/second -j LOG --A limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-324 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-324 -j ACCEPT --A limit-325 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-326 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-326 -m limit --limit 1/second -j LOG --A limit-326 -j ACCEPT --A limit-327 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-327 -m limit --limit 1/second -j LOG --A limit-328 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-328 -j ACCEPT --A limit-329 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 --A limit-33 -m limit --limit 1/second -j LOG --A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-330 -j ACCEPT --A limit-330 -m limit --limit 1/second -j LOG --A limit-330 -j DROP --A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-331 -j RETURN --A limit-331 -m limit --limit 1/second -j LOG --A limit-331 -j DROP --A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-63 --A limit-332 -m limit --limit 1/second -j LOG --A limit-332 -j DROP --A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-333 -j ACCEPT --A limit-333 -m limit --limit 1/second -j LOG --A limit-333 -j DROP --A limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-334 -j ACCEPT --A limit-334 -m limit --limit 1/second -j LOG --A limit-334 -j DROP --A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-335 -j RETURN --A limit-335 -m limit --limit 1/second -j LOG --A limit-335 -j DROP --A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-64 --A limit-336 -m limit --limit 1/second -j LOG --A limit-336 -j DROP --A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-337 -j ACCEPT --A limit-337 -m limit --limit 1/second -j LOG --A limit-337 -j DROP --A limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-338 -j ACCEPT --A limit-338 -j DROP --A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-339 -j RETURN --A limit-339 -j DROP --A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 --A limit-34 -j ACCEPT --A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-65 --A limit-340 -j DROP --A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-341 -j ACCEPT --A limit-341 -j DROP --A limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-342 -j ACCEPT --A limit-342 -j DROP --A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-343 -j RETURN --A limit-343 -j DROP --A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-66 --A limit-344 -j DROP --A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-345 -j ACCEPT --A limit-345 -j DROP --A limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-346 -j ACCEPT --A limit-346 -m limit --limit 1/second -j LOG --A limit-346 -j DROP --A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-347 -j RETURN --A limit-347 -m limit --limit 1/second -j LOG --A limit-347 -j DROP --A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-67 --A limit-348 -m limit --limit 1/second -j LOG --A limit-348 -j DROP --A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-349 -j ACCEPT --A limit-349 -m limit --limit 1/second -j LOG --A limit-349 -j DROP --A limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-36 --A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-350 -j ACCEPT --A limit-350 -j DROP --A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-351 -j RETURN --A limit-351 -j DROP --A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-68 --A limit-352 -j DROP --A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-353 -j ACCEPT --A limit-353 -j DROP --A limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-354 -j ACCEPT --A limit-354 -j DROP --A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-355 -j RETURN --A limit-355 -j DROP --A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-69 --A limit-356 -j DROP --A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-357 -j ACCEPT --A limit-357 -j DROP --A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 --A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 --A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set --A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 --A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 --A limit-360 -m limit --limit 1/second -j LOG --A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 --A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 --A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 --A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set --A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 --A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 --A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set --A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 --A limit-366 -m limit --limit 1/second -j LOG --A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 --A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 --A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 --A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set --A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 --A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 --A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 --A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 --A limit-372 -m limit --limit 1/second -j LOG --A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 --A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 --A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 --A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 --A limit-376 -j ACCEPT --A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 --A limit-378 -m limit --limit 1/second -j LOG --A limit-378 -j ACCEPT --A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 --A limit-379 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 --A limit-38 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 --A limit-380 -j ACCEPT --A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 --A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 --A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 --A limit-384 -m limit --limit 1/second -j LOG --A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 --A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 --A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-144 --A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 --A limit-388 -j ACCEPT --A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 --A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 --A limit-390 -m limit --limit 1/second -j LOG --A limit-390 -j ACCEPT --A limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 --A limit-391 -m limit --limit 1/second -j LOG --A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 --A limit-392 -j ACCEPT --A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 --A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 --A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 --A limit-396 -m limit --limit 1/second -j LOG --A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 --A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 --A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 --A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 --A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 --A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 --A limit-400 -j ACCEPT --A limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 --A limit-402 -m limit --limit 1/second -j LOG --A limit-402 -j ACCEPT --A limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 --A limit-403 -m limit --limit 1/second -j LOG --A limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 --A limit-404 -j ACCEPT --A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 --A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 --A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 --A limit-408 -m limit --limit 1/second -j LOG --A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 --A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-42 --A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 --A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-168 --A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 --A limit-412 -j ACCEPT --A limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 --A limit-414 -m limit --limit 1/second -j LOG --A limit-414 -j ACCEPT --A limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 --A limit-415 -m limit --limit 1/second -j LOG --A limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 --A limit-416 -j ACCEPT --A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set --A limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 --A limit-42 -j ACCEPT --A limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-420 -m limit --limit 1/second -j LOG --A limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --set --A limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-426 -m limit --limit 1/second -j LOG --A limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-43 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 --A limit-430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-430 -j ACCEPT --A limit-432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-432 -m limit --limit 1/second -j LOG --A limit-432 -j ACCEPT --A limit-433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-433 -m limit --limit 1/second -j LOG --A limit-434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-434 -j ACCEPT --A limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-438 -m limit --limit 1/second -j LOG --A limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 --A limit-44 -m limit --limit 1/second -j LOG --A limit-44 -j ACCEPT --A limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-442 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-442 -j ACCEPT --A limit-444 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-444 -m limit --limit 1/second -j LOG --A limit-444 -j ACCEPT --A limit-445 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-445 -m limit --limit 1/second -j LOG --A limit-446 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-446 -j ACCEPT --A limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 --A limit-45 -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-450 -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-454 -j ACCEPT --A limit-456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-456 -m limit --limit 1/second -j LOG --A limit-456 -j ACCEPT --A limit-457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-457 -m limit --limit 1/second -j LOG --A limit-458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-458 -j ACCEPT --A limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 --A limit-46 -j ACCEPT --A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-462 -m limit --limit 1/second -j LOG --A limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-466 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-466 -j ACCEPT --A limit-468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-468 -m limit --limit 1/second -j LOG --A limit-468 -j ACCEPT --A limit-469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-469 -m limit --limit 1/second -j LOG --A limit-47 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 --A limit-470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-470 -j ACCEPT --A limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --set --A limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-474 -m limit --limit 1/second -j LOG --A limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --set --A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 --A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-480 -m limit --limit 1/second -j LOG --A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-484 -j ACCEPT --A limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-486 -m limit --limit 1/second -j LOG --A limit-486 -j ACCEPT --A limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-487 -m limit --limit 1/second -j LOG --A limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-488 -j ACCEPT --A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 --A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-492 -m limit --limit 1/second -j LOG --A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-496 -j ACCEPT --A limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-498 -m limit --limit 1/second -j LOG --A limit-498 -j ACCEPT --A limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-499 -m limit --limit 1/second -j LOG --A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 --A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set --A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 --A limit-50 -m limit --limit 1/second -j LOG --A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-500 -j ACCEPT --A limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-504 -m limit --limit 1/second -j LOG --A limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-508 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-508 -j ACCEPT --A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 --A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-510 -m limit --limit 1/second -j LOG --A limit-510 -j ACCEPT --A limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-511 -m limit --limit 1/second -j LOG --A limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-512 -j ACCEPT --A limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-516 -m limit --limit 1/second -j LOG --A limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 --A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-520 -j ACCEPT --A limit-522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-522 -m limit --limit 1/second -j LOG --A limit-522 -j ACCEPT --A limit-523 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-523 -m limit --limit 1/second -j LOG --A limit-524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-524 -j ACCEPT --A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 --A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 --A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set --A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 --A limit-528 -m limit --limit 1/second -j LOG --A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 --A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-54 --A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 --A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 --A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set --A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 --A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 --A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 --A limit-534 -m limit --limit 1/second -j LOG --A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 --A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 --A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-186 --A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 --A limit-538 -j ACCEPT --A limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 --A limit-54 -j ACCEPT --A limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 --A limit-540 -m limit --limit 1/second -j LOG --A limit-540 -j ACCEPT --A limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 --A limit-541 -m limit --limit 1/second -j LOG --A limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 --A limit-542 -j ACCEPT --A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 --A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 --A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 --A limit-546 -m limit --limit 1/second -j LOG --A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 --A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 --A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-198 --A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-55 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 --A limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 --A limit-550 -j ACCEPT --A limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 --A limit-552 -m limit --limit 1/second -j LOG --A limit-552 -j ACCEPT --A limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 --A limit-553 -m limit --limit 1/second -j LOG --A limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 --A limit-554 -j ACCEPT --A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 --A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 --A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 --A limit-558 -m limit --limit 1/second -j LOG --A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 --A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 --A limit-56 -m limit --limit 1/second -j LOG --A limit-56 -j ACCEPT --A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 --A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-210 --A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 --A limit-562 -j ACCEPT --A limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 --A limit-564 -m limit --limit 1/second -j LOG --A limit-564 -j ACCEPT --A limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 --A limit-565 -m limit --limit 1/second -j LOG --A limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 --A limit-566 -j ACCEPT --A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 --A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 --A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 --A limit-57 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 --A limit-570 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 --A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 --A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-222 --A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 --A limit-574 -j ACCEPT --A limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 --A limit-576 -m limit --limit 1/second -j LOG --A limit-576 -j ACCEPT --A limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 --A limit-577 -m limit --limit 1/second -j LOG --A limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 --A limit-578 -j ACCEPT --A limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 --A limit-58 -j ACCEPT --A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --set --A limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-582 -m limit --limit 1/second -j LOG --A limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --set --A limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-588 -m limit --limit 1/second -j LOG --A limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-59 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 --A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-592 -j ACCEPT --A limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-594 -m limit --limit 1/second -j LOG --A limit-594 -j ACCEPT --A limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-595 -m limit --limit 1/second -j LOG --A limit-596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-596 -j ACCEPT --A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 --A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-600 -m limit --limit 1/second -j LOG --A limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-604 -j ACCEPT --A limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-606 -m limit --limit 1/second -j LOG --A limit-606 -j ACCEPT --A limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-607 -m limit --limit 1/second -j LOG --A limit-608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-608 -j ACCEPT --A limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --set --A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-612 -m limit --limit 1/second -j LOG --A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-616 -j ACCEPT --A limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-618 -m limit --limit 1/second -j LOG --A limit-618 -j ACCEPT --A limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-619 -m limit --limit 1/second -j LOG --A limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-62 -m limit --limit 1/second -j LOG --A limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-620 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-620 -j ACCEPT --A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-624 -m limit --limit 1/second -j LOG --A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-628 -j ACCEPT --A limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-630 -m limit --limit 1/second -j LOG --A limit-630 -j ACCEPT --A limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-631 -m limit --limit 1/second -j LOG --A limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-632 -j ACCEPT --A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set --A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-636 -m limit --limit 1/second -j LOG --A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set --A limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-642 -m limit --limit 1/second -j LOG --A limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-646 -j ACCEPT --A limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-648 -m limit --limit 1/second -j LOG --A limit-648 -j ACCEPT --A limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-649 -m limit --limit 1/second -j LOG --A limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --set --A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-650 -j ACCEPT --A limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-654 -m limit --limit 1/second -j LOG --A limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-658 -j ACCEPT --A limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-660 -m limit --limit 1/second -j LOG --A limit-660 -j ACCEPT --A limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-661 -m limit --limit 1/second -j LOG --A limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-662 -j ACCEPT --A limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-666 -m limit --limit 1/second -j LOG --A limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-670 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-670 -j ACCEPT --A limit-672 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-672 -m limit --limit 1/second -j LOG --A limit-672 -j ACCEPT --A limit-673 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-673 -m limit --limit 1/second -j LOG --A limit-674 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-674 -j ACCEPT --A limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-678 -m limit --limit 1/second -j LOG --A limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-68 -m limit --limit 1/second -j LOG --A limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-682 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-682 -j ACCEPT --A limit-684 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-684 -m limit --limit 1/second -j LOG --A limit-684 -j ACCEPT --A limit-685 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-685 -m limit --limit 1/second -j LOG --A limit-686 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-686 -j ACCEPT --A limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-688 -j ACCEPT --A limit-688 -m limit --limit 1/second -j LOG --A limit-688 -j DROP --A limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-689 -j RETURN --A limit-689 -m limit --limit 1/second -j LOG --A limit-689 -j DROP --A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j logaccept-70 --A limit-690 -m limit --limit 1/second -j LOG --A limit-690 -j DROP --A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-691 -j ACCEPT --A limit-691 -m limit --limit 1/second -j LOG --A limit-691 -j DROP --A limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-692 -j ACCEPT --A limit-692 -m limit --limit 1/second -j LOG --A limit-692 -j DROP --A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-693 -j RETURN --A limit-693 -m limit --limit 1/second -j LOG --A limit-693 -j DROP --A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j logaccept-71 --A limit-694 -m limit --limit 1/second -j LOG --A limit-694 -j DROP --A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-695 -j ACCEPT --A limit-695 -m limit --limit 1/second -j LOG --A limit-695 -j DROP --A limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-696 -j ACCEPT --A limit-696 -j DROP --A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-697 -j RETURN --A limit-697 -j DROP --A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j logaccept-72 --A limit-698 -j DROP --A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-699 -j ACCEPT --A limit-699 -j DROP --A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 --A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set --A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-700 -j ACCEPT --A limit-700 -j DROP --A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-701 -j RETURN --A limit-701 -j DROP --A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j logaccept-73 --A limit-702 -j DROP --A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-703 -j ACCEPT --A limit-703 -j DROP --A limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-704 -j ACCEPT --A limit-704 -m limit --limit 1/second -j LOG --A limit-704 -j DROP --A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-705 -j RETURN --A limit-705 -m limit --limit 1/second -j LOG --A limit-705 -j DROP --A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j logaccept-74 --A limit-706 -m limit --limit 1/second -j LOG --A limit-706 -j DROP --A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-707 -j ACCEPT --A limit-707 -m limit --limit 1/second -j LOG --A limit-707 -j DROP --A limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-708 -j ACCEPT --A limit-708 -j DROP --A limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-709 -j RETURN --A limit-709 -j DROP --A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j logaccept-75 --A limit-710 -j DROP --A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-711 -j ACCEPT --A limit-711 -j DROP --A limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-712 -j ACCEPT --A limit-712 -j DROP --A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-713 -j RETURN --A limit-713 -j DROP --A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j logaccept-76 --A limit-714 -j DROP --A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-715 -j ACCEPT --A limit-715 -j DROP --A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 --A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set --A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 --A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set --A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 --A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set --A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 --A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-72 -j ACCEPT --A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 --A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set --A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 --A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set --A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 --A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set --A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 --A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set --A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 --A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set --A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 --A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 --A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set --A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 --A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set --A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 --A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 --A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 --A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 --A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 --A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-246 --A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 --A limit-735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 --A limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 --A limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 --A limit-737 -m limit --limit 1/second -j LOG --A limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 --A limit-739 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 --A limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-74 -m limit --limit 1/second -j LOG --A limit-74 -j ACCEPT --A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 --A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 --A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 --A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 --A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 --A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-258 --A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 --A limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 --A limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 --A limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 --A limit-749 -m limit --limit 1/second -j LOG --A limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-75 -m limit --limit 1/second -j LOG --A limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 --A limit-751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-264 --A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 --A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 --A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 --A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 --A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 --A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-270 --A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 --A limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 --A limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-76 -j ACCEPT --A limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 --A limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 --A limit-761 -m limit --limit 1/second -j LOG --A limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 --A limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 --A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 --A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 --A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 --A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 --A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 --A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-282 --A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 --A limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 --A limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 --A limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 --A limit-773 -m limit --limit 1/second -j LOG --A limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 --A limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-288 --A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --set --A limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --set --A limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --set --A limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --set --A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --set --A limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-788 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-789 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-791 -m limit --limit 1/second -j LOG --A limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 --A limit-8 -m limit --limit 1/second -j LOG --A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-80 -m limit --limit 1/second -j LOG --A limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-800 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-801 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-802 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-803 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-803 -m limit --limit 1/second -j LOG --A limit-804 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-805 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-813 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-815 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-815 -m limit --limit 1/second -j LOG --A limit-816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-817 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-824 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-825 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-826 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-827 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-827 -m limit --limit 1/second -j LOG --A limit-828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-829 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --set --A limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --set --A limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --set --A limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --set --A limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --set --A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-84 -j ACCEPT --A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-845 -m limit --limit 1/second -j LOG --A limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-847 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-857 -m limit --limit 1/second -j LOG --A limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-86 -m limit --limit 1/second -j LOG --A limit-86 -j ACCEPT --A limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-866 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-867 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-868 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-869 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-869 -m limit --limit 1/second -j LOG --A limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-87 -m limit --limit 1/second -j LOG --A limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-879 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-88 -j ACCEPT --A limit-880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-881 -m limit --limit 1/second -j LOG --A limit-882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-883 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 --A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --set --A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 --A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --set --A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 --A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --set --A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 --A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 --A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --set --A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 --A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --set --A limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 --A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 --A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 --A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 --A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 --A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-300 --A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 --A limit-897 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 --A limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 --A limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 --A limit-899 -m limit --limit 1/second -j LOG --A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 --A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 --A limit-901 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 --A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 --A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 --A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 --A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 --A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 --A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 --A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 --A limit-909 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 --A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 --A limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 --A limit-911 -m limit --limit 1/second -j LOG --A limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 --A limit-913 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-318 --A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 --A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 --A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 --A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 --A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 --A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-324 --A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-92 -m limit --limit 1/second -j LOG --A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 --A limit-921 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 --A limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 --A limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 --A limit-923 -m limit --limit 1/second -j LOG --A limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 --A limit-925 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-330 --A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 --A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 --A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 --A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 --A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 --A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 --A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 --A limit-933 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 --A limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 --A limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 --A limit-935 -m limit --limit 1/second -j LOG --A limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 --A limit-937 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 --A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --set --A limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --set --A limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --set --A limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --set --A limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --set --A limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-950 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-951 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-952 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-953 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-953 -m limit --limit 1/second -j LOG --A limit-954 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-955 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-96 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-96 -j ACCEPT --A limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-962 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-963 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-964 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-965 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-965 -m limit --limit 1/second -j LOG --A limit-966 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-967 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-97 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-974 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-975 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-976 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-977 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-977 -m limit --limit 1/second -j LOG --A limit-978 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-979 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-98 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-98 -m limit --limit 1/second -j LOG --A limit-98 -j ACCEPT --A limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-987 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-989 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-989 -m limit --limit 1/second -j LOG --A limit-99 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-99 -m limit --limit 1/second -j LOG --A limit-990 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-991 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set --A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set --A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set --A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --set --A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --set --A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A logaccept-0 -m limit --limit 1/second -j LOG --A logaccept-0 -j ACCEPT --A logaccept-1 -m limit --limit 1/second -j LOG --A logaccept-1 -j ACCEPT --A logaccept-10 -m limit --limit 1/second -j LOG --A logaccept-10 -j ACCEPT --A logaccept-11 -m limit --limit 1/second -j LOG --A logaccept-11 -j ACCEPT --A logaccept-12 -m limit --limit 1/second -j LOG --A logaccept-12 -j ACCEPT --A logaccept-13 -m limit --limit 1/second -j LOG --A logaccept-13 -j ACCEPT --A logaccept-14 -m limit --limit 1/second -j LOG --A logaccept-14 -j ACCEPT --A logaccept-15 -m limit --limit 1/second -j LOG --A logaccept-15 -j ACCEPT --A logaccept-16 -m limit --limit 1/second -j LOG --A logaccept-16 -j ACCEPT --A logaccept-17 -m limit --limit 1/second -j LOG --A logaccept-17 -j ACCEPT --A logaccept-18 -m limit --limit 1/second -j LOG --A logaccept-18 -j ACCEPT --A logaccept-19 -m limit --limit 1/second -j LOG --A logaccept-19 -j ACCEPT --A logaccept-2 -m limit --limit 1/second -j LOG --A logaccept-2 -j ACCEPT --A logaccept-20 -m limit --limit 1/second -j LOG --A logaccept-20 -j ACCEPT --A logaccept-21 -m limit --limit 1/second -j LOG --A logaccept-21 -j ACCEPT --A logaccept-22 -m limit --limit 1/second -j LOG --A logaccept-22 -j ACCEPT --A logaccept-23 -m limit --limit 1/second -j LOG --A logaccept-23 -j ACCEPT --A logaccept-24 -m limit --limit 1/second -j LOG --A logaccept-24 -j ACCEPT --A logaccept-25 -m limit --limit 1/second -j LOG --A logaccept-25 -j ACCEPT --A logaccept-26 -m limit --limit 1/second -j LOG --A logaccept-26 -j ACCEPT --A logaccept-27 -m limit --limit 1/second -j LOG --A logaccept-27 -j ACCEPT --A logaccept-28 -m limit --limit 1/second -j LOG --A logaccept-28 -j ACCEPT --A logaccept-29 -m limit --limit 1/second -j LOG --A logaccept-29 -j ACCEPT --A logaccept-3 -m limit --limit 1/second -j LOG --A logaccept-3 -j ACCEPT --A logaccept-30 -m limit --limit 1/second -j LOG --A logaccept-30 -j ACCEPT --A logaccept-31 -m limit --limit 1/second -j LOG --A logaccept-31 -j ACCEPT --A logaccept-32 -m limit --limit 1/second -j LOG --A logaccept-32 -j ACCEPT --A logaccept-33 -m limit --limit 1/second -j LOG --A logaccept-33 -j ACCEPT --A logaccept-34 -m limit --limit 1/second -j LOG --A logaccept-34 -j ACCEPT --A logaccept-35 -m limit --limit 1/second -j LOG --A logaccept-35 -j ACCEPT --A logaccept-36 -m limit --limit 1/second -j LOG --A logaccept-36 -j ACCEPT --A logaccept-37 -m limit --limit 1/second -j LOG --A logaccept-37 -j ACCEPT --A logaccept-38 -m limit --limit 1/second -j LOG --A logaccept-38 -j ACCEPT --A logaccept-39 -m limit --limit 1/second -j LOG --A logaccept-39 -j ACCEPT --A logaccept-4 -m limit --limit 1/second -j LOG --A logaccept-4 -j ACCEPT --A logaccept-40 -m limit --limit 1/second -j LOG --A logaccept-40 -j ACCEPT --A logaccept-41 -m limit --limit 1/second -j LOG --A logaccept-41 -j ACCEPT --A logaccept-42 -m limit --limit 1/second -j LOG --A logaccept-42 -j ACCEPT --A logaccept-43 -m limit --limit 1/second -j LOG --A logaccept-43 -j ACCEPT --A logaccept-44 -m limit --limit 1/second -j LOG --A logaccept-44 -j ACCEPT --A logaccept-45 -m limit --limit 1/second -j LOG --A logaccept-45 -j ACCEPT --A logaccept-46 -m limit --limit 1/second -j LOG --A logaccept-46 -j ACCEPT --A logaccept-47 -m limit --limit 1/second -j LOG --A logaccept-47 -j ACCEPT --A logaccept-48 -m limit --limit 1/second -j LOG --A logaccept-48 -j ACCEPT --A logaccept-49 -m limit --limit 1/second -j LOG --A logaccept-49 -j ACCEPT --A logaccept-5 -m limit --limit 1/second -j LOG --A logaccept-5 -j ACCEPT --A logaccept-50 -m limit --limit 1/second -j LOG --A logaccept-50 -j ACCEPT --A logaccept-51 -m limit --limit 1/second -j LOG --A logaccept-51 -j ACCEPT --A logaccept-52 -m limit --limit 1/second -j LOG --A logaccept-52 -j ACCEPT --A logaccept-53 -m limit --limit 1/second -j LOG --A logaccept-53 -j ACCEPT --A logaccept-54 -m limit --limit 1/second -j LOG --A logaccept-54 -j ACCEPT --A logaccept-55 -m limit --limit 1/second -j LOG --A logaccept-55 -j ACCEPT --A logaccept-56 -m limit --limit 1/second -j LOG --A logaccept-56 -j ACCEPT --A logaccept-57 -m limit --limit 1/second -j LOG --A logaccept-57 -j ACCEPT --A logaccept-58 -m limit --limit 1/second -j LOG --A logaccept-58 -j ACCEPT --A logaccept-59 -m limit --limit 1/second -j LOG --A logaccept-59 -j ACCEPT --A logaccept-6 -m limit --limit 1/second -j LOG --A logaccept-6 -j ACCEPT --A logaccept-60 -m limit --limit 1/second -j LOG --A logaccept-60 -j ACCEPT --A logaccept-61 -m limit --limit 1/second -j LOG --A logaccept-61 -j ACCEPT --A logaccept-62 -m limit --limit 1/second -j LOG --A logaccept-62 -j ACCEPT --A logaccept-63 -m limit --limit 1/second -j LOG --A logaccept-63 -j ACCEPT --A logaccept-64 -m limit --limit 1/second -j LOG --A logaccept-64 -j ACCEPT --A logaccept-65 -m limit --limit 1/second -j LOG --A logaccept-65 -j ACCEPT --A logaccept-66 -m limit --limit 1/second -j LOG --A logaccept-66 -j ACCEPT --A logaccept-67 -m limit --limit 1/second -j LOG --A logaccept-67 -j ACCEPT --A logaccept-68 -m limit --limit 1/second -j LOG --A logaccept-68 -j ACCEPT --A logaccept-69 -m limit --limit 1/second -j LOG --A logaccept-69 -j ACCEPT --A logaccept-7 -m limit --limit 1/second -j LOG --A logaccept-7 -j ACCEPT --A logaccept-70 -m limit --limit 1/second -j LOG --A logaccept-70 -j ACCEPT --A logaccept-71 -m limit --limit 1/second -j LOG --A logaccept-71 -j ACCEPT --A logaccept-72 -m limit --limit 1/second -j LOG --A logaccept-72 -j ACCEPT --A logaccept-73 -m limit --limit 1/second -j LOG --A logaccept-73 -j ACCEPT --A logaccept-74 -m limit --limit 1/second -j LOG --A logaccept-74 -j ACCEPT --A logaccept-75 -m limit --limit 1/second -j LOG --A logaccept-75 -j ACCEPT --A logaccept-76 -m limit --limit 1/second -j LOG --A logaccept-76 -j ACCEPT --A logaccept-77 -m limit --limit 1/second -j LOG --A logaccept-77 -j ACCEPT --A logaccept-78 -m limit --limit 1/second -j LOG --A logaccept-78 -j ACCEPT --A logaccept-79 -m limit --limit 1/second -j LOG --A logaccept-79 -j ACCEPT --A logaccept-8 -m limit --limit 1/second -j LOG --A logaccept-8 -j ACCEPT --A logaccept-80 -m limit --limit 1/second -j LOG --A logaccept-80 -j ACCEPT --A logaccept-81 -m limit --limit 1/second -j LOG --A logaccept-81 -j ACCEPT --A logaccept-82 -m limit --limit 1/second -j LOG --A logaccept-82 -j ACCEPT --A logaccept-83 -m limit --limit 1/second -j LOG --A logaccept-83 -j ACCEPT --A logaccept-84 -m limit --limit 1/second -j LOG --A logaccept-84 -j ACCEPT --A logaccept-9 -m limit --limit 1/second -j LOG --A logaccept-9 -j ACCEPT --A logaccept-final-0 -m limit --limit 1/second -j LOG --A logaccept-final-0 -j ACCEPT --A logaccept-final-1 -m limit --limit 1/second -j LOG --A logaccept-final-1 -j ACCEPT --A logaccept-final-10 -m limit --limit 1/second -j LOG --A logaccept-final-10 -j ACCEPT --A logaccept-final-11 -m limit --limit 1/second -j LOG --A logaccept-final-11 -j ACCEPT --A logaccept-final-12 -m limit --limit 1/second -j LOG --A logaccept-final-12 -j ACCEPT --A logaccept-final-13 -m limit --limit 1/second -j LOG --A logaccept-final-13 -j ACCEPT --A logaccept-final-14 -m limit --limit 1/second -j LOG --A logaccept-final-14 -j ACCEPT --A logaccept-final-15 -m limit --limit 1/second -j LOG --A logaccept-final-15 -j ACCEPT --A logaccept-final-16 -m limit --limit 1/second -j LOG --A logaccept-final-16 -j ACCEPT --A logaccept-final-17 -m limit --limit 1/second -j LOG --A logaccept-final-17 -j ACCEPT --A logaccept-final-18 -m limit --limit 1/second -j LOG --A logaccept-final-18 -j ACCEPT --A logaccept-final-19 -m limit --limit 1/second -j LOG --A logaccept-final-19 -j ACCEPT --A logaccept-final-2 -m limit --limit 1/second -j LOG --A logaccept-final-2 -j ACCEPT --A logaccept-final-20 -m limit --limit 1/second -j LOG --A logaccept-final-20 -j ACCEPT --A logaccept-final-21 -m limit --limit 1/second -j LOG --A logaccept-final-21 -j ACCEPT --A logaccept-final-22 -m limit --limit 1/second -j LOG --A logaccept-final-22 -j ACCEPT --A logaccept-final-23 -m limit --limit 1/second -j LOG --A logaccept-final-23 -j ACCEPT --A logaccept-final-24 -m limit --limit 1/second -j LOG --A logaccept-final-24 -j ACCEPT --A logaccept-final-25 -m limit --limit 1/second -j LOG --A logaccept-final-25 -j ACCEPT --A logaccept-final-26 -m limit --limit 1/second -j LOG --A logaccept-final-26 -j ACCEPT --A logaccept-final-27 -m limit --limit 1/second -j LOG --A logaccept-final-27 -j ACCEPT --A logaccept-final-28 -m limit --limit 1/second -j LOG --A logaccept-final-28 -j ACCEPT --A logaccept-final-29 -m limit --limit 1/second -j LOG --A logaccept-final-29 -j ACCEPT --A logaccept-final-3 -m limit --limit 1/second -j LOG --A logaccept-final-3 -j ACCEPT --A logaccept-final-30 -m limit --limit 1/second -j LOG --A logaccept-final-30 -j ACCEPT --A logaccept-final-31 -m limit --limit 1/second -j LOG --A logaccept-final-31 -j ACCEPT --A logaccept-final-32 -m limit --limit 1/second -j LOG --A logaccept-final-32 -j ACCEPT --A logaccept-final-33 -m limit --limit 1/second -j LOG --A logaccept-final-33 -j ACCEPT --A logaccept-final-34 -m limit --limit 1/second -j LOG --A logaccept-final-34 -j ACCEPT --A logaccept-final-35 -m limit --limit 1/second -j LOG --A logaccept-final-35 -j ACCEPT --A logaccept-final-36 -m limit --limit 1/second -j LOG --A logaccept-final-36 -j ACCEPT --A logaccept-final-37 -m limit --limit 1/second -j LOG --A logaccept-final-37 -j ACCEPT --A logaccept-final-38 -m limit --limit 1/second -j LOG --A logaccept-final-38 -j ACCEPT --A logaccept-final-39 -m limit --limit 1/second -j LOG --A logaccept-final-39 -j ACCEPT --A logaccept-final-4 -m limit --limit 1/second -j LOG --A logaccept-final-4 -j ACCEPT --A logaccept-final-40 -m limit --limit 1/second -j LOG --A logaccept-final-40 -j ACCEPT --A logaccept-final-41 -m limit --limit 1/second -j LOG --A logaccept-final-41 -j ACCEPT --A logaccept-final-42 -m limit --limit 1/second -j LOG --A logaccept-final-42 -j ACCEPT --A logaccept-final-43 -m limit --limit 1/second -j LOG --A logaccept-final-43 -j ACCEPT --A logaccept-final-44 -m limit --limit 1/second -j LOG --A logaccept-final-44 -j ACCEPT --A logaccept-final-45 -m limit --limit 1/second -j LOG --A logaccept-final-45 -j ACCEPT --A logaccept-final-46 -m limit --limit 1/second -j LOG --A logaccept-final-46 -j ACCEPT --A logaccept-final-47 -m limit --limit 1/second -j LOG --A logaccept-final-47 -j ACCEPT --A logaccept-final-48 -m limit --limit 1/second -j LOG --A logaccept-final-48 -j ACCEPT --A logaccept-final-49 -m limit --limit 1/second -j LOG --A logaccept-final-49 -j ACCEPT --A logaccept-final-5 -m limit --limit 1/second -j LOG --A logaccept-final-5 -j ACCEPT --A logaccept-final-50 -m limit --limit 1/second -j LOG --A logaccept-final-50 -j ACCEPT --A logaccept-final-51 -m limit --limit 1/second -j LOG --A logaccept-final-51 -j ACCEPT --A logaccept-final-52 -m limit --limit 1/second -j LOG --A logaccept-final-52 -j ACCEPT --A logaccept-final-53 -m limit --limit 1/second -j LOG --A logaccept-final-53 -j ACCEPT --A logaccept-final-54 -m limit --limit 1/second -j LOG --A logaccept-final-54 -j ACCEPT --A logaccept-final-55 -m limit --limit 1/second -j LOG --A logaccept-final-55 -j ACCEPT --A logaccept-final-56 -m limit --limit 1/second -j LOG --A logaccept-final-56 -j ACCEPT --A logaccept-final-57 -m limit --limit 1/second -j LOG --A logaccept-final-57 -j ACCEPT --A logaccept-final-58 -m limit --limit 1/second -j LOG --A logaccept-final-58 -j ACCEPT --A logaccept-final-59 -m limit --limit 1/second -j LOG --A logaccept-final-59 -j ACCEPT --A logaccept-final-6 -m limit --limit 1/second -j LOG --A logaccept-final-6 -j ACCEPT --A logaccept-final-60 -m limit --limit 1/second -j LOG --A logaccept-final-60 -j ACCEPT --A logaccept-final-61 -m limit --limit 1/second -j LOG --A logaccept-final-61 -j ACCEPT --A logaccept-final-7 -m limit --limit 1/second -j LOG --A logaccept-final-7 -j ACCEPT --A logaccept-final-8 -m limit --limit 1/second -j LOG --A logaccept-final-8 -j ACCEPT --A logaccept-final-9 -m limit --limit 1/second -j LOG --A logaccept-final-9 -j ACCEPT --A logdrop-0 -m limit --limit 1/second -j LOG --A logdrop-0 -j DROP --A logdrop-1 -m limit --limit 1/second -j LOG --A logdrop-1 -j DROP --A logdrop-10 -m limit --limit 1/second -j LOG --A logdrop-10 -j DROP --A logdrop-100 -m limit --limit 1/second -j LOG --A logdrop-100 -j DROP --A logdrop-101 -m limit --limit 1/second -j LOG --A logdrop-101 -j DROP --A logdrop-102 -m limit --limit 1/second -j LOG --A logdrop-102 -j DROP --A logdrop-103 -m limit --limit 1/second -j LOG --A logdrop-103 -j DROP --A logdrop-104 -m limit --limit 1/second -j LOG --A logdrop-104 -j DROP --A logdrop-105 -m limit --limit 1/second -j LOG --A logdrop-105 -j DROP --A logdrop-106 -m limit --limit 1/second -j LOG --A logdrop-106 -j DROP --A logdrop-107 -m limit --limit 1/second -j LOG --A logdrop-107 -j DROP --A logdrop-108 -m limit --limit 1/second -j LOG --A logdrop-108 -j DROP --A logdrop-109 -m limit --limit 1/second -j LOG --A logdrop-109 -j DROP --A logdrop-11 -m limit --limit 1/second -j LOG --A logdrop-11 -j DROP --A logdrop-110 -m limit --limit 1/second -j LOG --A logdrop-110 -j DROP --A logdrop-111 -m limit --limit 1/second -j LOG --A logdrop-111 -j DROP --A logdrop-112 -m limit --limit 1/second -j LOG --A logdrop-112 -j DROP --A logdrop-113 -m limit --limit 1/second -j LOG --A logdrop-113 -j DROP --A logdrop-114 -m limit --limit 1/second -j LOG --A logdrop-114 -j DROP --A logdrop-115 -m limit --limit 1/second -j LOG --A logdrop-115 -j DROP --A logdrop-116 -m limit --limit 1/second -j LOG --A logdrop-116 -j DROP --A logdrop-117 -m limit --limit 1/second -j LOG --A logdrop-117 -j DROP --A logdrop-118 -m limit --limit 1/second -j LOG --A logdrop-118 -j DROP --A logdrop-119 -m limit --limit 1/second -j LOG --A logdrop-119 -j DROP --A logdrop-12 -m limit --limit 1/second -j LOG --A logdrop-12 -j DROP --A logdrop-120 -m limit --limit 1/second -j LOG --A logdrop-120 -j DROP --A logdrop-121 -m limit --limit 1/second -j LOG --A logdrop-121 -j DROP --A logdrop-122 -m limit --limit 1/second -j LOG --A logdrop-122 -j DROP --A logdrop-123 -m limit --limit 1/second -j LOG --A logdrop-123 -j DROP --A logdrop-124 -m limit --limit 1/second -j LOG --A logdrop-124 -j DROP --A logdrop-125 -m limit --limit 1/second -j LOG --A logdrop-125 -j DROP --A logdrop-126 -m limit --limit 1/second -j LOG --A logdrop-126 -j DROP --A logdrop-127 -m limit --limit 1/second -j LOG --A logdrop-127 -j DROP --A logdrop-128 -m limit --limit 1/second -j LOG --A logdrop-128 -j DROP --A logdrop-129 -m limit --limit 1/second -j LOG --A logdrop-129 -j DROP --A logdrop-13 -m limit --limit 1/second -j LOG --A logdrop-13 -j DROP --A logdrop-130 -m limit --limit 1/second -j LOG --A logdrop-130 -j DROP --A logdrop-131 -m limit --limit 1/second -j LOG --A logdrop-131 -j DROP --A logdrop-132 -m limit --limit 1/second -j LOG --A logdrop-132 -j DROP --A logdrop-133 -m limit --limit 1/second -j LOG --A logdrop-133 -j DROP --A logdrop-134 -m limit --limit 1/second -j LOG --A logdrop-134 -j DROP --A logdrop-135 -m limit --limit 1/second -j LOG --A logdrop-135 -j DROP --A logdrop-136 -m limit --limit 1/second -j LOG --A logdrop-136 -j DROP --A logdrop-137 -m limit --limit 1/second -j LOG --A logdrop-137 -j DROP --A logdrop-138 -m limit --limit 1/second -j LOG --A logdrop-138 -j DROP --A logdrop-139 -m limit --limit 1/second -j LOG --A logdrop-139 -j DROP --A logdrop-14 -m limit --limit 1/second -j LOG --A logdrop-14 -j DROP --A logdrop-140 -m limit --limit 1/second -j LOG --A logdrop-140 -j DROP --A logdrop-141 -m limit --limit 1/second -j LOG --A logdrop-141 -j DROP --A logdrop-142 -m limit --limit 1/second -j LOG --A logdrop-142 -j DROP --A logdrop-143 -m limit --limit 1/second -j LOG --A logdrop-143 -j DROP --A logdrop-144 -m limit --limit 1/second -j LOG --A logdrop-144 -j DROP --A logdrop-145 -m limit --limit 1/second -j LOG --A logdrop-145 -j DROP --A logdrop-146 -m limit --limit 1/second -j LOG --A logdrop-146 -j DROP --A logdrop-147 -m limit --limit 1/second -j LOG --A logdrop-147 -j DROP --A logdrop-148 -m limit --limit 1/second -j LOG --A logdrop-148 -j DROP --A logdrop-149 -m limit --limit 1/second -j LOG --A logdrop-149 -j DROP --A logdrop-15 -m limit --limit 1/second -j LOG --A logdrop-15 -j DROP --A logdrop-150 -m limit --limit 1/second -j LOG --A logdrop-150 -j DROP --A logdrop-151 -m limit --limit 1/second -j LOG --A logdrop-151 -j DROP --A logdrop-152 -m limit --limit 1/second -j LOG --A logdrop-152 -j DROP --A logdrop-153 -m limit --limit 1/second -j LOG --A logdrop-153 -j DROP --A logdrop-154 -m limit --limit 1/second -j LOG --A logdrop-154 -j DROP --A logdrop-155 -m limit --limit 1/second -j LOG --A logdrop-155 -j DROP --A logdrop-156 -m limit --limit 1/second -j LOG --A logdrop-156 -j DROP --A logdrop-157 -m limit --limit 1/second -j LOG --A logdrop-157 -j DROP --A logdrop-158 -m limit --limit 1/second -j LOG --A logdrop-158 -j DROP --A logdrop-159 -m limit --limit 1/second -j LOG --A logdrop-159 -j DROP --A logdrop-16 -m limit --limit 1/second -j LOG --A logdrop-16 -j DROP --A logdrop-160 -m limit --limit 1/second -j LOG --A logdrop-160 -j DROP --A logdrop-161 -m limit --limit 1/second -j LOG --A logdrop-161 -j DROP --A logdrop-162 -m limit --limit 1/second -j LOG --A logdrop-162 -j DROP --A logdrop-163 -m limit --limit 1/second -j LOG --A logdrop-163 -j DROP --A logdrop-164 -m limit --limit 1/second -j LOG --A logdrop-164 -j DROP --A logdrop-165 -m limit --limit 1/second -j LOG --A logdrop-165 -j DROP --A logdrop-166 -m limit --limit 1/second -j LOG --A logdrop-166 -j DROP --A logdrop-167 -m limit --limit 1/second -j LOG --A logdrop-167 -j DROP --A logdrop-168 -m limit --limit 1/second -j LOG --A logdrop-168 -j DROP --A logdrop-169 -m limit --limit 1/second -j LOG --A logdrop-169 -j DROP --A logdrop-17 -m limit --limit 1/second -j LOG --A logdrop-17 -j DROP --A logdrop-170 -m limit --limit 1/second -j LOG --A logdrop-170 -j DROP --A logdrop-171 -m limit --limit 1/second -j LOG --A logdrop-171 -j DROP --A logdrop-172 -m limit --limit 1/second -j LOG --A logdrop-172 -j DROP --A logdrop-173 -m limit --limit 1/second -j LOG --A logdrop-173 -j DROP --A logdrop-174 -m limit --limit 1/second -j LOG --A logdrop-174 -j DROP --A logdrop-175 -m limit --limit 1/second -j LOG --A logdrop-175 -j DROP --A logdrop-176 -m limit --limit 1/second -j LOG --A logdrop-176 -j DROP --A logdrop-177 -m limit --limit 1/second -j LOG --A logdrop-177 -j DROP --A logdrop-178 -m limit --limit 1/second -j LOG --A logdrop-178 -j DROP --A logdrop-179 -m limit --limit 1/second -j LOG --A logdrop-179 -j DROP --A logdrop-18 -m limit --limit 1/second -j LOG --A logdrop-18 -j DROP --A logdrop-180 -m limit --limit 1/second -j LOG --A logdrop-180 -j DROP --A logdrop-181 -m limit --limit 1/second -j LOG --A logdrop-181 -j DROP --A logdrop-182 -m limit --limit 1/second -j LOG --A logdrop-182 -j DROP --A logdrop-183 -m limit --limit 1/second -j LOG --A logdrop-183 -j DROP --A logdrop-184 -m limit --limit 1/second -j LOG --A logdrop-184 -j DROP --A logdrop-185 -m limit --limit 1/second -j LOG --A logdrop-185 -j DROP --A logdrop-186 -m limit --limit 1/second -j LOG --A logdrop-186 -j DROP --A logdrop-187 -m limit --limit 1/second -j LOG --A logdrop-187 -j DROP --A logdrop-188 -m limit --limit 1/second -j LOG --A logdrop-188 -j DROP --A logdrop-189 -m limit --limit 1/second -j LOG --A logdrop-189 -j DROP --A logdrop-19 -m limit --limit 1/second -j LOG --A logdrop-19 -j DROP --A logdrop-190 -m limit --limit 1/second -j LOG --A logdrop-190 -j DROP --A logdrop-191 -m limit --limit 1/second -j LOG --A logdrop-191 -j DROP --A logdrop-192 -m limit --limit 1/second -j LOG --A logdrop-192 -j DROP --A logdrop-193 -m limit --limit 1/second -j LOG --A logdrop-193 -j DROP --A logdrop-194 -m limit --limit 1/second -j LOG --A logdrop-194 -j DROP --A logdrop-195 -m limit --limit 1/second -j LOG --A logdrop-195 -j DROP --A logdrop-196 -m limit --limit 1/second -j LOG --A logdrop-196 -j DROP --A logdrop-197 -m limit --limit 1/second -j LOG --A logdrop-197 -j DROP --A logdrop-198 -m limit --limit 1/second -j LOG --A logdrop-198 -j DROP --A logdrop-199 -m limit --limit 1/second -j LOG --A logdrop-199 -j DROP --A logdrop-2 -m limit --limit 1/second -j LOG --A logdrop-2 -j DROP --A logdrop-20 -m limit --limit 1/second -j LOG --A logdrop-20 -j DROP --A logdrop-200 -m limit --limit 1/second -j LOG --A logdrop-200 -j DROP --A logdrop-201 -m limit --limit 1/second -j LOG --A logdrop-201 -j DROP --A logdrop-202 -m limit --limit 1/second -j LOG --A logdrop-202 -j DROP --A logdrop-203 -m limit --limit 1/second -j LOG --A logdrop-203 -j DROP --A logdrop-204 -m limit --limit 1/second -j LOG --A logdrop-204 -j DROP --A logdrop-205 -m limit --limit 1/second -j LOG --A logdrop-205 -j DROP --A logdrop-206 -m limit --limit 1/second -j LOG --A logdrop-206 -j DROP --A logdrop-207 -m limit --limit 1/second -j LOG --A logdrop-207 -j DROP --A logdrop-208 -m limit --limit 1/second -j LOG --A logdrop-208 -j DROP --A logdrop-209 -m limit --limit 1/second -j LOG --A logdrop-209 -j DROP --A logdrop-21 -m limit --limit 1/second -j LOG --A logdrop-21 -j DROP --A logdrop-210 -m limit --limit 1/second -j LOG --A logdrop-210 -j DROP --A logdrop-211 -m limit --limit 1/second -j LOG --A logdrop-211 -j DROP --A logdrop-212 -m limit --limit 1/second -j LOG --A logdrop-212 -j DROP --A logdrop-213 -m limit --limit 1/second -j LOG --A logdrop-213 -j DROP --A logdrop-214 -m limit --limit 1/second -j LOG --A logdrop-214 -j DROP --A logdrop-215 -m limit --limit 1/second -j LOG --A logdrop-215 -j DROP --A logdrop-216 -m limit --limit 1/second -j LOG --A logdrop-216 -j DROP --A logdrop-217 -m limit --limit 1/second -j LOG --A logdrop-217 -j DROP --A logdrop-218 -m limit --limit 1/second -j LOG --A logdrop-218 -j DROP --A logdrop-219 -m limit --limit 1/second -j LOG --A logdrop-219 -j DROP --A logdrop-22 -m limit --limit 1/second -j LOG --A logdrop-22 -j DROP --A logdrop-220 -m limit --limit 1/second -j LOG --A logdrop-220 -j DROP --A logdrop-221 -m limit --limit 1/second -j LOG --A logdrop-221 -j DROP --A logdrop-222 -m limit --limit 1/second -j LOG --A logdrop-222 -j DROP --A logdrop-223 -m limit --limit 1/second -j LOG --A logdrop-223 -j DROP --A logdrop-224 -m limit --limit 1/second -j LOG --A logdrop-224 -j DROP --A logdrop-225 -m limit --limit 1/second -j LOG --A logdrop-225 -j DROP --A logdrop-226 -m limit --limit 1/second -j LOG --A logdrop-226 -j DROP --A logdrop-227 -m limit --limit 1/second -j LOG --A logdrop-227 -j DROP --A logdrop-228 -m limit --limit 1/second -j LOG --A logdrop-228 -j DROP --A logdrop-229 -m limit --limit 1/second -j LOG --A logdrop-229 -j DROP --A logdrop-23 -m limit --limit 1/second -j LOG --A logdrop-23 -j DROP --A logdrop-230 -m limit --limit 1/second -j LOG --A logdrop-230 -j DROP --A logdrop-231 -m limit --limit 1/second -j LOG --A logdrop-231 -j DROP --A logdrop-232 -m limit --limit 1/second -j LOG --A logdrop-232 -j DROP --A logdrop-233 -m limit --limit 1/second -j LOG --A logdrop-233 -j DROP --A logdrop-234 -m limit --limit 1/second -j LOG --A logdrop-234 -j DROP --A logdrop-235 -m limit --limit 1/second -j LOG --A logdrop-235 -j DROP --A logdrop-236 -m limit --limit 1/second -j LOG --A logdrop-236 -j DROP --A logdrop-237 -m limit --limit 1/second -j LOG --A logdrop-237 -j DROP --A logdrop-238 -m limit --limit 1/second -j LOG --A logdrop-238 -j DROP --A logdrop-239 -m limit --limit 1/second -j LOG --A logdrop-239 -j DROP --A logdrop-24 -m limit --limit 1/second -j LOG --A logdrop-24 -j DROP --A logdrop-240 -m limit --limit 1/second -j LOG --A logdrop-240 -j DROP --A logdrop-241 -m limit --limit 1/second -j LOG --A logdrop-241 -j DROP --A logdrop-242 -m limit --limit 1/second -j LOG --A logdrop-242 -j DROP --A logdrop-243 -m limit --limit 1/second -j LOG --A logdrop-243 -j DROP --A logdrop-244 -m limit --limit 1/second -j LOG --A logdrop-244 -j DROP --A logdrop-245 -m limit --limit 1/second -j LOG --A logdrop-245 -j DROP --A logdrop-246 -m limit --limit 1/second -j LOG --A logdrop-246 -j DROP --A logdrop-247 -m limit --limit 1/second -j LOG --A logdrop-247 -j DROP --A logdrop-248 -m limit --limit 1/second -j LOG --A logdrop-248 -j DROP --A logdrop-249 -m limit --limit 1/second -j LOG --A logdrop-249 -j DROP --A logdrop-25 -m limit --limit 1/second -j LOG --A logdrop-25 -j DROP --A logdrop-250 -m limit --limit 1/second -j LOG --A logdrop-250 -j DROP --A logdrop-251 -m limit --limit 1/second -j LOG --A logdrop-251 -j DROP --A logdrop-252 -m limit --limit 1/second -j LOG --A logdrop-252 -j DROP --A logdrop-253 -m limit --limit 1/second -j LOG --A logdrop-253 -j DROP --A logdrop-254 -m limit --limit 1/second -j LOG --A logdrop-254 -j DROP --A logdrop-255 -m limit --limit 1/second -j LOG --A logdrop-255 -j DROP --A logdrop-256 -m limit --limit 1/second -j LOG --A logdrop-256 -j DROP --A logdrop-257 -m limit --limit 1/second -j LOG --A logdrop-257 -j DROP --A logdrop-258 -m limit --limit 1/second -j LOG --A logdrop-258 -j DROP --A logdrop-259 -m limit --limit 1/second -j LOG --A logdrop-259 -j DROP --A logdrop-26 -m limit --limit 1/second -j LOG --A logdrop-26 -j DROP --A logdrop-260 -m limit --limit 1/second -j LOG --A logdrop-260 -j DROP --A logdrop-261 -m limit --limit 1/second -j LOG --A logdrop-261 -j DROP --A logdrop-262 -m limit --limit 1/second -j LOG --A logdrop-262 -j DROP --A logdrop-263 -m limit --limit 1/second -j LOG --A logdrop-263 -j DROP --A logdrop-264 -m limit --limit 1/second -j LOG --A logdrop-264 -j DROP --A logdrop-265 -m limit --limit 1/second -j LOG --A logdrop-265 -j DROP --A logdrop-266 -m limit --limit 1/second -j LOG --A logdrop-266 -j DROP --A logdrop-267 -m limit --limit 1/second -j LOG --A logdrop-267 -j DROP --A logdrop-268 -m limit --limit 1/second -j LOG --A logdrop-268 -j DROP --A logdrop-269 -m limit --limit 1/second -j LOG --A logdrop-269 -j DROP --A logdrop-27 -m limit --limit 1/second -j LOG --A logdrop-27 -j DROP --A logdrop-270 -m limit --limit 1/second -j LOG --A logdrop-270 -j DROP --A logdrop-271 -m limit --limit 1/second -j LOG --A logdrop-271 -j DROP --A logdrop-272 -m limit --limit 1/second -j LOG --A logdrop-272 -j DROP --A logdrop-273 -m limit --limit 1/second -j LOG --A logdrop-273 -j DROP --A logdrop-274 -m limit --limit 1/second -j LOG --A logdrop-274 -j DROP --A logdrop-275 -m limit --limit 1/second -j LOG --A logdrop-275 -j DROP --A logdrop-276 -m limit --limit 1/second -j LOG --A logdrop-276 -j DROP --A logdrop-277 -m limit --limit 1/second -j LOG --A logdrop-277 -j DROP --A logdrop-278 -m limit --limit 1/second -j LOG --A logdrop-278 -j DROP --A logdrop-279 -m limit --limit 1/second -j LOG --A logdrop-279 -j DROP --A logdrop-28 -m limit --limit 1/second -j LOG --A logdrop-28 -j DROP --A logdrop-280 -m limit --limit 1/second -j LOG --A logdrop-280 -j DROP --A logdrop-281 -m limit --limit 1/second -j LOG --A logdrop-281 -j DROP --A logdrop-282 -m limit --limit 1/second -j LOG --A logdrop-282 -j DROP --A logdrop-283 -m limit --limit 1/second -j LOG --A logdrop-283 -j DROP --A logdrop-284 -m limit --limit 1/second -j LOG --A logdrop-284 -j DROP --A logdrop-285 -m limit --limit 1/second -j LOG --A logdrop-285 -j DROP --A logdrop-286 -m limit --limit 1/second -j LOG --A logdrop-286 -j DROP --A logdrop-287 -m limit --limit 1/second -j LOG --A logdrop-287 -j DROP --A logdrop-288 -m limit --limit 1/second -j LOG --A logdrop-288 -j DROP --A logdrop-289 -m limit --limit 1/second -j LOG --A logdrop-289 -j DROP --A logdrop-29 -m limit --limit 1/second -j LOG --A logdrop-29 -j DROP --A logdrop-290 -m limit --limit 1/second -j LOG --A logdrop-290 -j DROP --A logdrop-291 -m limit --limit 1/second -j LOG --A logdrop-291 -j DROP --A logdrop-292 -m limit --limit 1/second -j LOG --A logdrop-292 -j DROP --A logdrop-293 -m limit --limit 1/second -j LOG --A logdrop-293 -j DROP --A logdrop-294 -m limit --limit 1/second -j LOG --A logdrop-294 -j DROP --A logdrop-295 -m limit --limit 1/second -j LOG --A logdrop-295 -j DROP --A logdrop-296 -m limit --limit 1/second -j LOG --A logdrop-296 -j DROP --A logdrop-297 -m limit --limit 1/second -j LOG --A logdrop-297 -j DROP --A logdrop-298 -m limit --limit 1/second -j LOG --A logdrop-298 -j DROP --A logdrop-299 -m limit --limit 1/second -j LOG --A logdrop-299 -j DROP --A logdrop-3 -m limit --limit 1/second -j LOG --A logdrop-3 -j DROP --A logdrop-30 -m limit --limit 1/second -j LOG --A logdrop-30 -j DROP --A logdrop-300 -m limit --limit 1/second -j LOG --A logdrop-300 -j DROP --A logdrop-301 -m limit --limit 1/second -j LOG --A logdrop-301 -j DROP --A logdrop-302 -m limit --limit 1/second -j LOG --A logdrop-302 -j DROP --A logdrop-303 -m limit --limit 1/second -j LOG --A logdrop-303 -j DROP --A logdrop-304 -m limit --limit 1/second -j LOG --A logdrop-304 -j DROP --A logdrop-305 -m limit --limit 1/second -j LOG --A logdrop-305 -j DROP --A logdrop-306 -m limit --limit 1/second -j LOG --A logdrop-306 -j DROP --A logdrop-307 -m limit --limit 1/second -j LOG --A logdrop-307 -j DROP --A logdrop-308 -m limit --limit 1/second -j LOG --A logdrop-308 -j DROP --A logdrop-309 -m limit --limit 1/second -j LOG --A logdrop-309 -j DROP --A logdrop-31 -m limit --limit 1/second -j LOG --A logdrop-31 -j DROP --A logdrop-310 -m limit --limit 1/second -j LOG --A logdrop-310 -j DROP --A logdrop-311 -m limit --limit 1/second -j LOG --A logdrop-311 -j DROP --A logdrop-312 -m limit --limit 1/second -j LOG --A logdrop-312 -j DROP --A logdrop-313 -m limit --limit 1/second -j LOG --A logdrop-313 -j DROP --A logdrop-314 -m limit --limit 1/second -j LOG --A logdrop-314 -j DROP --A logdrop-315 -m limit --limit 1/second -j LOG --A logdrop-315 -j DROP --A logdrop-316 -m limit --limit 1/second -j LOG --A logdrop-316 -j DROP --A logdrop-317 -m limit --limit 1/second -j LOG --A logdrop-317 -j DROP --A logdrop-318 -m limit --limit 1/second -j LOG --A logdrop-318 -j DROP --A logdrop-319 -m limit --limit 1/second -j LOG --A logdrop-319 -j DROP --A logdrop-32 -m limit --limit 1/second -j LOG --A logdrop-32 -j DROP --A logdrop-320 -m limit --limit 1/second -j LOG --A logdrop-320 -j DROP --A logdrop-321 -m limit --limit 1/second -j LOG --A logdrop-321 -j DROP --A logdrop-322 -m limit --limit 1/second -j LOG --A logdrop-322 -j DROP --A logdrop-323 -m limit --limit 1/second -j LOG --A logdrop-323 -j DROP --A logdrop-324 -m limit --limit 1/second -j LOG --A logdrop-324 -j DROP --A logdrop-325 -m limit --limit 1/second -j LOG --A logdrop-325 -j DROP --A logdrop-326 -m limit --limit 1/second -j LOG --A logdrop-326 -j DROP --A logdrop-327 -m limit --limit 1/second -j LOG --A logdrop-327 -j DROP --A logdrop-328 -m limit --limit 1/second -j LOG --A logdrop-328 -j DROP --A logdrop-329 -m limit --limit 1/second -j LOG --A logdrop-329 -j DROP --A logdrop-33 -m limit --limit 1/second -j LOG --A logdrop-33 -j DROP --A logdrop-330 -m limit --limit 1/second -j LOG --A logdrop-330 -j DROP --A logdrop-331 -m limit --limit 1/second -j LOG --A logdrop-331 -j DROP --A logdrop-332 -m limit --limit 1/second -j LOG --A logdrop-332 -j DROP --A logdrop-333 -m limit --limit 1/second -j LOG --A logdrop-333 -j DROP --A logdrop-334 -m limit --limit 1/second -j LOG --A logdrop-334 -j DROP --A logdrop-335 -m limit --limit 1/second -j LOG --A logdrop-335 -j DROP --A logdrop-336 -m limit --limit 1/second -j LOG --A logdrop-336 -j DROP --A logdrop-337 -m limit --limit 1/second -j LOG --A logdrop-337 -j DROP --A logdrop-338 -m limit --limit 1/second -j LOG --A logdrop-338 -j DROP --A logdrop-339 -m limit --limit 1/second -j LOG --A logdrop-339 -j DROP --A logdrop-34 -m limit --limit 1/second -j LOG --A logdrop-34 -j DROP --A logdrop-340 -m limit --limit 1/second -j LOG --A logdrop-340 -j DROP --A logdrop-341 -m limit --limit 1/second -j LOG --A logdrop-341 -j DROP --A logdrop-342 -m limit --limit 1/second -j LOG --A logdrop-342 -j DROP --A logdrop-343 -m limit --limit 1/second -j LOG --A logdrop-343 -j DROP --A logdrop-344 -m limit --limit 1/second -j LOG --A logdrop-344 -j DROP --A logdrop-345 -m limit --limit 1/second -j LOG --A logdrop-345 -j DROP --A logdrop-346 -m limit --limit 1/second -j LOG --A logdrop-346 -j DROP --A logdrop-347 -m limit --limit 1/second -j LOG --A logdrop-347 -j DROP --A logdrop-348 -m limit --limit 1/second -j LOG --A logdrop-348 -j DROP --A logdrop-349 -m limit --limit 1/second -j LOG --A logdrop-349 -j DROP --A logdrop-35 -m limit --limit 1/second -j LOG --A logdrop-35 -j DROP --A logdrop-350 -m limit --limit 1/second -j LOG --A logdrop-350 -j DROP --A logdrop-351 -m limit --limit 1/second -j LOG --A logdrop-351 -j DROP --A logdrop-352 -m limit --limit 1/second -j LOG --A logdrop-352 -j DROP --A logdrop-353 -m limit --limit 1/second -j LOG --A logdrop-353 -j DROP --A logdrop-354 -m limit --limit 1/second -j LOG --A logdrop-354 -j DROP --A logdrop-355 -m limit --limit 1/second -j LOG --A logdrop-355 -j DROP --A logdrop-356 -m limit --limit 1/second -j LOG --A logdrop-356 -j DROP --A logdrop-357 -m limit --limit 1/second -j LOG --A logdrop-357 -j DROP --A logdrop-358 -m limit --limit 1/second -j LOG --A logdrop-358 -j DROP --A logdrop-359 -m limit --limit 1/second -j LOG --A logdrop-359 -j DROP --A logdrop-36 -m limit --limit 1/second -j LOG --A logdrop-36 -j DROP --A logdrop-360 -m limit --limit 1/second -j LOG --A logdrop-360 -j DROP --A logdrop-361 -m limit --limit 1/second -j LOG --A logdrop-361 -j DROP --A logdrop-362 -m limit --limit 1/second -j LOG --A logdrop-362 -j DROP --A logdrop-363 -m limit --limit 1/second -j LOG --A logdrop-363 -j DROP --A logdrop-364 -m limit --limit 1/second -j LOG --A logdrop-364 -j DROP --A logdrop-365 -m limit --limit 1/second -j LOG --A logdrop-365 -j DROP --A logdrop-366 -m limit --limit 1/second -j LOG --A logdrop-366 -j DROP --A logdrop-367 -m limit --limit 1/second -j LOG --A logdrop-367 -j DROP --A logdrop-368 -m limit --limit 1/second -j LOG --A logdrop-368 -j DROP --A logdrop-369 -m limit --limit 1/second -j LOG --A logdrop-369 -j DROP --A logdrop-37 -m limit --limit 1/second -j LOG --A logdrop-37 -j DROP --A logdrop-370 -m limit --limit 1/second -j LOG --A logdrop-370 -j DROP --A logdrop-371 -m limit --limit 1/second -j LOG --A logdrop-371 -j DROP --A logdrop-372 -m limit --limit 1/second -j LOG --A logdrop-372 -j DROP --A logdrop-373 -m limit --limit 1/second -j LOG --A logdrop-373 -j DROP --A logdrop-374 -m limit --limit 1/second -j LOG --A logdrop-374 -j DROP --A logdrop-375 -m limit --limit 1/second -j LOG --A logdrop-375 -j DROP --A logdrop-376 -m limit --limit 1/second -j LOG --A logdrop-376 -j DROP --A logdrop-377 -m limit --limit 1/second -j LOG --A logdrop-377 -j DROP --A logdrop-378 -m limit --limit 1/second -j LOG --A logdrop-378 -j DROP --A logdrop-379 -m limit --limit 1/second -j LOG --A logdrop-379 -j DROP --A logdrop-38 -m limit --limit 1/second -j LOG --A logdrop-38 -j DROP --A logdrop-380 -m limit --limit 1/second -j LOG --A logdrop-380 -j DROP --A logdrop-381 -m limit --limit 1/second -j LOG --A logdrop-381 -j DROP --A logdrop-382 -m limit --limit 1/second -j LOG --A logdrop-382 -j DROP --A logdrop-383 -m limit --limit 1/second -j LOG --A logdrop-383 -j DROP --A logdrop-384 -m limit --limit 1/second -j LOG --A logdrop-384 -j DROP --A logdrop-385 -m limit --limit 1/second -j LOG --A logdrop-385 -j DROP --A logdrop-386 -m limit --limit 1/second -j LOG --A logdrop-386 -j DROP --A logdrop-387 -m limit --limit 1/second -j LOG --A logdrop-387 -j DROP --A logdrop-388 -m limit --limit 1/second -j LOG --A logdrop-388 -j DROP --A logdrop-389 -m limit --limit 1/second -j LOG --A logdrop-389 -j DROP --A logdrop-39 -m limit --limit 1/second -j LOG --A logdrop-39 -j DROP --A logdrop-390 -m limit --limit 1/second -j LOG --A logdrop-390 -j DROP --A logdrop-391 -m limit --limit 1/second -j LOG --A logdrop-391 -j DROP --A logdrop-392 -m limit --limit 1/second -j LOG --A logdrop-392 -j DROP --A logdrop-393 -m limit --limit 1/second -j LOG --A logdrop-393 -j DROP --A logdrop-394 -m limit --limit 1/second -j LOG --A logdrop-394 -j DROP --A logdrop-395 -m limit --limit 1/second -j LOG --A logdrop-395 -j DROP --A logdrop-396 -m limit --limit 1/second -j LOG --A logdrop-396 -j DROP --A logdrop-397 -m limit --limit 1/second -j LOG --A logdrop-397 -j DROP --A logdrop-398 -m limit --limit 1/second -j LOG --A logdrop-398 -j DROP --A logdrop-399 -m limit --limit 1/second -j LOG --A logdrop-399 -j DROP --A logdrop-4 -m limit --limit 1/second -j LOG --A logdrop-4 -j DROP --A logdrop-40 -m limit --limit 1/second -j LOG --A logdrop-40 -j DROP --A logdrop-400 -m limit --limit 1/second -j LOG --A logdrop-400 -j DROP --A logdrop-401 -m limit --limit 1/second -j LOG --A logdrop-401 -j DROP --A logdrop-402 -m limit --limit 1/second -j LOG --A logdrop-402 -j DROP --A logdrop-403 -m limit --limit 1/second -j LOG --A logdrop-403 -j DROP --A logdrop-404 -m limit --limit 1/second -j LOG --A logdrop-404 -j DROP --A logdrop-405 -m limit --limit 1/second -j LOG --A logdrop-405 -j DROP --A logdrop-406 -m limit --limit 1/second -j LOG --A logdrop-406 -j DROP --A logdrop-407 -m limit --limit 1/second -j LOG --A logdrop-407 -j DROP --A logdrop-408 -m limit --limit 1/second -j LOG --A logdrop-408 -j DROP --A logdrop-409 -m limit --limit 1/second -j LOG --A logdrop-409 -j DROP --A logdrop-41 -m limit --limit 1/second -j LOG --A logdrop-41 -j DROP --A logdrop-410 -m limit --limit 1/second -j LOG --A logdrop-410 -j DROP --A logdrop-411 -m limit --limit 1/second -j LOG --A logdrop-411 -j DROP --A logdrop-412 -m limit --limit 1/second -j LOG --A logdrop-412 -j DROP --A logdrop-413 -m limit --limit 1/second -j LOG --A logdrop-413 -j DROP --A logdrop-414 -m limit --limit 1/second -j LOG --A logdrop-414 -j DROP --A logdrop-415 -m limit --limit 1/second -j LOG --A logdrop-415 -j DROP --A logdrop-416 -m limit --limit 1/second -j LOG --A logdrop-416 -j DROP --A logdrop-417 -m limit --limit 1/second -j LOG --A logdrop-417 -j DROP --A logdrop-418 -m limit --limit 1/second -j LOG --A logdrop-418 -j DROP --A logdrop-419 -m limit --limit 1/second -j LOG --A logdrop-419 -j DROP --A logdrop-42 -m limit --limit 1/second -j LOG --A logdrop-42 -j DROP --A logdrop-420 -m limit --limit 1/second -j LOG --A logdrop-420 -j DROP --A logdrop-421 -m limit --limit 1/second -j LOG --A logdrop-421 -j DROP --A logdrop-422 -m limit --limit 1/second -j LOG --A logdrop-422 -j DROP --A logdrop-423 -m limit --limit 1/second -j LOG --A logdrop-423 -j DROP --A logdrop-424 -m limit --limit 1/second -j LOG --A logdrop-424 -j DROP --A logdrop-425 -m limit --limit 1/second -j LOG --A logdrop-425 -j DROP --A logdrop-426 -m limit --limit 1/second -j LOG --A logdrop-426 -j DROP --A logdrop-427 -m limit --limit 1/second -j LOG --A logdrop-427 -j DROP --A logdrop-428 -m limit --limit 1/second -j LOG --A logdrop-428 -j DROP --A logdrop-429 -m limit --limit 1/second -j LOG --A logdrop-429 -j DROP --A logdrop-43 -m limit --limit 1/second -j LOG --A logdrop-43 -j DROP --A logdrop-430 -m limit --limit 1/second -j LOG --A logdrop-430 -j DROP --A logdrop-431 -m limit --limit 1/second -j LOG --A logdrop-431 -j DROP --A logdrop-432 -m limit --limit 1/second -j LOG --A logdrop-432 -j DROP --A logdrop-433 -m limit --limit 1/second -j LOG --A logdrop-433 -j DROP --A logdrop-434 -m limit --limit 1/second -j LOG --A logdrop-434 -j DROP --A logdrop-435 -m limit --limit 1/second -j LOG --A logdrop-435 -j DROP --A logdrop-436 -m limit --limit 1/second -j LOG --A logdrop-436 -j DROP --A logdrop-437 -m limit --limit 1/second -j LOG --A logdrop-437 -j DROP --A logdrop-438 -m limit --limit 1/second -j LOG --A logdrop-438 -j DROP --A logdrop-439 -m limit --limit 1/second -j LOG --A logdrop-439 -j DROP --A logdrop-44 -m limit --limit 1/second -j LOG --A logdrop-44 -j DROP --A logdrop-440 -m limit --limit 1/second -j LOG --A logdrop-440 -j DROP --A logdrop-441 -m limit --limit 1/second -j LOG --A logdrop-441 -j DROP --A logdrop-442 -m limit --limit 1/second -j LOG --A logdrop-442 -j DROP --A logdrop-443 -m limit --limit 1/second -j LOG --A logdrop-443 -j DROP --A logdrop-444 -m limit --limit 1/second -j LOG --A logdrop-444 -j DROP --A logdrop-445 -m limit --limit 1/second -j LOG --A logdrop-445 -j DROP --A logdrop-446 -m limit --limit 1/second -j LOG --A logdrop-446 -j DROP --A logdrop-447 -m limit --limit 1/second -j LOG --A logdrop-447 -j DROP --A logdrop-448 -m limit --limit 1/second -j LOG --A logdrop-448 -j DROP --A logdrop-449 -m limit --limit 1/second -j LOG --A logdrop-449 -j DROP --A logdrop-45 -m limit --limit 1/second -j LOG --A logdrop-45 -j DROP --A logdrop-450 -m limit --limit 1/second -j LOG --A logdrop-450 -j DROP --A logdrop-451 -m limit --limit 1/second -j LOG --A logdrop-451 -j DROP --A logdrop-452 -m limit --limit 1/second -j LOG --A logdrop-452 -j DROP --A logdrop-453 -m limit --limit 1/second -j LOG --A logdrop-453 -j DROP --A logdrop-454 -m limit --limit 1/second -j LOG --A logdrop-454 -j DROP --A logdrop-455 -m limit --limit 1/second -j LOG --A logdrop-455 -j DROP --A logdrop-456 -m limit --limit 1/second -j LOG --A logdrop-456 -j DROP --A logdrop-457 -m limit --limit 1/second -j LOG --A logdrop-457 -j DROP --A logdrop-458 -m limit --limit 1/second -j LOG --A logdrop-458 -j DROP --A logdrop-46 -m limit --limit 1/second -j LOG --A logdrop-46 -j DROP --A logdrop-47 -m limit --limit 1/second -j LOG --A logdrop-47 -j DROP --A logdrop-48 -m limit --limit 1/second -j LOG --A logdrop-48 -j DROP --A logdrop-49 -m limit --limit 1/second -j LOG --A logdrop-49 -j DROP --A logdrop-5 -m limit --limit 1/second -j LOG --A logdrop-5 -j DROP --A logdrop-50 -m limit --limit 1/second -j LOG --A logdrop-50 -j DROP --A logdrop-51 -m limit --limit 1/second -j LOG --A logdrop-51 -j DROP --A logdrop-52 -m limit --limit 1/second -j LOG --A logdrop-52 -j DROP --A logdrop-53 -m limit --limit 1/second -j LOG --A logdrop-53 -j DROP --A logdrop-54 -m limit --limit 1/second -j LOG --A logdrop-54 -j DROP --A logdrop-55 -m limit --limit 1/second -j LOG --A logdrop-55 -j DROP --A logdrop-56 -m limit --limit 1/second -j LOG --A logdrop-56 -j DROP --A logdrop-57 -m limit --limit 1/second -j LOG --A logdrop-57 -j DROP --A logdrop-58 -m limit --limit 1/second -j LOG --A logdrop-58 -j DROP --A logdrop-59 -m limit --limit 1/second -j LOG --A logdrop-59 -j DROP --A logdrop-6 -m limit --limit 1/second -j LOG --A logdrop-6 -j DROP --A logdrop-60 -m limit --limit 1/second -j LOG --A logdrop-60 -j DROP --A logdrop-61 -m limit --limit 1/second -j LOG --A logdrop-61 -j DROP --A logdrop-62 -m limit --limit 1/second -j LOG --A logdrop-62 -j DROP --A logdrop-63 -m limit --limit 1/second -j LOG --A logdrop-63 -j DROP --A logdrop-64 -m limit --limit 1/second -j LOG --A logdrop-64 -j DROP --A logdrop-65 -m limit --limit 1/second -j LOG --A logdrop-65 -j DROP --A logdrop-66 -m limit --limit 1/second -j LOG --A logdrop-66 -j DROP --A logdrop-67 -m limit --limit 1/second -j LOG --A logdrop-67 -j DROP --A logdrop-68 -m limit --limit 1/second -j LOG --A logdrop-68 -j DROP --A logdrop-69 -m limit --limit 1/second -j LOG --A logdrop-69 -j DROP --A logdrop-7 -m limit --limit 1/second -j LOG --A logdrop-7 -j DROP --A logdrop-70 -m limit --limit 1/second -j LOG --A logdrop-70 -j DROP --A logdrop-71 -m limit --limit 1/second -j LOG --A logdrop-71 -j DROP --A logdrop-72 -m limit --limit 1/second -j LOG --A logdrop-72 -j DROP --A logdrop-73 -m limit --limit 1/second -j LOG --A logdrop-73 -j DROP --A logdrop-74 -m limit --limit 1/second -j LOG --A logdrop-74 -j DROP --A logdrop-75 -m limit --limit 1/second -j LOG --A logdrop-75 -j DROP --A logdrop-76 -m limit --limit 1/second -j LOG --A logdrop-76 -j DROP --A logdrop-77 -m limit --limit 1/second -j LOG --A logdrop-77 -j DROP --A logdrop-78 -m limit --limit 1/second -j LOG --A logdrop-78 -j DROP --A logdrop-79 -m limit --limit 1/second -j LOG --A logdrop-79 -j DROP --A logdrop-8 -m limit --limit 1/second -j LOG --A logdrop-8 -j DROP --A logdrop-80 -m limit --limit 1/second -j LOG --A logdrop-80 -j DROP --A logdrop-81 -m limit --limit 1/second -j LOG --A logdrop-81 -j DROP --A logdrop-82 -m limit --limit 1/second -j LOG --A logdrop-82 -j DROP --A logdrop-83 -m limit --limit 1/second -j LOG --A logdrop-83 -j DROP --A logdrop-84 -m limit --limit 1/second -j LOG --A logdrop-84 -j DROP --A logdrop-85 -m limit --limit 1/second -j LOG --A logdrop-85 -j DROP --A logdrop-86 -m limit --limit 1/second -j LOG --A logdrop-86 -j DROP --A logdrop-87 -m limit --limit 1/second -j LOG --A logdrop-87 -j DROP --A logdrop-88 -m limit --limit 1/second -j LOG --A logdrop-88 -j DROP --A logdrop-89 -m limit --limit 1/second -j LOG --A logdrop-89 -j DROP --A logdrop-9 -m limit --limit 1/second -j LOG --A logdrop-9 -j DROP --A logdrop-90 -m limit --limit 1/second -j LOG --A logdrop-90 -j DROP --A logdrop-91 -m limit --limit 1/second -j LOG --A logdrop-91 -j DROP --A logdrop-92 -m limit --limit 1/second -j LOG --A logdrop-92 -j DROP --A logdrop-93 -m limit --limit 1/second -j LOG --A logdrop-93 -j DROP --A logdrop-94 -m limit --limit 1/second -j LOG --A logdrop-94 -j DROP --A logdrop-95 -m limit --limit 1/second -j LOG --A logdrop-95 -j DROP --A logdrop-96 -m limit --limit 1/second -j LOG --A logdrop-96 -j DROP --A logdrop-97 -m limit --limit 1/second -j LOG --A logdrop-97 -j DROP --A logdrop-98 -m limit --limit 1/second -j LOG --A logdrop-98 -j DROP --A logdrop-99 -m limit --limit 1/second -j LOG --A logdrop-99 -j DROP --A logpass-0 -m limit --limit 1/second -j LOG --A logpass-1 -m limit --limit 1/second -j LOG --A logpass-10 -m limit --limit 1/second -j LOG --A logpass-11 -m limit --limit 1/second -j LOG --A logpass-12 -m limit --limit 1/second -j LOG --A logpass-13 -m limit --limit 1/second -j LOG --A logpass-14 -m limit --limit 1/second -j LOG --A logpass-15 -m limit --limit 1/second -j LOG --A logpass-16 -m limit --limit 1/second -j LOG --A logpass-17 -m limit --limit 1/second -j LOG --A logpass-18 -m limit --limit 1/second -j LOG --A logpass-19 -m limit --limit 1/second -j LOG --A logpass-2 -m limit --limit 1/second -j LOG --A logpass-20 -m limit --limit 1/second -j LOG --A logpass-21 -m limit --limit 1/second -j LOG --A logpass-22 -m limit --limit 1/second -j LOG --A logpass-23 -m limit --limit 1/second -j LOG --A logpass-24 -m limit --limit 1/second -j LOG --A logpass-25 -m limit --limit 1/second -j LOG --A logpass-26 -m limit --limit 1/second -j LOG --A logpass-27 -m limit --limit 1/second -j LOG --A logpass-28 -m limit --limit 1/second -j LOG --A logpass-29 -m limit --limit 1/second -j LOG --A logpass-3 -m limit --limit 1/second -j LOG --A logpass-30 -m limit --limit 1/second -j LOG --A logpass-31 -m limit --limit 1/second -j LOG --A logpass-32 -m limit --limit 1/second -j LOG --A logpass-33 -m limit --limit 1/second -j LOG --A logpass-34 -m limit --limit 1/second -j LOG --A logpass-35 -m limit --limit 1/second -j LOG --A logpass-36 -m limit --limit 1/second -j LOG --A logpass-37 -m limit --limit 1/second -j LOG --A logpass-38 -m limit --limit 1/second -j LOG --A logpass-39 -m limit --limit 1/second -j LOG --A logpass-4 -m limit --limit 1/second -j LOG --A logpass-40 -m limit --limit 1/second -j LOG --A logpass-41 -m limit --limit 1/second -j LOG --A logpass-42 -m limit --limit 1/second -j LOG --A logpass-43 -m limit --limit 1/second -j LOG --A logpass-44 -m limit --limit 1/second -j LOG --A logpass-45 -m limit --limit 1/second -j LOG --A logpass-46 -m limit --limit 1/second -j LOG --A logpass-47 -m limit --limit 1/second -j LOG --A logpass-48 -m limit --limit 1/second -j LOG --A logpass-49 -m limit --limit 1/second -j LOG --A logpass-5 -m limit --limit 1/second -j LOG --A logpass-50 -m limit --limit 1/second -j LOG --A logpass-6 -m limit --limit 1/second -j LOG --A logpass-7 -m limit --limit 1/second -j LOG --A logpass-8 -m limit --limit 1/second -j LOG --A logpass-9 -m limit --limit 1/second -j LOG --A logreject-0 -m limit --limit 1/second -j LOG --A logreject-0 -j REJECT --A logtarpit-0 -m limit --limit 1/second -j LOG --A logtarpit-0 -j tarpit --A tarpit -p tcp -j TARPIT --A tarpit -j DROP -COMMIT -*mangle -:FORWARD ACCEPT [0:0] -:INPUT ACCEPT [0:0] -:OUTPUT ACCEPT [0:0] -:POSTROUTING ACCEPT [0:0] -:PREROUTING ACCEPT [0:0] --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 --A INPUT -j MARK --set-mark 2 --A OUTPUT -j MARK --set-mark 0 --A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 --A PREROUTING -i eth0 -j MARK --set-mark 0 -COMMIT -*nat -:INPUT ACCEPT [0:0] -:OUTPUT ACCEPT [0:0] -:POSTROUTING ACCEPT [0:0] -:PREROUTING ACCEPT [0:0] -:awall-masquerade - [0:0] --A INPUT -j MASQUERADE --A OUTPUT -j REDIRECT --A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE --A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade --A PREROUTING -i eth0 -j REDIRECT --A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT --A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE -COMMIT -*raw -:OUTPUT ACCEPT [0:0] -:PREROUTING ACCEPT [0:0] --A OUTPUT -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -p tcp --dport 80 -j CT --notrack --A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack --A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack --A OUTPUT -p esp -j CT --notrack --A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack --A OUTPUT -j CT --notrack --A PREROUTING -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack --A PREROUTING -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A PREROUTING -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A PREROUTING -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A PREROUTING -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A PREROUTING -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack --A PREROUTING -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack --A PREROUTING -i eth0 -j CT --notrack --A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack -COMMIT - -# rules6-save generated by awall -*filter -:FORWARD DROP [0:0] -:INPUT DROP [0:0] -:OUTPUT DROP [0:0] -:icmp-routing - [0:0] -:limit-0 - [0:0] -:limit-1 - [0:0] -:limit-10 - [0:0] -:limit-100 - [0:0] -:limit-1000 - [0:0] -:limit-1001 - [0:0] -:limit-1002 - [0:0] -:limit-1003 - [0:0] -:limit-1004 - [0:0] -:limit-1005 - [0:0] -:limit-1006 - [0:0] -:limit-1007 - [0:0] -:limit-1008 - [0:0] -:limit-1009 - [0:0] -:limit-101 - [0:0] -:limit-1010 - [0:0] -:limit-1011 - [0:0] -:limit-1012 - [0:0] -:limit-1013 - [0:0] -:limit-1014 - [0:0] -:limit-1015 - [0:0] -:limit-1016 - [0:0] -:limit-1017 - [0:0] -:limit-1018 - [0:0] -:limit-1019 - [0:0] -:limit-102 - [0:0] -:limit-1020 - [0:0] -:limit-1021 - [0:0] -:limit-1022 - [0:0] -:limit-1023 - [0:0] -:limit-1024 - [0:0] -:limit-1025 - [0:0] -:limit-1026 - [0:0] -:limit-1027 - [0:0] -:limit-1028 - [0:0] -:limit-1029 - [0:0] -:limit-103 - [0:0] -:limit-1030 - [0:0] -:limit-1031 - [0:0] -:limit-1032 - [0:0] -:limit-1033 - [0:0] -:limit-1034 - [0:0] -:limit-1035 - [0:0] -:limit-1036 - [0:0] -:limit-1037 - [0:0] -:limit-1038 - [0:0] -:limit-1039 - [0:0] -:limit-104 - [0:0] -:limit-1040 - [0:0] -:limit-1041 - [0:0] -:limit-1042 - [0:0] -:limit-1043 - [0:0] -:limit-1044 - [0:0] -:limit-1045 - [0:0] -:limit-1046 - [0:0] -:limit-1047 - [0:0] -:limit-1048 - [0:0] -:limit-1049 - [0:0] -:limit-105 - [0:0] -:limit-1050 - [0:0] -:limit-1051 - [0:0] -:limit-1052 - [0:0] -:limit-1053 - [0:0] -:limit-1054 - [0:0] -:limit-1055 - [0:0] -:limit-1056 - [0:0] -:limit-1057 - [0:0] -:limit-1058 - [0:0] -:limit-1059 - [0:0] -:limit-106 - [0:0] -:limit-1060 - [0:0] -:limit-1061 - [0:0] -:limit-1062 - [0:0] -:limit-1063 - [0:0] -:limit-1064 - [0:0] -:limit-1065 - [0:0] -:limit-1066 - [0:0] -:limit-1067 - [0:0] -:limit-1068 - [0:0] -:limit-1069 - [0:0] -:limit-107 - [0:0] -:limit-1070 - [0:0] -:limit-1071 - [0:0] -:limit-1072 - [0:0] -:limit-1073 - [0:0] -:limit-1074 - [0:0] -:limit-1075 - [0:0] -:limit-1076 - [0:0] -:limit-1077 - [0:0] -:limit-1078 - [0:0] -:limit-1079 - [0:0] -:limit-108 - [0:0] -:limit-1080 - [0:0] -:limit-1081 - [0:0] -:limit-1082 - [0:0] -:limit-1083 - [0:0] -:limit-1084 - [0:0] -:limit-1085 - [0:0] -:limit-1086 - [0:0] -:limit-1087 - [0:0] -:limit-1088 - [0:0] -:limit-1089 - [0:0] -:limit-109 - [0:0] -:limit-1090 - [0:0] -:limit-1091 - [0:0] -:limit-1092 - [0:0] -:limit-1094 - [0:0] -:limit-1095 - [0:0] -:limit-1096 - [0:0] -:limit-1098 - [0:0] -:limit-1099 - [0:0] -:limit-11 - [0:0] -:limit-110 - [0:0] -:limit-1100 - [0:0] -:limit-1101 - [0:0] -:limit-1102 - [0:0] -:limit-1103 - [0:0] -:limit-1104 - [0:0] -:limit-1106 - [0:0] -:limit-1107 - [0:0] -:limit-1108 - [0:0] -:limit-111 - [0:0] -:limit-1110 - [0:0] -:limit-1111 - [0:0] -:limit-1112 - [0:0] -:limit-1113 - [0:0] -:limit-1114 - [0:0] -:limit-1115 - [0:0] -:limit-1116 - [0:0] -:limit-1118 - [0:0] -:limit-1119 - [0:0] -:limit-112 - [0:0] -:limit-1120 - [0:0] -:limit-1122 - [0:0] -:limit-1123 - [0:0] -:limit-1124 - [0:0] -:limit-1125 - [0:0] -:limit-1126 - [0:0] -:limit-1127 - [0:0] -:limit-1128 - [0:0] -:limit-113 - [0:0] -:limit-1130 - [0:0] -:limit-1131 - [0:0] -:limit-1132 - [0:0] -:limit-1134 - [0:0] -:limit-1135 - [0:0] -:limit-1136 - [0:0] -:limit-1137 - [0:0] -:limit-1138 - [0:0] -:limit-1139 - [0:0] -:limit-114 - [0:0] -:limit-1140 - [0:0] -:limit-1141 - [0:0] -:limit-1142 - [0:0] -:limit-1143 - [0:0] -:limit-1144 - [0:0] -:limit-1145 - [0:0] -:limit-1146 - [0:0] -:limit-1148 - [0:0] -:limit-1149 - [0:0] -:limit-115 - [0:0] -:limit-1150 - [0:0] -:limit-1152 - [0:0] -:limit-1153 - [0:0] -:limit-1154 - [0:0] -:limit-1155 - [0:0] -:limit-1156 - [0:0] -:limit-1157 - [0:0] -:limit-1158 - [0:0] -:limit-116 - [0:0] -:limit-1160 - [0:0] -:limit-1161 - [0:0] -:limit-1162 - [0:0] -:limit-1164 - [0:0] -:limit-1165 - [0:0] -:limit-1166 - [0:0] -:limit-1167 - [0:0] -:limit-1168 - [0:0] -:limit-1169 - [0:0] -:limit-117 - [0:0] -:limit-1170 - [0:0] -:limit-1172 - [0:0] -:limit-1173 - [0:0] -:limit-1174 - [0:0] -:limit-1176 - [0:0] -:limit-1177 - [0:0] -:limit-1178 - [0:0] -:limit-1179 - [0:0] -:limit-118 - [0:0] -:limit-1180 - [0:0] -:limit-1181 - [0:0] -:limit-1182 - [0:0] -:limit-1184 - [0:0] -:limit-1185 - [0:0] -:limit-1186 - [0:0] -:limit-1188 - [0:0] -:limit-1189 - [0:0] -:limit-119 - [0:0] -:limit-1190 - [0:0] -:limit-1191 - [0:0] -:limit-1192 - [0:0] -:limit-1193 - [0:0] -:limit-1194 - [0:0] -:limit-1195 - [0:0] -:limit-1196 - [0:0] -:limit-1197 - [0:0] -:limit-1198 - [0:0] -:limit-1199 - [0:0] -:limit-12 - [0:0] -:limit-120 - [0:0] -:limit-1200 - [0:0] -:limit-1202 - [0:0] -:limit-1203 - [0:0] -:limit-1204 - [0:0] -:limit-1206 - [0:0] -:limit-1207 - [0:0] -:limit-1208 - [0:0] -:limit-1209 - [0:0] -:limit-121 - [0:0] -:limit-1210 - [0:0] -:limit-1211 - [0:0] -:limit-1212 - [0:0] -:limit-1214 - [0:0] -:limit-1215 - [0:0] -:limit-1216 - [0:0] -:limit-1218 - [0:0] -:limit-1219 - [0:0] -:limit-122 - [0:0] -:limit-1220 - [0:0] -:limit-1221 - [0:0] -:limit-1222 - [0:0] -:limit-1223 - [0:0] -:limit-1224 - [0:0] -:limit-1226 - [0:0] -:limit-1227 - [0:0] -:limit-1228 - [0:0] -:limit-123 - [0:0] -:limit-1230 - [0:0] -:limit-1231 - [0:0] -:limit-1232 - [0:0] -:limit-1233 - [0:0] -:limit-1234 - [0:0] -:limit-1235 - [0:0] -:limit-1236 - [0:0] -:limit-1238 - [0:0] -:limit-1239 - [0:0] -:limit-124 - [0:0] -:limit-1240 - [0:0] -:limit-1242 - [0:0] -:limit-1243 - [0:0] -:limit-1244 - [0:0] -:limit-1245 - [0:0] -:limit-1246 - [0:0] -:limit-1247 - [0:0] -:limit-1248 - [0:0] -:limit-1249 - [0:0] -:limit-125 - [0:0] -:limit-1250 - [0:0] -:limit-1251 - [0:0] -:limit-1252 - [0:0] -:limit-1253 - [0:0] -:limit-1254 - [0:0] -:limit-1256 - [0:0] -:limit-1257 - [0:0] -:limit-1258 - [0:0] -:limit-126 - [0:0] -:limit-1260 - [0:0] -:limit-1261 - [0:0] -:limit-1262 - [0:0] -:limit-1263 - [0:0] -:limit-1264 - [0:0] -:limit-1265 - [0:0] -:limit-1266 - [0:0] -:limit-1268 - [0:0] -:limit-1269 - [0:0] -:limit-127 - [0:0] -:limit-1270 - [0:0] -:limit-1272 - [0:0] -:limit-1273 - [0:0] -:limit-1274 - [0:0] -:limit-1275 - [0:0] -:limit-1276 - [0:0] -:limit-1277 - [0:0] -:limit-1278 - [0:0] -:limit-128 - [0:0] -:limit-1280 - [0:0] -:limit-1281 - [0:0] -:limit-1282 - [0:0] -:limit-1284 - [0:0] -:limit-1285 - [0:0] -:limit-1286 - [0:0] -:limit-1287 - [0:0] -:limit-1288 - [0:0] -:limit-1289 - [0:0] -:limit-129 - [0:0] -:limit-1290 - [0:0] -:limit-1292 - [0:0] -:limit-1293 - [0:0] -:limit-1294 - [0:0] -:limit-1296 - [0:0] -:limit-1297 - [0:0] -:limit-1298 - [0:0] -:limit-1299 - [0:0] -:limit-13 - [0:0] -:limit-130 - [0:0] -:limit-1300 - [0:0] -:limit-1301 - [0:0] -:limit-1302 - [0:0] -:limit-1303 - [0:0] -:limit-1304 - [0:0] -:limit-1305 - [0:0] -:limit-1306 - [0:0] -:limit-1307 - [0:0] -:limit-1308 - [0:0] -:limit-131 - [0:0] -:limit-1310 - [0:0] -:limit-1311 - [0:0] -:limit-1312 - [0:0] -:limit-1314 - [0:0] -:limit-1315 - [0:0] -:limit-1316 - [0:0] -:limit-1317 - [0:0] -:limit-1318 - [0:0] -:limit-1319 - [0:0] -:limit-132 - [0:0] -:limit-1320 - [0:0] -:limit-1322 - [0:0] -:limit-1323 - [0:0] -:limit-1324 - [0:0] -:limit-1326 - [0:0] -:limit-1327 - [0:0] -:limit-1328 - [0:0] -:limit-1329 - [0:0] -:limit-133 - [0:0] -:limit-1330 - [0:0] -:limit-1331 - [0:0] -:limit-1332 - [0:0] -:limit-1334 - [0:0] -:limit-1335 - [0:0] -:limit-1336 - [0:0] -:limit-1338 - [0:0] -:limit-1339 - [0:0] -:limit-134 - [0:0] -:limit-1340 - [0:0] -:limit-1341 - [0:0] -:limit-1342 - [0:0] -:limit-1343 - [0:0] -:limit-1344 - [0:0] -:limit-1346 - [0:0] -:limit-1347 - [0:0] -:limit-1348 - [0:0] -:limit-135 - [0:0] -:limit-1350 - [0:0] -:limit-1351 - [0:0] -:limit-1352 - [0:0] -:limit-1353 - [0:0] -:limit-1354 - [0:0] -:limit-1355 - [0:0] -:limit-1356 - [0:0] -:limit-1357 - [0:0] -:limit-1358 - [0:0] -:limit-1359 - [0:0] -:limit-136 - [0:0] -:limit-1360 - [0:0] -:limit-1361 - [0:0] -:limit-1362 - [0:0] -:limit-1364 - [0:0] -:limit-1365 - [0:0] -:limit-1366 - [0:0] -:limit-1368 - [0:0] -:limit-1369 - [0:0] -:limit-137 - [0:0] -:limit-1370 - [0:0] -:limit-1371 - [0:0] -:limit-1372 - [0:0] -:limit-1373 - [0:0] -:limit-1374 - [0:0] -:limit-1376 - [0:0] -:limit-1377 - [0:0] -:limit-1378 - [0:0] -:limit-138 - [0:0] -:limit-1380 - [0:0] -:limit-1381 - [0:0] -:limit-1382 - [0:0] -:limit-1383 - [0:0] -:limit-1384 - [0:0] -:limit-1385 - [0:0] -:limit-1386 - [0:0] -:limit-1388 - [0:0] -:limit-1389 - [0:0] -:limit-139 - [0:0] -:limit-1390 - [0:0] -:limit-1392 - [0:0] -:limit-1393 - [0:0] -:limit-1394 - [0:0] -:limit-1395 - [0:0] -:limit-1396 - [0:0] -:limit-1397 - [0:0] -:limit-1398 - [0:0] -:limit-14 - [0:0] -:limit-140 - [0:0] -:limit-1400 - [0:0] -:limit-1401 - [0:0] -:limit-1402 - [0:0] -:limit-1404 - [0:0] -:limit-1405 - [0:0] -:limit-1406 - [0:0] -:limit-1407 - [0:0] -:limit-1408 - [0:0] -:limit-1409 - [0:0] -:limit-141 - [0:0] -:limit-1410 - [0:0] -:limit-1411 - [0:0] -:limit-1412 - [0:0] -:limit-1413 - [0:0] -:limit-1414 - [0:0] -:limit-1415 - [0:0] -:limit-1416 - [0:0] -:limit-1417 - [0:0] -:limit-1418 - [0:0] -:limit-1419 - [0:0] -:limit-142 - [0:0] -:limit-1420 - [0:0] -:limit-1421 - [0:0] -:limit-1422 - [0:0] -:limit-1423 - [0:0] -:limit-1424 - [0:0] -:limit-1425 - [0:0] -:limit-1426 - [0:0] -:limit-1427 - [0:0] -:limit-1428 - [0:0] -:limit-1429 - [0:0] -:limit-143 - [0:0] -:limit-1430 - [0:0] -:limit-1431 - [0:0] -:limit-144 - [0:0] -:limit-145 - [0:0] -:limit-146 - [0:0] -:limit-147 - [0:0] -:limit-148 - [0:0] -:limit-149 - [0:0] -:limit-15 - [0:0] -:limit-150 - [0:0] -:limit-151 - [0:0] -:limit-152 - [0:0] -:limit-153 - [0:0] -:limit-154 - [0:0] -:limit-155 - [0:0] -:limit-156 - [0:0] -:limit-157 - [0:0] -:limit-158 - [0:0] -:limit-159 - [0:0] -:limit-16 - [0:0] -:limit-160 - [0:0] -:limit-161 - [0:0] -:limit-162 - [0:0] -:limit-163 - [0:0] -:limit-164 - [0:0] -:limit-165 - [0:0] -:limit-166 - [0:0] -:limit-167 - [0:0] -:limit-168 - [0:0] -:limit-169 - [0:0] -:limit-17 - [0:0] -:limit-170 - [0:0] -:limit-171 - [0:0] -:limit-172 - [0:0] -:limit-173 - [0:0] -:limit-174 - [0:0] -:limit-175 - [0:0] -:limit-176 - [0:0] -:limit-177 - [0:0] -:limit-178 - [0:0] -:limit-179 - [0:0] -:limit-18 - [0:0] -:limit-180 - [0:0] -:limit-181 - [0:0] -:limit-182 - [0:0] -:limit-183 - [0:0] -:limit-184 - [0:0] -:limit-185 - [0:0] -:limit-186 - [0:0] -:limit-187 - [0:0] -:limit-188 - [0:0] -:limit-189 - [0:0] -:limit-19 - [0:0] -:limit-190 - [0:0] -:limit-191 - [0:0] -:limit-192 - [0:0] -:limit-193 - [0:0] -:limit-194 - [0:0] -:limit-195 - [0:0] -:limit-196 - [0:0] -:limit-197 - [0:0] -:limit-198 - [0:0] -:limit-199 - [0:0] -:limit-2 - [0:0] -:limit-20 - [0:0] -:limit-200 - [0:0] -:limit-201 - [0:0] -:limit-202 - [0:0] -:limit-203 - [0:0] -:limit-204 - [0:0] -:limit-205 - [0:0] -:limit-206 - [0:0] -:limit-207 - [0:0] -:limit-208 - [0:0] -:limit-209 - [0:0] -:limit-21 - [0:0] -:limit-210 - [0:0] -:limit-211 - [0:0] -:limit-212 - [0:0] -:limit-213 - [0:0] -:limit-214 - [0:0] -:limit-215 - [0:0] -:limit-216 - [0:0] -:limit-217 - [0:0] -:limit-218 - [0:0] -:limit-219 - [0:0] -:limit-22 - [0:0] -:limit-220 - [0:0] -:limit-221 - [0:0] -:limit-222 - [0:0] -:limit-223 - [0:0] -:limit-224 - [0:0] -:limit-225 - [0:0] -:limit-226 - [0:0] -:limit-227 - [0:0] -:limit-228 - [0:0] -:limit-229 - [0:0] -:limit-23 - [0:0] -:limit-230 - [0:0] -:limit-231 - [0:0] -:limit-232 - [0:0] -:limit-233 - [0:0] -:limit-234 - [0:0] -:limit-235 - [0:0] -:limit-236 - [0:0] -:limit-237 - [0:0] -:limit-238 - [0:0] -:limit-239 - [0:0] -:limit-24 - [0:0] -:limit-240 - [0:0] -:limit-241 - [0:0] -:limit-242 - [0:0] -:limit-243 - [0:0] -:limit-244 - [0:0] -:limit-245 - [0:0] -:limit-246 - [0:0] -:limit-247 - [0:0] -:limit-248 - [0:0] -:limit-249 - [0:0] -:limit-25 - [0:0] -:limit-250 - [0:0] -:limit-251 - [0:0] -:limit-252 - [0:0] -:limit-253 - [0:0] -:limit-254 - [0:0] -:limit-255 - [0:0] -:limit-256 - [0:0] -:limit-257 - [0:0] -:limit-258 - [0:0] -:limit-259 - [0:0] -:limit-26 - [0:0] -:limit-260 - [0:0] -:limit-261 - [0:0] -:limit-262 - [0:0] -:limit-263 - [0:0] -:limit-264 - [0:0] -:limit-265 - [0:0] -:limit-266 - [0:0] -:limit-267 - [0:0] -:limit-268 - [0:0] -:limit-269 - [0:0] -:limit-27 - [0:0] -:limit-270 - [0:0] -:limit-271 - [0:0] -:limit-272 - [0:0] -:limit-273 - [0:0] -:limit-274 - [0:0] -:limit-275 - [0:0] -:limit-276 - [0:0] -:limit-277 - [0:0] -:limit-278 - [0:0] -:limit-279 - [0:0] -:limit-28 - [0:0] -:limit-280 - [0:0] -:limit-281 - [0:0] -:limit-282 - [0:0] -:limit-283 - [0:0] -:limit-284 - [0:0] -:limit-285 - [0:0] -:limit-286 - [0:0] -:limit-287 - [0:0] -:limit-288 - [0:0] -:limit-289 - [0:0] -:limit-29 - [0:0] -:limit-290 - [0:0] -:limit-291 - [0:0] -:limit-292 - [0:0] -:limit-293 - [0:0] -:limit-294 - [0:0] -:limit-295 - [0:0] -:limit-296 - [0:0] -:limit-297 - [0:0] -:limit-298 - [0:0] -:limit-299 - [0:0] -:limit-3 - [0:0] -:limit-30 - [0:0] -:limit-300 - [0:0] -:limit-301 - [0:0] -:limit-302 - [0:0] -:limit-303 - [0:0] -:limit-304 - [0:0] -:limit-305 - [0:0] -:limit-306 - [0:0] -:limit-307 - [0:0] -:limit-308 - [0:0] -:limit-309 - [0:0] -:limit-31 - [0:0] -:limit-310 - [0:0] -:limit-311 - [0:0] -:limit-312 - [0:0] -:limit-313 - [0:0] -:limit-314 - [0:0] -:limit-315 - [0:0] -:limit-316 - [0:0] -:limit-317 - [0:0] -:limit-318 - [0:0] -:limit-319 - [0:0] -:limit-32 - [0:0] -:limit-320 - [0:0] -:limit-321 - [0:0] -:limit-322 - [0:0] -:limit-323 - [0:0] -:limit-324 - [0:0] -:limit-325 - [0:0] -:limit-326 - [0:0] -:limit-327 - [0:0] -:limit-328 - [0:0] -:limit-329 - [0:0] -:limit-33 - [0:0] -:limit-330 - [0:0] -:limit-331 - [0:0] -:limit-332 - [0:0] -:limit-333 - [0:0] -:limit-334 - [0:0] -:limit-335 - [0:0] -:limit-336 - [0:0] -:limit-337 - [0:0] -:limit-338 - [0:0] -:limit-339 - [0:0] -:limit-34 - [0:0] -:limit-340 - [0:0] -:limit-341 - [0:0] -:limit-342 - [0:0] -:limit-343 - [0:0] -:limit-344 - [0:0] -:limit-345 - [0:0] -:limit-346 - [0:0] -:limit-347 - [0:0] -:limit-348 - [0:0] -:limit-349 - [0:0] -:limit-35 - [0:0] -:limit-350 - [0:0] -:limit-351 - [0:0] -:limit-352 - [0:0] -:limit-353 - [0:0] -:limit-354 - [0:0] -:limit-355 - [0:0] -:limit-356 - [0:0] -:limit-357 - [0:0] -:limit-358 - [0:0] -:limit-359 - [0:0] -:limit-36 - [0:0] -:limit-360 - [0:0] -:limit-361 - [0:0] -:limit-362 - [0:0] -:limit-363 - [0:0] -:limit-364 - [0:0] -:limit-365 - [0:0] -:limit-366 - [0:0] -:limit-367 - [0:0] -:limit-368 - [0:0] -:limit-369 - [0:0] -:limit-37 - [0:0] -:limit-370 - [0:0] -:limit-371 - [0:0] -:limit-372 - [0:0] -:limit-373 - [0:0] -:limit-374 - [0:0] -:limit-375 - [0:0] -:limit-376 - [0:0] -:limit-378 - [0:0] -:limit-379 - [0:0] -:limit-38 - [0:0] -:limit-380 - [0:0] -:limit-382 - [0:0] -:limit-383 - [0:0] -:limit-384 - [0:0] -:limit-385 - [0:0] -:limit-386 - [0:0] -:limit-387 - [0:0] -:limit-388 - [0:0] -:limit-39 - [0:0] -:limit-390 - [0:0] -:limit-391 - [0:0] -:limit-392 - [0:0] -:limit-394 - [0:0] -:limit-395 - [0:0] -:limit-396 - [0:0] -:limit-397 - [0:0] -:limit-398 - [0:0] -:limit-399 - [0:0] -:limit-4 - [0:0] -:limit-40 - [0:0] -:limit-400 - [0:0] -:limit-402 - [0:0] -:limit-403 - [0:0] -:limit-404 - [0:0] -:limit-406 - [0:0] -:limit-407 - [0:0] -:limit-408 - [0:0] -:limit-409 - [0:0] -:limit-41 - [0:0] -:limit-410 - [0:0] -:limit-411 - [0:0] -:limit-412 - [0:0] -:limit-414 - [0:0] -:limit-415 - [0:0] -:limit-416 - [0:0] -:limit-418 - [0:0] -:limit-419 - [0:0] -:limit-42 - [0:0] -:limit-420 - [0:0] -:limit-421 - [0:0] -:limit-422 - [0:0] -:limit-423 - [0:0] -:limit-424 - [0:0] -:limit-425 - [0:0] -:limit-426 - [0:0] -:limit-427 - [0:0] -:limit-428 - [0:0] -:limit-429 - [0:0] -:limit-43 - [0:0] -:limit-430 - [0:0] -:limit-432 - [0:0] -:limit-433 - [0:0] -:limit-434 - [0:0] -:limit-436 - [0:0] -:limit-437 - [0:0] -:limit-438 - [0:0] -:limit-439 - [0:0] -:limit-44 - [0:0] -:limit-440 - [0:0] -:limit-441 - [0:0] -:limit-442 - [0:0] -:limit-444 - [0:0] -:limit-445 - [0:0] -:limit-446 - [0:0] -:limit-448 - [0:0] -:limit-449 - [0:0] -:limit-45 - [0:0] -:limit-450 - [0:0] -:limit-451 - [0:0] -:limit-452 - [0:0] -:limit-453 - [0:0] -:limit-454 - [0:0] -:limit-456 - [0:0] -:limit-457 - [0:0] -:limit-458 - [0:0] -:limit-46 - [0:0] -:limit-460 - [0:0] -:limit-461 - [0:0] -:limit-462 - [0:0] -:limit-463 - [0:0] -:limit-464 - [0:0] -:limit-465 - [0:0] -:limit-466 - [0:0] -:limit-468 - [0:0] -:limit-469 - [0:0] -:limit-47 - [0:0] -:limit-470 - [0:0] -:limit-472 - [0:0] -:limit-473 - [0:0] -:limit-474 - [0:0] -:limit-475 - [0:0] -:limit-476 - [0:0] -:limit-477 - [0:0] -:limit-478 - [0:0] -:limit-479 - [0:0] -:limit-48 - [0:0] -:limit-480 - [0:0] -:limit-481 - [0:0] -:limit-482 - [0:0] -:limit-483 - [0:0] -:limit-484 - [0:0] -:limit-486 - [0:0] -:limit-487 - [0:0] -:limit-488 - [0:0] -:limit-49 - [0:0] -:limit-490 - [0:0] -:limit-491 - [0:0] -:limit-492 - [0:0] -:limit-493 - [0:0] -:limit-494 - [0:0] -:limit-495 - [0:0] -:limit-496 - [0:0] -:limit-498 - [0:0] -:limit-499 - [0:0] -:limit-5 - [0:0] -:limit-50 - [0:0] -:limit-500 - [0:0] -:limit-502 - [0:0] -:limit-503 - [0:0] -:limit-504 - [0:0] -:limit-505 - [0:0] -:limit-506 - [0:0] -:limit-507 - [0:0] -:limit-508 - [0:0] -:limit-51 - [0:0] -:limit-510 - [0:0] -:limit-511 - [0:0] -:limit-512 - [0:0] -:limit-514 - [0:0] -:limit-515 - [0:0] -:limit-516 - [0:0] -:limit-517 - [0:0] -:limit-518 - [0:0] -:limit-519 - [0:0] -:limit-52 - [0:0] -:limit-520 - [0:0] -:limit-522 - [0:0] -:limit-523 - [0:0] -:limit-524 - [0:0] -:limit-526 - [0:0] -:limit-527 - [0:0] -:limit-528 - [0:0] -:limit-529 - [0:0] -:limit-53 - [0:0] -:limit-530 - [0:0] -:limit-531 - [0:0] -:limit-532 - [0:0] -:limit-533 - [0:0] -:limit-534 - [0:0] -:limit-535 - [0:0] -:limit-536 - [0:0] -:limit-537 - [0:0] -:limit-538 - [0:0] -:limit-54 - [0:0] -:limit-540 - [0:0] -:limit-541 - [0:0] -:limit-542 - [0:0] -:limit-544 - [0:0] -:limit-545 - [0:0] -:limit-546 - [0:0] -:limit-547 - [0:0] -:limit-548 - [0:0] -:limit-549 - [0:0] -:limit-55 - [0:0] -:limit-550 - [0:0] -:limit-552 - [0:0] -:limit-553 - [0:0] -:limit-554 - [0:0] -:limit-556 - [0:0] -:limit-557 - [0:0] -:limit-558 - [0:0] -:limit-559 - [0:0] -:limit-56 - [0:0] -:limit-560 - [0:0] -:limit-561 - [0:0] -:limit-562 - [0:0] -:limit-564 - [0:0] -:limit-565 - [0:0] -:limit-566 - [0:0] -:limit-568 - [0:0] -:limit-569 - [0:0] -:limit-57 - [0:0] -:limit-570 - [0:0] -:limit-571 - [0:0] -:limit-572 - [0:0] -:limit-573 - [0:0] -:limit-574 - [0:0] -:limit-576 - [0:0] -:limit-577 - [0:0] -:limit-578 - [0:0] -:limit-58 - [0:0] -:limit-580 - [0:0] -:limit-581 - [0:0] -:limit-582 - [0:0] -:limit-583 - [0:0] -:limit-584 - [0:0] -:limit-585 - [0:0] -:limit-586 - [0:0] -:limit-587 - [0:0] -:limit-588 - [0:0] -:limit-589 - [0:0] -:limit-59 - [0:0] -:limit-590 - [0:0] -:limit-591 - [0:0] -:limit-592 - [0:0] -:limit-594 - [0:0] -:limit-595 - [0:0] -:limit-596 - [0:0] -:limit-598 - [0:0] -:limit-599 - [0:0] -:limit-6 - [0:0] -:limit-60 - [0:0] -:limit-600 - [0:0] -:limit-601 - [0:0] -:limit-602 - [0:0] -:limit-603 - [0:0] -:limit-604 - [0:0] -:limit-606 - [0:0] -:limit-607 - [0:0] -:limit-608 - [0:0] -:limit-61 - [0:0] -:limit-610 - [0:0] -:limit-611 - [0:0] -:limit-612 - [0:0] -:limit-613 - [0:0] -:limit-614 - [0:0] -:limit-615 - [0:0] -:limit-616 - [0:0] -:limit-618 - [0:0] -:limit-619 - [0:0] -:limit-62 - [0:0] -:limit-620 - [0:0] -:limit-622 - [0:0] -:limit-623 - [0:0] -:limit-624 - [0:0] -:limit-625 - [0:0] -:limit-626 - [0:0] -:limit-627 - [0:0] -:limit-628 - [0:0] -:limit-63 - [0:0] -:limit-630 - [0:0] -:limit-631 - [0:0] -:limit-632 - [0:0] -:limit-634 - [0:0] -:limit-635 - [0:0] -:limit-636 - [0:0] -:limit-637 - [0:0] -:limit-638 - [0:0] -:limit-639 - [0:0] -:limit-64 - [0:0] -:limit-640 - [0:0] -:limit-641 - [0:0] -:limit-642 - [0:0] -:limit-643 - [0:0] -:limit-644 - [0:0] -:limit-645 - [0:0] -:limit-646 - [0:0] -:limit-648 - [0:0] -:limit-649 - [0:0] -:limit-65 - [0:0] -:limit-650 - [0:0] -:limit-652 - [0:0] -:limit-653 - [0:0] -:limit-654 - [0:0] -:limit-655 - [0:0] -:limit-656 - [0:0] -:limit-657 - [0:0] -:limit-658 - [0:0] -:limit-66 - [0:0] -:limit-660 - [0:0] -:limit-661 - [0:0] -:limit-662 - [0:0] -:limit-664 - [0:0] -:limit-665 - [0:0] -:limit-666 - [0:0] -:limit-667 - [0:0] -:limit-668 - [0:0] -:limit-669 - [0:0] -:limit-67 - [0:0] -:limit-670 - [0:0] -:limit-672 - [0:0] -:limit-673 - [0:0] -:limit-674 - [0:0] -:limit-676 - [0:0] -:limit-677 - [0:0] -:limit-678 - [0:0] -:limit-679 - [0:0] -:limit-68 - [0:0] -:limit-680 - [0:0] -:limit-681 - [0:0] -:limit-682 - [0:0] -:limit-684 - [0:0] -:limit-685 - [0:0] -:limit-686 - [0:0] -:limit-688 - [0:0] -:limit-689 - [0:0] -:limit-69 - [0:0] -:limit-690 - [0:0] -:limit-691 - [0:0] -:limit-692 - [0:0] -:limit-693 - [0:0] -:limit-694 - [0:0] -:limit-695 - [0:0] -:limit-696 - [0:0] -:limit-697 - [0:0] -:limit-698 - [0:0] -:limit-699 - [0:0] -:limit-7 - [0:0] -:limit-70 - [0:0] -:limit-700 - [0:0] -:limit-701 - [0:0] -:limit-702 - [0:0] -:limit-703 - [0:0] -:limit-704 - [0:0] -:limit-705 - [0:0] -:limit-706 - [0:0] -:limit-707 - [0:0] -:limit-708 - [0:0] -:limit-709 - [0:0] -:limit-71 - [0:0] -:limit-710 - [0:0] -:limit-711 - [0:0] -:limit-712 - [0:0] -:limit-713 - [0:0] -:limit-714 - [0:0] -:limit-715 - [0:0] -:limit-716 - [0:0] -:limit-717 - [0:0] -:limit-718 - [0:0] -:limit-719 - [0:0] -:limit-72 - [0:0] -:limit-720 - [0:0] -:limit-721 - [0:0] -:limit-722 - [0:0] -:limit-723 - [0:0] -:limit-724 - [0:0] -:limit-725 - [0:0] -:limit-726 - [0:0] -:limit-727 - [0:0] -:limit-728 - [0:0] -:limit-729 - [0:0] -:limit-73 - [0:0] -:limit-730 - [0:0] -:limit-731 - [0:0] -:limit-732 - [0:0] -:limit-733 - [0:0] -:limit-734 - [0:0] -:limit-735 - [0:0] -:limit-736 - [0:0] -:limit-737 - [0:0] -:limit-738 - [0:0] -:limit-739 - [0:0] -:limit-74 - [0:0] -:limit-740 - [0:0] -:limit-741 - [0:0] -:limit-742 - [0:0] -:limit-743 - [0:0] -:limit-744 - [0:0] -:limit-745 - [0:0] -:limit-746 - [0:0] -:limit-747 - [0:0] -:limit-748 - [0:0] -:limit-749 - [0:0] -:limit-75 - [0:0] -:limit-750 - [0:0] -:limit-751 - [0:0] -:limit-752 - [0:0] -:limit-753 - [0:0] -:limit-754 - [0:0] -:limit-755 - [0:0] -:limit-756 - [0:0] -:limit-757 - [0:0] -:limit-758 - [0:0] -:limit-759 - [0:0] -:limit-76 - [0:0] -:limit-760 - [0:0] -:limit-761 - [0:0] -:limit-762 - [0:0] -:limit-763 - [0:0] -:limit-764 - [0:0] -:limit-765 - [0:0] -:limit-766 - [0:0] -:limit-767 - [0:0] -:limit-768 - [0:0] -:limit-769 - [0:0] -:limit-77 - [0:0] -:limit-770 - [0:0] -:limit-771 - [0:0] -:limit-772 - [0:0] -:limit-773 - [0:0] -:limit-774 - [0:0] -:limit-775 - [0:0] -:limit-776 - [0:0] -:limit-777 - [0:0] -:limit-778 - [0:0] -:limit-779 - [0:0] -:limit-78 - [0:0] -:limit-780 - [0:0] -:limit-781 - [0:0] -:limit-782 - [0:0] -:limit-783 - [0:0] -:limit-784 - [0:0] -:limit-785 - [0:0] -:limit-786 - [0:0] -:limit-787 - [0:0] -:limit-788 - [0:0] -:limit-789 - [0:0] -:limit-79 - [0:0] -:limit-790 - [0:0] -:limit-791 - [0:0] -:limit-792 - [0:0] -:limit-793 - [0:0] -:limit-794 - [0:0] -:limit-795 - [0:0] -:limit-796 - [0:0] -:limit-797 - [0:0] -:limit-798 - [0:0] -:limit-799 - [0:0] -:limit-8 - [0:0] -:limit-80 - [0:0] -:limit-800 - [0:0] -:limit-801 - [0:0] -:limit-802 - [0:0] -:limit-803 - [0:0] -:limit-804 - [0:0] -:limit-805 - [0:0] -:limit-806 - [0:0] -:limit-807 - [0:0] -:limit-808 - [0:0] -:limit-809 - [0:0] -:limit-81 - [0:0] -:limit-810 - [0:0] -:limit-811 - [0:0] -:limit-812 - [0:0] -:limit-813 - [0:0] -:limit-814 - [0:0] -:limit-815 - [0:0] -:limit-816 - [0:0] -:limit-817 - [0:0] -:limit-818 - [0:0] -:limit-819 - [0:0] -:limit-82 - [0:0] -:limit-820 - [0:0] -:limit-821 - [0:0] -:limit-822 - [0:0] -:limit-823 - [0:0] -:limit-824 - [0:0] -:limit-825 - [0:0] -:limit-826 - [0:0] -:limit-827 - [0:0] -:limit-828 - [0:0] -:limit-829 - [0:0] -:limit-83 - [0:0] -:limit-830 - [0:0] -:limit-831 - [0:0] -:limit-832 - [0:0] -:limit-833 - [0:0] -:limit-834 - [0:0] -:limit-835 - [0:0] -:limit-836 - [0:0] -:limit-837 - [0:0] -:limit-838 - [0:0] -:limit-839 - [0:0] -:limit-84 - [0:0] -:limit-840 - [0:0] -:limit-841 - [0:0] -:limit-842 - [0:0] -:limit-843 - [0:0] -:limit-844 - [0:0] -:limit-845 - [0:0] -:limit-846 - [0:0] -:limit-847 - [0:0] -:limit-848 - [0:0] -:limit-849 - [0:0] -:limit-85 - [0:0] -:limit-850 - [0:0] -:limit-851 - [0:0] -:limit-852 - [0:0] -:limit-853 - [0:0] -:limit-854 - [0:0] -:limit-855 - [0:0] -:limit-856 - [0:0] -:limit-857 - [0:0] -:limit-858 - [0:0] -:limit-859 - [0:0] -:limit-86 - [0:0] -:limit-860 - [0:0] -:limit-861 - [0:0] -:limit-862 - [0:0] -:limit-863 - [0:0] -:limit-864 - [0:0] -:limit-865 - [0:0] -:limit-866 - [0:0] -:limit-867 - [0:0] -:limit-868 - [0:0] -:limit-869 - [0:0] -:limit-87 - [0:0] -:limit-870 - [0:0] -:limit-871 - [0:0] -:limit-872 - [0:0] -:limit-873 - [0:0] -:limit-874 - [0:0] -:limit-875 - [0:0] -:limit-876 - [0:0] -:limit-877 - [0:0] -:limit-878 - [0:0] -:limit-879 - [0:0] -:limit-88 - [0:0] -:limit-880 - [0:0] -:limit-881 - [0:0] -:limit-882 - [0:0] -:limit-883 - [0:0] -:limit-884 - [0:0] -:limit-885 - [0:0] -:limit-886 - [0:0] -:limit-887 - [0:0] -:limit-888 - [0:0] -:limit-889 - [0:0] -:limit-89 - [0:0] -:limit-890 - [0:0] -:limit-891 - [0:0] -:limit-892 - [0:0] -:limit-893 - [0:0] -:limit-894 - [0:0] -:limit-895 - [0:0] -:limit-896 - [0:0] -:limit-897 - [0:0] -:limit-898 - [0:0] -:limit-899 - [0:0] -:limit-9 - [0:0] -:limit-90 - [0:0] -:limit-900 - [0:0] -:limit-901 - [0:0] -:limit-902 - [0:0] -:limit-903 - [0:0] -:limit-904 - [0:0] -:limit-905 - [0:0] -:limit-906 - [0:0] -:limit-907 - [0:0] -:limit-908 - [0:0] -:limit-909 - [0:0] -:limit-91 - [0:0] -:limit-910 - [0:0] -:limit-911 - [0:0] -:limit-912 - [0:0] -:limit-913 - [0:0] -:limit-914 - [0:0] -:limit-915 - [0:0] -:limit-916 - [0:0] -:limit-917 - [0:0] -:limit-918 - [0:0] -:limit-919 - [0:0] -:limit-92 - [0:0] -:limit-920 - [0:0] -:limit-921 - [0:0] -:limit-922 - [0:0] -:limit-923 - [0:0] -:limit-924 - [0:0] -:limit-925 - [0:0] -:limit-926 - [0:0] -:limit-927 - [0:0] -:limit-928 - [0:0] -:limit-929 - [0:0] -:limit-93 - [0:0] -:limit-930 - [0:0] -:limit-931 - [0:0] -:limit-932 - [0:0] -:limit-933 - [0:0] -:limit-934 - [0:0] -:limit-935 - [0:0] -:limit-936 - [0:0] -:limit-937 - [0:0] -:limit-938 - [0:0] -:limit-939 - [0:0] -:limit-94 - [0:0] -:limit-940 - [0:0] -:limit-941 - [0:0] -:limit-942 - [0:0] -:limit-943 - [0:0] -:limit-944 - [0:0] -:limit-945 - [0:0] -:limit-946 - [0:0] -:limit-947 - [0:0] -:limit-948 - [0:0] -:limit-949 - [0:0] -:limit-95 - [0:0] -:limit-950 - [0:0] -:limit-951 - [0:0] -:limit-952 - [0:0] -:limit-953 - [0:0] -:limit-954 - [0:0] -:limit-955 - [0:0] -:limit-956 - [0:0] -:limit-957 - [0:0] -:limit-958 - [0:0] -:limit-959 - [0:0] -:limit-96 - [0:0] -:limit-960 - [0:0] -:limit-961 - [0:0] -:limit-962 - [0:0] -:limit-963 - [0:0] -:limit-964 - [0:0] -:limit-965 - [0:0] -:limit-966 - [0:0] -:limit-967 - [0:0] -:limit-968 - [0:0] -:limit-969 - [0:0] -:limit-97 - [0:0] -:limit-970 - [0:0] -:limit-971 - [0:0] -:limit-972 - [0:0] -:limit-973 - [0:0] -:limit-974 - [0:0] -:limit-975 - [0:0] -:limit-976 - [0:0] -:limit-977 - [0:0] -:limit-978 - [0:0] -:limit-979 - [0:0] -:limit-98 - [0:0] -:limit-980 - [0:0] -:limit-981 - [0:0] -:limit-982 - [0:0] -:limit-983 - [0:0] -:limit-984 - [0:0] -:limit-985 - [0:0] -:limit-986 - [0:0] -:limit-987 - [0:0] -:limit-988 - [0:0] -:limit-989 - [0:0] -:limit-99 - [0:0] -:limit-990 - [0:0] -:limit-991 - [0:0] -:limit-992 - [0:0] -:limit-993 - [0:0] -:limit-994 - [0:0] -:limit-995 - [0:0] -:limit-996 - [0:0] -:limit-997 - [0:0] -:limit-998 - [0:0] -:limit-999 - [0:0] -:logaccept-0 - [0:0] -:logaccept-18 - [0:0] -:logaccept-27 - [0:0] -:logaccept-36 - [0:0] -:logaccept-45 - [0:0] -:logaccept-63 - [0:0] -:logaccept-64 - [0:0] -:logaccept-65 - [0:0] -:logaccept-66 - [0:0] -:logaccept-67 - [0:0] -:logaccept-68 - [0:0] -:logaccept-69 - [0:0] -:logaccept-70 - [0:0] -:logaccept-71 - [0:0] -:logaccept-72 - [0:0] -:logaccept-73 - [0:0] -:logaccept-74 - [0:0] -:logaccept-75 - [0:0] -:logaccept-76 - [0:0] -:logaccept-77 - [0:0] -:logaccept-78 - [0:0] -:logaccept-79 - [0:0] -:logaccept-80 - [0:0] -:logaccept-81 - [0:0] -:logaccept-82 - [0:0] -:logaccept-83 - [0:0] -:logaccept-84 - [0:0] -:logaccept-9 - [0:0] -:logaccept-final-0 - [0:0] -:logaccept-final-1 - [0:0] -:logaccept-final-10 - [0:0] -:logaccept-final-11 - [0:0] -:logaccept-final-12 - [0:0] -:logaccept-final-13 - [0:0] -:logaccept-final-14 - [0:0] -:logaccept-final-15 - [0:0] -:logaccept-final-16 - [0:0] -:logaccept-final-17 - [0:0] -:logaccept-final-18 - [0:0] -:logaccept-final-19 - [0:0] -:logaccept-final-2 - [0:0] -:logaccept-final-20 - [0:0] -:logaccept-final-21 - [0:0] -:logaccept-final-22 - [0:0] -:logaccept-final-23 - [0:0] -:logaccept-final-24 - [0:0] -:logaccept-final-25 - [0:0] -:logaccept-final-26 - [0:0] -:logaccept-final-27 - [0:0] -:logaccept-final-28 - [0:0] -:logaccept-final-29 - [0:0] -:logaccept-final-3 - [0:0] -:logaccept-final-30 - [0:0] -:logaccept-final-31 - [0:0] -:logaccept-final-32 - [0:0] -:logaccept-final-33 - [0:0] -:logaccept-final-34 - [0:0] -:logaccept-final-35 - [0:0] -:logaccept-final-36 - [0:0] -:logaccept-final-37 - [0:0] -:logaccept-final-38 - [0:0] -:logaccept-final-39 - [0:0] -:logaccept-final-4 - [0:0] -:logaccept-final-40 - [0:0] -:logaccept-final-41 - [0:0] -:logaccept-final-42 - [0:0] -:logaccept-final-43 - [0:0] -:logaccept-final-44 - [0:0] -:logaccept-final-45 - [0:0] -:logaccept-final-46 - [0:0] -:logaccept-final-47 - [0:0] -:logaccept-final-48 - [0:0] -:logaccept-final-49 - [0:0] -:logaccept-final-5 - [0:0] -:logaccept-final-50 - [0:0] -:logaccept-final-51 - [0:0] -:logaccept-final-52 - [0:0] -:logaccept-final-53 - [0:0] -:logaccept-final-54 - [0:0] -:logaccept-final-55 - [0:0] -:logaccept-final-56 - [0:0] -:logaccept-final-57 - [0:0] -:logaccept-final-58 - [0:0] -:logaccept-final-59 - [0:0] -:logaccept-final-6 - [0:0] -:logaccept-final-60 - [0:0] -:logaccept-final-61 - [0:0] -:logaccept-final-7 - [0:0] -:logaccept-final-8 - [0:0] -:logaccept-final-9 - [0:0] -:logdrop-0 - [0:0] -:logdrop-1 - [0:0] -:logdrop-10 - [0:0] -:logdrop-100 - [0:0] -:logdrop-101 - [0:0] -:logdrop-102 - [0:0] -:logdrop-103 - [0:0] -:logdrop-104 - [0:0] -:logdrop-105 - [0:0] -:logdrop-106 - [0:0] -:logdrop-107 - [0:0] -:logdrop-108 - [0:0] -:logdrop-109 - [0:0] -:logdrop-11 - [0:0] -:logdrop-110 - [0:0] -:logdrop-111 - [0:0] -:logdrop-112 - [0:0] -:logdrop-113 - [0:0] -:logdrop-114 - [0:0] -:logdrop-115 - [0:0] -:logdrop-116 - [0:0] -:logdrop-117 - [0:0] -:logdrop-118 - [0:0] -:logdrop-119 - [0:0] -:logdrop-12 - [0:0] -:logdrop-120 - [0:0] -:logdrop-121 - [0:0] -:logdrop-122 - [0:0] -:logdrop-123 - [0:0] -:logdrop-124 - [0:0] -:logdrop-125 - [0:0] -:logdrop-126 - [0:0] -:logdrop-127 - [0:0] -:logdrop-128 - [0:0] -:logdrop-129 - [0:0] -:logdrop-13 - [0:0] -:logdrop-130 - [0:0] -:logdrop-131 - [0:0] -:logdrop-132 - [0:0] -:logdrop-133 - [0:0] -:logdrop-134 - [0:0] -:logdrop-135 - [0:0] -:logdrop-136 - [0:0] -:logdrop-137 - [0:0] -:logdrop-138 - [0:0] -:logdrop-139 - [0:0] -:logdrop-14 - [0:0] -:logdrop-140 - [0:0] -:logdrop-141 - [0:0] -:logdrop-142 - [0:0] -:logdrop-143 - [0:0] -:logdrop-144 - [0:0] -:logdrop-145 - [0:0] -:logdrop-146 - [0:0] -:logdrop-147 - [0:0] -:logdrop-148 - [0:0] -:logdrop-149 - [0:0] -:logdrop-15 - [0:0] -:logdrop-150 - [0:0] -:logdrop-151 - [0:0] -:logdrop-152 - [0:0] -:logdrop-153 - [0:0] -:logdrop-154 - [0:0] -:logdrop-155 - [0:0] -:logdrop-156 - [0:0] -:logdrop-157 - [0:0] -:logdrop-158 - [0:0] -:logdrop-159 - [0:0] -:logdrop-16 - [0:0] -:logdrop-160 - [0:0] -:logdrop-161 - [0:0] -:logdrop-162 - [0:0] -:logdrop-163 - [0:0] -:logdrop-164 - [0:0] -:logdrop-165 - [0:0] -:logdrop-166 - [0:0] -:logdrop-167 - [0:0] -:logdrop-168 - [0:0] -:logdrop-169 - [0:0] -:logdrop-17 - [0:0] -:logdrop-170 - [0:0] -:logdrop-171 - [0:0] -:logdrop-172 - [0:0] -:logdrop-173 - [0:0] -:logdrop-174 - [0:0] -:logdrop-175 - [0:0] -:logdrop-176 - [0:0] -:logdrop-177 - [0:0] -:logdrop-178 - [0:0] -:logdrop-179 - [0:0] -:logdrop-18 - [0:0] -:logdrop-180 - [0:0] -:logdrop-181 - [0:0] -:logdrop-182 - [0:0] -:logdrop-183 - [0:0] -:logdrop-184 - [0:0] -:logdrop-185 - [0:0] -:logdrop-186 - [0:0] -:logdrop-187 - [0:0] -:logdrop-188 - [0:0] -:logdrop-189 - [0:0] -:logdrop-19 - [0:0] -:logdrop-190 - [0:0] -:logdrop-191 - [0:0] -:logdrop-192 - [0:0] -:logdrop-193 - [0:0] -:logdrop-194 - [0:0] -:logdrop-195 - [0:0] -:logdrop-196 - [0:0] -:logdrop-197 - [0:0] -:logdrop-198 - [0:0] -:logdrop-199 - [0:0] -:logdrop-2 - [0:0] -:logdrop-20 - [0:0] -:logdrop-200 - [0:0] -:logdrop-201 - [0:0] -:logdrop-202 - [0:0] -:logdrop-203 - [0:0] -:logdrop-204 - [0:0] -:logdrop-205 - [0:0] -:logdrop-206 - [0:0] -:logdrop-207 - [0:0] -:logdrop-208 - [0:0] -:logdrop-209 - [0:0] -:logdrop-21 - [0:0] -:logdrop-210 - [0:0] -:logdrop-211 - [0:0] -:logdrop-212 - [0:0] -:logdrop-213 - [0:0] -:logdrop-214 - [0:0] -:logdrop-215 - [0:0] -:logdrop-216 - [0:0] -:logdrop-217 - [0:0] -:logdrop-218 - [0:0] -:logdrop-219 - [0:0] -:logdrop-22 - [0:0] -:logdrop-220 - [0:0] -:logdrop-221 - [0:0] -:logdrop-222 - [0:0] -:logdrop-223 - [0:0] -:logdrop-224 - [0:0] -:logdrop-225 - [0:0] -:logdrop-226 - [0:0] -:logdrop-227 - [0:0] -:logdrop-228 - [0:0] -:logdrop-229 - [0:0] -:logdrop-23 - [0:0] -:logdrop-230 - [0:0] -:logdrop-231 - [0:0] -:logdrop-232 - [0:0] -:logdrop-233 - [0:0] -:logdrop-234 - [0:0] -:logdrop-235 - [0:0] -:logdrop-236 - [0:0] -:logdrop-237 - [0:0] -:logdrop-238 - [0:0] -:logdrop-239 - [0:0] -:logdrop-24 - [0:0] -:logdrop-240 - [0:0] -:logdrop-241 - [0:0] -:logdrop-242 - [0:0] -:logdrop-243 - [0:0] -:logdrop-244 - [0:0] -:logdrop-245 - [0:0] -:logdrop-246 - [0:0] -:logdrop-247 - [0:0] -:logdrop-248 - [0:0] -:logdrop-249 - [0:0] -:logdrop-25 - [0:0] -:logdrop-250 - [0:0] -:logdrop-251 - [0:0] -:logdrop-252 - [0:0] -:logdrop-253 - [0:0] -:logdrop-254 - [0:0] -:logdrop-255 - [0:0] -:logdrop-256 - [0:0] -:logdrop-257 - [0:0] -:logdrop-258 - [0:0] -:logdrop-259 - [0:0] -:logdrop-26 - [0:0] -:logdrop-260 - [0:0] -:logdrop-261 - [0:0] -:logdrop-262 - [0:0] -:logdrop-263 - [0:0] -:logdrop-264 - [0:0] -:logdrop-265 - [0:0] -:logdrop-266 - [0:0] -:logdrop-267 - [0:0] -:logdrop-268 - [0:0] -:logdrop-269 - [0:0] -:logdrop-27 - [0:0] -:logdrop-270 - [0:0] -:logdrop-271 - [0:0] -:logdrop-272 - [0:0] -:logdrop-273 - [0:0] -:logdrop-274 - [0:0] -:logdrop-275 - [0:0] -:logdrop-276 - [0:0] -:logdrop-277 - [0:0] -:logdrop-278 - [0:0] -:logdrop-279 - [0:0] -:logdrop-28 - [0:0] -:logdrop-280 - [0:0] -:logdrop-281 - [0:0] -:logdrop-282 - [0:0] -:logdrop-283 - [0:0] -:logdrop-284 - [0:0] -:logdrop-285 - [0:0] -:logdrop-286 - [0:0] -:logdrop-287 - [0:0] -:logdrop-288 - [0:0] -:logdrop-289 - [0:0] -:logdrop-29 - [0:0] -:logdrop-290 - [0:0] -:logdrop-291 - [0:0] -:logdrop-292 - [0:0] -:logdrop-293 - [0:0] -:logdrop-294 - [0:0] -:logdrop-295 - [0:0] -:logdrop-296 - [0:0] -:logdrop-297 - [0:0] -:logdrop-298 - [0:0] -:logdrop-299 - [0:0] -:logdrop-3 - [0:0] -:logdrop-30 - [0:0] -:logdrop-300 - [0:0] -:logdrop-301 - [0:0] -:logdrop-302 - [0:0] -:logdrop-303 - [0:0] -:logdrop-304 - [0:0] -:logdrop-305 - [0:0] -:logdrop-306 - [0:0] -:logdrop-307 - [0:0] -:logdrop-308 - [0:0] -:logdrop-309 - [0:0] -:logdrop-31 - [0:0] -:logdrop-310 - [0:0] -:logdrop-311 - [0:0] -:logdrop-312 - [0:0] -:logdrop-313 - [0:0] -:logdrop-314 - [0:0] -:logdrop-315 - [0:0] -:logdrop-316 - [0:0] -:logdrop-317 - [0:0] -:logdrop-318 - [0:0] -:logdrop-319 - [0:0] -:logdrop-32 - [0:0] -:logdrop-320 - [0:0] -:logdrop-321 - [0:0] -:logdrop-322 - [0:0] -:logdrop-323 - [0:0] -:logdrop-324 - [0:0] -:logdrop-325 - [0:0] -:logdrop-326 - [0:0] -:logdrop-327 - [0:0] -:logdrop-328 - [0:0] -:logdrop-329 - [0:0] -:logdrop-33 - [0:0] -:logdrop-330 - [0:0] -:logdrop-331 - [0:0] -:logdrop-332 - [0:0] -:logdrop-333 - [0:0] -:logdrop-334 - [0:0] -:logdrop-335 - [0:0] -:logdrop-336 - [0:0] -:logdrop-337 - [0:0] -:logdrop-338 - [0:0] -:logdrop-339 - [0:0] -:logdrop-34 - [0:0] -:logdrop-340 - [0:0] -:logdrop-341 - [0:0] -:logdrop-342 - [0:0] -:logdrop-343 - [0:0] -:logdrop-344 - [0:0] -:logdrop-345 - [0:0] -:logdrop-346 - [0:0] -:logdrop-347 - [0:0] -:logdrop-348 - [0:0] -:logdrop-349 - [0:0] -:logdrop-35 - [0:0] -:logdrop-350 - [0:0] -:logdrop-351 - [0:0] -:logdrop-352 - [0:0] -:logdrop-353 - [0:0] -:logdrop-354 - [0:0] -:logdrop-355 - [0:0] -:logdrop-356 - [0:0] -:logdrop-357 - [0:0] -:logdrop-358 - [0:0] -:logdrop-359 - [0:0] -:logdrop-36 - [0:0] -:logdrop-360 - [0:0] -:logdrop-361 - [0:0] -:logdrop-362 - [0:0] -:logdrop-363 - [0:0] -:logdrop-364 - [0:0] -:logdrop-365 - [0:0] -:logdrop-366 - [0:0] -:logdrop-367 - [0:0] -:logdrop-368 - [0:0] -:logdrop-369 - [0:0] -:logdrop-37 - [0:0] -:logdrop-370 - [0:0] -:logdrop-371 - [0:0] -:logdrop-372 - [0:0] -:logdrop-373 - [0:0] -:logdrop-374 - [0:0] -:logdrop-375 - [0:0] -:logdrop-376 - [0:0] -:logdrop-377 - [0:0] -:logdrop-378 - [0:0] -:logdrop-379 - [0:0] -:logdrop-38 - [0:0] -:logdrop-380 - [0:0] -:logdrop-381 - [0:0] -:logdrop-382 - [0:0] -:logdrop-383 - [0:0] -:logdrop-384 - [0:0] -:logdrop-385 - [0:0] -:logdrop-386 - [0:0] -:logdrop-387 - [0:0] -:logdrop-388 - [0:0] -:logdrop-389 - [0:0] -:logdrop-39 - [0:0] -:logdrop-390 - [0:0] -:logdrop-391 - [0:0] -:logdrop-392 - [0:0] -:logdrop-393 - [0:0] -:logdrop-394 - [0:0] -:logdrop-395 - [0:0] -:logdrop-396 - [0:0] -:logdrop-397 - [0:0] -:logdrop-398 - [0:0] -:logdrop-399 - [0:0] -:logdrop-4 - [0:0] -:logdrop-40 - [0:0] -:logdrop-400 - [0:0] -:logdrop-401 - [0:0] -:logdrop-402 - [0:0] -:logdrop-403 - [0:0] -:logdrop-404 - [0:0] -:logdrop-405 - [0:0] -:logdrop-406 - [0:0] -:logdrop-407 - [0:0] -:logdrop-408 - [0:0] -:logdrop-409 - [0:0] -:logdrop-41 - [0:0] -:logdrop-410 - [0:0] -:logdrop-411 - [0:0] -:logdrop-412 - [0:0] -:logdrop-413 - [0:0] -:logdrop-414 - [0:0] -:logdrop-415 - [0:0] -:logdrop-416 - [0:0] -:logdrop-417 - [0:0] -:logdrop-418 - [0:0] -:logdrop-419 - [0:0] -:logdrop-42 - [0:0] -:logdrop-420 - [0:0] -:logdrop-421 - [0:0] -:logdrop-422 - [0:0] -:logdrop-423 - [0:0] -:logdrop-424 - [0:0] -:logdrop-425 - [0:0] -:logdrop-426 - [0:0] -:logdrop-427 - [0:0] -:logdrop-428 - [0:0] -:logdrop-429 - [0:0] -:logdrop-43 - [0:0] -:logdrop-430 - [0:0] -:logdrop-431 - [0:0] -:logdrop-432 - [0:0] -:logdrop-433 - [0:0] -:logdrop-434 - [0:0] -:logdrop-435 - [0:0] -:logdrop-436 - [0:0] -:logdrop-437 - [0:0] -:logdrop-438 - [0:0] -:logdrop-439 - [0:0] -:logdrop-44 - [0:0] -:logdrop-440 - [0:0] -:logdrop-441 - [0:0] -:logdrop-442 - [0:0] -:logdrop-443 - [0:0] -:logdrop-444 - [0:0] -:logdrop-445 - [0:0] -:logdrop-446 - [0:0] -:logdrop-447 - [0:0] -:logdrop-448 - [0:0] -:logdrop-449 - [0:0] -:logdrop-45 - [0:0] -:logdrop-450 - [0:0] -:logdrop-451 - [0:0] -:logdrop-452 - [0:0] -:logdrop-453 - [0:0] -:logdrop-454 - [0:0] -:logdrop-455 - [0:0] -:logdrop-456 - [0:0] -:logdrop-457 - [0:0] -:logdrop-458 - [0:0] -:logdrop-46 - [0:0] -:logdrop-47 - [0:0] -:logdrop-48 - [0:0] -:logdrop-49 - [0:0] -:logdrop-5 - [0:0] -:logdrop-50 - [0:0] -:logdrop-51 - [0:0] -:logdrop-52 - [0:0] -:logdrop-53 - [0:0] -:logdrop-54 - [0:0] -:logdrop-55 - [0:0] -:logdrop-56 - [0:0] -:logdrop-57 - [0:0] -:logdrop-58 - [0:0] -:logdrop-59 - [0:0] -:logdrop-6 - [0:0] -:logdrop-60 - [0:0] -:logdrop-61 - [0:0] -:logdrop-62 - [0:0] -:logdrop-63 - [0:0] -:logdrop-64 - [0:0] -:logdrop-65 - [0:0] -:logdrop-66 - [0:0] -:logdrop-67 - [0:0] -:logdrop-68 - [0:0] -:logdrop-69 - [0:0] -:logdrop-7 - [0:0] -:logdrop-70 - [0:0] -:logdrop-71 - [0:0] -:logdrop-72 - [0:0] -:logdrop-73 - [0:0] -:logdrop-74 - [0:0] -:logdrop-75 - [0:0] -:logdrop-76 - [0:0] -:logdrop-77 - [0:0] -:logdrop-78 - [0:0] -:logdrop-79 - [0:0] -:logdrop-8 - [0:0] -:logdrop-80 - [0:0] -:logdrop-81 - [0:0] -:logdrop-82 - [0:0] -:logdrop-83 - [0:0] -:logdrop-84 - [0:0] -:logdrop-85 - [0:0] -:logdrop-86 - [0:0] -:logdrop-87 - [0:0] -:logdrop-88 - [0:0] -:logdrop-89 - [0:0] -:logdrop-9 - [0:0] -:logdrop-90 - [0:0] -:logdrop-91 - [0:0] -:logdrop-92 - [0:0] -:logdrop-93 - [0:0] -:logdrop-94 - [0:0] -:logdrop-95 - [0:0] -:logdrop-96 - [0:0] -:logdrop-97 - [0:0] -:logdrop-98 - [0:0] -:logdrop-99 - [0:0] -:logpass-0 - [0:0] -:logpass-16 - [0:0] -:logpass-30 - [0:0] -:logpass-37 - [0:0] -:logpass-50 - [0:0] -:logpass-9 - [0:0] -:logreject-0 - [0:0] -:logtarpit-0 - [0:0] -:tarpit - [0:0] --A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A FORWARD -j limit-1073 --A FORWARD -j limit-1072 --A FORWARD -j limit-1071 --A FORWARD -j limit-1070 --A FORWARD -j limit-1069 --A FORWARD -j limit-1068 --A FORWARD -j limit-1067 --A FORWARD -j limit-1066 --A FORWARD -j limit-1065 --A FORWARD -j limit-1064 --A FORWARD -j limit-1063 --A FORWARD -j limit-1062 --A FORWARD -j limit-1061 --A FORWARD -j limit-1060 --A FORWARD -j limit-1059 --A FORWARD -j limit-1058 --A FORWARD -j limit-1057 --A FORWARD -j limit-1056 --A FORWARD -j limit-1055 --A FORWARD -j limit-1054 --A FORWARD -j limit-1053 --A FORWARD -j limit-1052 --A FORWARD -j limit-1051 --A FORWARD -j limit-1050 --A FORWARD -j limit-1049 --A FORWARD -j limit-1048 --A FORWARD -j limit-1047 --A FORWARD -j limit-1046 --A FORWARD -j limit-1045 --A FORWARD -j limit-1044 --A FORWARD -j limit-1043 --A FORWARD -j limit-1042 --A FORWARD -j limit-1041 --A FORWARD -j limit-1040 --A FORWARD -j limit-1039 --A FORWARD -j limit-1038 --A FORWARD -j limit-1037 --A FORWARD -j limit-1036 --A FORWARD -j limit-1035 --A FORWARD -j limit-1034 --A FORWARD -j limit-1033 --A FORWARD -j limit-1032 --A FORWARD -j limit-1031 --A FORWARD -j limit-1030 --A FORWARD -j limit-1029 --A FORWARD -j limit-1028 --A FORWARD -j limit-1027 --A FORWARD -j limit-1026 --A FORWARD -j limit-1025 --A FORWARD -j limit-1024 --A FORWARD -j limit-1023 --A FORWARD -j limit-1022 --A FORWARD -j limit-1021 --A FORWARD -j limit-1020 --A FORWARD -j limit-1019 --A FORWARD -j limit-1018 --A FORWARD -j limit-1017 --A FORWARD -j limit-1016 --A FORWARD -j limit-1015 --A FORWARD -j limit-1014 --A FORWARD -j limit-1013 --A FORWARD -j limit-1012 --A FORWARD -j limit-1011 --A FORWARD -j limit-1010 --A FORWARD -j limit-1009 --A FORWARD -j limit-1008 --A FORWARD -j limit-1007 --A FORWARD -j limit-1006 --A FORWARD -j limit-1005 --A FORWARD -j limit-1004 --A FORWARD -j limit-1003 --A FORWARD -j limit-1002 --A FORWARD -j limit-1001 --A FORWARD -j limit-1000 --A FORWARD -j limit-999 --A FORWARD -j limit-998 --A FORWARD -j limit-997 --A FORWARD -j limit-996 --A FORWARD -j limit-995 --A FORWARD -j limit-994 --A FORWARD -j limit-993 --A FORWARD -j limit-992 --A FORWARD -j limit-991 --A FORWARD -j limit-990 --A FORWARD -j limit-989 --A FORWARD -j limit-988 --A FORWARD -j limit-987 --A FORWARD -j limit-986 --A FORWARD -j limit-985 --A FORWARD -j limit-984 --A FORWARD -j limit-983 --A FORWARD -j limit-982 --A FORWARD -j limit-981 --A FORWARD -j limit-980 --A FORWARD -j limit-979 --A FORWARD -j limit-978 --A FORWARD -j limit-977 --A FORWARD -j limit-976 --A FORWARD -j limit-975 --A FORWARD -j limit-974 --A FORWARD -j limit-973 --A FORWARD -j limit-972 --A FORWARD -j limit-971 --A FORWARD -j limit-970 --A FORWARD -j limit-969 --A FORWARD -j limit-968 --A FORWARD -j limit-967 --A FORWARD -j limit-966 --A FORWARD -j limit-965 --A FORWARD -j limit-964 --A FORWARD -j limit-963 --A FORWARD -j limit-962 --A FORWARD -j limit-961 --A FORWARD -j limit-960 --A FORWARD -j limit-959 --A FORWARD -j limit-958 --A FORWARD -j limit-957 --A FORWARD -j limit-956 --A FORWARD -j limit-955 --A FORWARD -j limit-954 --A FORWARD -j limit-953 --A FORWARD -j limit-952 --A FORWARD -j limit-951 --A FORWARD -j limit-950 --A FORWARD -j limit-949 --A FORWARD -j limit-948 --A FORWARD -j limit-947 --A FORWARD -j limit-946 --A FORWARD -j limit-945 --A FORWARD -j limit-944 --A FORWARD -j limit-943 --A FORWARD -j limit-942 --A FORWARD -j limit-941 --A FORWARD -j limit-940 --A FORWARD -j limit-939 --A FORWARD -j limit-938 --A FORWARD -j limit-937 --A FORWARD -j limit-936 --A FORWARD -j limit-935 --A FORWARD -j limit-934 --A FORWARD -j limit-933 --A FORWARD -j limit-932 --A FORWARD -j limit-931 --A FORWARD -j limit-930 --A FORWARD -j limit-929 --A FORWARD -j limit-928 --A FORWARD -j limit-927 --A FORWARD -j limit-926 --A FORWARD -j limit-925 --A FORWARD -j limit-924 --A FORWARD -j limit-923 --A FORWARD -j limit-922 --A FORWARD -j limit-921 --A FORWARD -j limit-920 --A FORWARD -j limit-919 --A FORWARD -j limit-918 --A FORWARD -j limit-917 --A FORWARD -j limit-916 --A FORWARD -j limit-915 --A FORWARD -j limit-914 --A FORWARD -j limit-913 --A FORWARD -j limit-912 --A FORWARD -j limit-911 --A FORWARD -j limit-910 --A FORWARD -j limit-909 --A FORWARD -j limit-908 --A FORWARD -j limit-907 --A FORWARD -j limit-906 --A FORWARD -j limit-905 --A FORWARD -j limit-904 --A FORWARD -j limit-903 --A FORWARD -j limit-902 --A FORWARD -j limit-901 --A FORWARD -j limit-900 --A FORWARD -j limit-899 --A FORWARD -j limit-898 --A FORWARD -j limit-897 --A FORWARD -j limit-896 --A FORWARD -j limit-895 --A FORWARD -j limit-894 --A FORWARD -j limit-893 --A FORWARD -j limit-892 --A FORWARD -j limit-891 --A FORWARD -j limit-890 --A FORWARD -j limit-889 --A FORWARD -j limit-888 --A FORWARD -j limit-887 --A FORWARD -j limit-886 --A FORWARD -j limit-885 --A FORWARD -j limit-884 --A FORWARD -j limit-883 --A FORWARD -j limit-882 --A FORWARD -j limit-881 --A FORWARD -j limit-880 --A FORWARD -j limit-879 --A FORWARD -j limit-878 --A FORWARD -j limit-877 --A FORWARD -j limit-876 --A FORWARD -j limit-875 --A FORWARD -j limit-874 --A FORWARD -j limit-873 --A FORWARD -j limit-872 --A FORWARD -j limit-871 --A FORWARD -j limit-870 --A FORWARD -j limit-869 --A FORWARD -j limit-868 --A FORWARD -j limit-867 --A FORWARD -j limit-866 --A FORWARD -j limit-865 --A FORWARD -j limit-864 --A FORWARD -j limit-863 --A FORWARD -j limit-862 --A FORWARD -j limit-861 --A FORWARD -j limit-860 --A FORWARD -j limit-859 --A FORWARD -j limit-858 --A FORWARD -j limit-857 --A FORWARD -j limit-856 --A FORWARD -j limit-855 --A FORWARD -j limit-854 --A FORWARD -j limit-853 --A FORWARD -j limit-852 --A FORWARD -j limit-851 --A FORWARD -j limit-850 --A FORWARD -j limit-849 --A FORWARD -j limit-848 --A FORWARD -j limit-847 --A FORWARD -j limit-846 --A FORWARD -j limit-845 --A FORWARD -j limit-844 --A FORWARD -j limit-843 --A FORWARD -j limit-842 --A FORWARD -j limit-841 --A FORWARD -j limit-840 --A FORWARD -j limit-839 --A FORWARD -j limit-838 --A FORWARD -j limit-837 --A FORWARD -j limit-836 --A FORWARD -j limit-835 --A FORWARD -j limit-834 --A FORWARD -j limit-833 --A FORWARD -j limit-832 --A FORWARD -j limit-831 --A FORWARD -j limit-830 --A FORWARD -j limit-829 --A FORWARD -j limit-828 --A FORWARD -j limit-827 --A FORWARD -j limit-826 --A FORWARD -j limit-825 --A FORWARD -j limit-824 --A FORWARD -j limit-823 --A FORWARD -j limit-822 --A FORWARD -j limit-821 --A FORWARD -j limit-820 --A FORWARD -j limit-819 --A FORWARD -j limit-818 --A FORWARD -j limit-817 --A FORWARD -j limit-816 --A FORWARD -j limit-815 --A FORWARD -j limit-814 --A FORWARD -j limit-813 --A FORWARD -j limit-812 --A FORWARD -j limit-811 --A FORWARD -j limit-810 --A FORWARD -j limit-809 --A FORWARD -j limit-808 --A FORWARD -j limit-807 --A FORWARD -j limit-806 --A FORWARD -j limit-805 --A FORWARD -j limit-804 --A FORWARD -j limit-803 --A FORWARD -j limit-802 --A FORWARD -j limit-801 --A FORWARD -j limit-800 --A FORWARD -j limit-799 --A FORWARD -j limit-798 --A FORWARD -j limit-797 --A FORWARD -j limit-796 --A FORWARD -j limit-795 --A FORWARD -j limit-794 --A FORWARD -j limit-793 --A FORWARD -j limit-792 --A FORWARD -j limit-791 --A FORWARD -j limit-790 --A FORWARD -j limit-789 --A FORWARD -j limit-788 --A FORWARD -j limit-787 --A FORWARD -j limit-786 --A FORWARD -j limit-785 --A FORWARD -j limit-784 --A FORWARD -j limit-783 --A FORWARD -j limit-782 --A FORWARD -j limit-781 --A FORWARD -j limit-780 --A FORWARD -j limit-779 --A FORWARD -j limit-778 --A FORWARD -j limit-777 --A FORWARD -j limit-776 --A FORWARD -j limit-775 --A FORWARD -j limit-774 --A FORWARD -j limit-773 --A FORWARD -j limit-772 --A FORWARD -j limit-771 --A FORWARD -j limit-770 --A FORWARD -j limit-769 --A FORWARD -j limit-768 --A FORWARD -j limit-767 --A FORWARD -j limit-766 --A FORWARD -j limit-765 --A FORWARD -j limit-764 --A FORWARD -j limit-763 --A FORWARD -j limit-762 --A FORWARD -j limit-761 --A FORWARD -j limit-760 --A FORWARD -j limit-759 --A FORWARD -j limit-758 --A FORWARD -j limit-757 --A FORWARD -j limit-756 --A FORWARD -j limit-755 --A FORWARD -j limit-754 --A FORWARD -j limit-753 --A FORWARD -j limit-752 --A FORWARD -j limit-751 --A FORWARD -j limit-750 --A FORWARD -j limit-749 --A FORWARD -j limit-748 --A FORWARD -j limit-747 --A FORWARD -j limit-746 --A FORWARD -j limit-745 --A FORWARD -j limit-744 --A FORWARD -j limit-743 --A FORWARD -j limit-742 --A FORWARD -j limit-741 --A FORWARD -j limit-740 --A FORWARD -j limit-739 --A FORWARD -j limit-738 --A FORWARD -j limit-737 --A FORWARD -j limit-736 --A FORWARD -j limit-735 --A FORWARD -j limit-734 --A FORWARD -j limit-733 --A FORWARD -j limit-732 --A FORWARD -j limit-731 --A FORWARD -j limit-730 --A FORWARD -j limit-729 --A FORWARD -j limit-728 --A FORWARD -j limit-727 --A FORWARD -j limit-726 --A FORWARD -j limit-725 --A FORWARD -j limit-724 --A FORWARD -j limit-723 --A FORWARD -j limit-722 --A FORWARD -j limit-721 --A FORWARD -j limit-720 --A FORWARD -j limit-719 --A FORWARD -j limit-718 --A FORWARD -j limit-717 --A FORWARD -j limit-716 --A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD --A FORWARD -j logaccept-0 --A FORWARD -j logpass-0 --A FORWARD -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -o eth1 -d fc00::/7 --A FORWARD -o eth1 -d fc00::/7 -j logaccept-9 --A FORWARD -o eth1 -d fc00::/7 -j logpass-9 --A FORWARD -i eth0 -j ACCEPT --A FORWARD -i eth0 --A FORWARD -i eth0 -j logaccept-18 --A FORWARD -i eth0 -j logpass-16 --A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d fc00::/7 --A FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 --A FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG --A FORWARD -i eth1 -s fc00::/7 -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 --A FORWARD -i eth1 -s fc00::/7 -j logaccept-36 --A FORWARD -i eth1 -s fc00::/7 -j logpass-30 --A FORWARD -i eth1 -s fc00::/7 -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 --A FORWARD -i eth1 -s fc00::/7 -j logaccept-45 --A FORWARD -i eth1 -s fc00::/7 -j logpass-37 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logdrop-0 --A FORWARD --A FORWARD -j logreject-0 --A FORWARD -j logtarpit-0 --A FORWARD -o eth1 -d fc00::/7 -j limit-0 --A FORWARD -o eth1 -d fc00::/7 -j limit-1 --A FORWARD -o eth1 -d fc00::/7 -j limit-2 --A FORWARD -o eth1 -d fc00::/7 -j limit-3 --A FORWARD -o eth1 -d fc00::/7 -j limit-4 --A FORWARD -o eth1 -d fc00::/7 -j limit-5 --A FORWARD -o eth1 -d fc00::/7 -j limit-6 --A FORWARD -o eth1 -d fc00::/7 -j limit-7 --A FORWARD -o eth1 -d fc00::/7 -j limit-8 --A FORWARD -o eth1 -d fc00::/7 -j limit-9 --A FORWARD -o eth1 -d fc00::/7 -j limit-10 --A FORWARD -o eth1 -d fc00::/7 -j limit-11 --A FORWARD -o eth1 -d fc00::/7 -j limit-12 --A FORWARD -o eth1 -d fc00::/7 -j limit-13 --A FORWARD -o eth1 -d fc00::/7 -j limit-14 --A FORWARD -o eth1 -d fc00::/7 -j limit-15 --A FORWARD -o eth1 -d fc00::/7 -j limit-16 --A FORWARD -o eth1 -d fc00::/7 -j limit-17 --A FORWARD -o eth1 -d fc00::/7 -j limit-18 --A FORWARD -o eth1 -d fc00::/7 -j limit-19 --A FORWARD -o eth1 -d fc00::/7 -j limit-20 --A FORWARD -o eth1 -d fc00::/7 -j limit-21 --A FORWARD -o eth1 -d fc00::/7 -j limit-22 --A FORWARD -o eth1 -d fc00::/7 -j limit-23 --A FORWARD -o eth1 -d fc00::/7 -j limit-24 --A FORWARD -o eth1 -d fc00::/7 -j limit-25 --A FORWARD -o eth1 -d fc00::/7 -j limit-26 --A FORWARD -o eth1 -d fc00::/7 -j limit-27 --A FORWARD -o eth1 -d fc00::/7 -j limit-28 --A FORWARD -o eth1 -d fc00::/7 -j limit-29 --A FORWARD -o eth1 -d fc00::/7 -j limit-30 --A FORWARD -o eth1 -d fc00::/7 -j limit-31 --A FORWARD -o eth1 -d fc00::/7 -j limit-32 --A FORWARD -o eth1 -d fc00::/7 -j limit-33 --A FORWARD -o eth1 -d fc00::/7 -j limit-34 --A FORWARD -o eth1 -d fc00::/7 -j limit-35 --A FORWARD -o eth1 -d fc00::/7 -j limit-36 --A FORWARD -o eth1 -d fc00::/7 -j limit-37 --A FORWARD -o eth1 -d fc00::/7 -j limit-38 --A FORWARD -o eth1 -d fc00::/7 -j limit-39 --A FORWARD -o eth1 -d fc00::/7 -j limit-40 --A FORWARD -o eth1 -d fc00::/7 -j limit-41 --A FORWARD -o eth1 -d fc00::/7 -j limit-42 --A FORWARD -o eth1 -d fc00::/7 -j limit-43 --A FORWARD -o eth1 -d fc00::/7 -j limit-44 --A FORWARD -o eth1 -d fc00::/7 -j limit-45 --A FORWARD -o eth1 -d fc00::/7 -j limit-46 --A FORWARD -o eth1 -d fc00::/7 -j limit-47 --A FORWARD -o eth1 -d fc00::/7 -j limit-48 --A FORWARD -o eth1 -d fc00::/7 -j limit-49 --A FORWARD -o eth1 -d fc00::/7 -j limit-50 --A FORWARD -o eth1 -d fc00::/7 -j limit-51 --A FORWARD -o eth1 -d fc00::/7 -j limit-52 --A FORWARD -o eth1 -d fc00::/7 -j limit-53 --A FORWARD -o eth1 -d fc00::/7 -j limit-54 --A FORWARD -o eth1 -d fc00::/7 -j limit-55 --A FORWARD -o eth1 -d fc00::/7 -j limit-56 --A FORWARD -o eth1 -d fc00::/7 -j limit-57 --A FORWARD -o eth1 -d fc00::/7 -j limit-58 --A FORWARD -o eth1 -d fc00::/7 -j limit-59 --A FORWARD -o eth1 -d fc00::/7 -j limit-60 --A FORWARD -o eth1 -d fc00::/7 -j limit-61 --A FORWARD -o eth1 -d fc00::/7 -j limit-62 --A FORWARD -o eth1 -d fc00::/7 -j limit-63 --A FORWARD -o eth1 -d fc00::/7 -j limit-64 --A FORWARD -o eth1 -d fc00::/7 -j limit-65 --A FORWARD -o eth1 -d fc00::/7 -j limit-66 --A FORWARD -o eth1 -d fc00::/7 -j limit-67 --A FORWARD -o eth1 -d fc00::/7 -j limit-68 --A FORWARD -o eth1 -d fc00::/7 -j limit-69 --A FORWARD -o eth1 -d fc00::/7 -j limit-70 --A FORWARD -o eth1 -d fc00::/7 -j limit-71 --A FORWARD -o eth1 -d fc00::/7 -j limit-72 --A FORWARD -o eth1 -d fc00::/7 -j limit-73 --A FORWARD -o eth1 -d fc00::/7 -j limit-74 --A FORWARD -o eth1 -d fc00::/7 -j limit-75 --A FORWARD -o eth1 -d fc00::/7 -j limit-76 --A FORWARD -o eth1 -d fc00::/7 -j limit-77 --A FORWARD -o eth1 -d fc00::/7 -j limit-78 --A FORWARD -o eth1 -d fc00::/7 -j limit-79 --A FORWARD -o eth1 -d fc00::/7 -j limit-80 --A FORWARD -o eth1 -d fc00::/7 -j limit-81 --A FORWARD -o eth1 -d fc00::/7 -j limit-82 --A FORWARD -o eth1 -d fc00::/7 -j limit-83 --A FORWARD -o eth1 -d fc00::/7 -j limit-84 --A FORWARD -o eth1 -d fc00::/7 -j limit-85 --A FORWARD -o eth1 -d fc00::/7 -j limit-86 --A FORWARD -o eth1 -d fc00::/7 -j limit-87 --A FORWARD -o eth1 -d fc00::/7 -j limit-88 --A FORWARD -o eth1 -d fc00::/7 -j limit-89 --A FORWARD -o eth1 -d fc00::/7 -j limit-90 --A FORWARD -o eth1 -d fc00::/7 -j limit-91 --A FORWARD -o eth1 -d fc00::/7 -j limit-92 --A FORWARD -o eth1 -d fc00::/7 -j limit-93 --A FORWARD -o eth1 -d fc00::/7 -j limit-94 --A FORWARD -o eth1 -d fc00::/7 -j limit-95 --A FORWARD -o eth1 -d fc00::/7 -j limit-96 --A FORWARD -o eth1 -d fc00::/7 -j limit-97 --A FORWARD -o eth1 -d fc00::/7 -j limit-98 --A FORWARD -o eth1 -d fc00::/7 -j limit-99 --A FORWARD -o eth1 -d fc00::/7 -j limit-100 --A FORWARD -o eth1 -d fc00::/7 -j limit-101 --A FORWARD -o eth1 -d fc00::/7 -j limit-102 --A FORWARD -o eth1 -d fc00::/7 -j limit-103 --A FORWARD -o eth1 -d fc00::/7 -j limit-104 --A FORWARD -o eth1 -d fc00::/7 -j limit-105 --A FORWARD -o eth1 -d fc00::/7 -j limit-106 --A FORWARD -o eth1 -d fc00::/7 -j limit-107 --A FORWARD -o eth1 -d fc00::/7 -j limit-108 --A FORWARD -o eth1 -d fc00::/7 -j limit-109 --A FORWARD -o eth1 -d fc00::/7 -j limit-110 --A FORWARD -o eth1 -d fc00::/7 -j limit-111 --A FORWARD -o eth1 -d fc00::/7 -j limit-112 --A FORWARD -o eth1 -d fc00::/7 -j limit-113 --A FORWARD -o eth1 -d fc00::/7 -j limit-114 --A FORWARD -o eth1 -d fc00::/7 -j limit-115 --A FORWARD -o eth1 -d fc00::/7 -j limit-116 --A FORWARD -o eth1 -d fc00::/7 -j limit-117 --A FORWARD -o eth1 -d fc00::/7 -j limit-118 --A FORWARD -o eth1 -d fc00::/7 -j limit-119 --A FORWARD -o eth1 -d fc00::/7 -j limit-120 --A FORWARD -o eth1 -d fc00::/7 -j limit-121 --A FORWARD -o eth1 -d fc00::/7 -j limit-122 --A FORWARD -o eth1 -d fc00::/7 -j limit-123 --A FORWARD -o eth1 -d fc00::/7 -j limit-124 --A FORWARD -o eth1 -d fc00::/7 -j limit-125 --A FORWARD -o eth1 -d fc00::/7 -j limit-126 --A FORWARD -o eth1 -d fc00::/7 -j limit-127 --A FORWARD -o eth1 -d fc00::/7 -j limit-128 --A FORWARD -o eth1 -d fc00::/7 -j limit-129 --A FORWARD -o eth1 -d fc00::/7 -j limit-130 --A FORWARD -o eth1 -d fc00::/7 -j limit-131 --A FORWARD -o eth1 -d fc00::/7 -j limit-132 --A FORWARD -o eth1 -d fc00::/7 -j limit-133 --A FORWARD -o eth1 -d fc00::/7 -j limit-134 --A FORWARD -o eth1 -d fc00::/7 -j limit-135 --A FORWARD -o eth1 -d fc00::/7 -j limit-136 --A FORWARD -o eth1 -d fc00::/7 -j limit-137 --A FORWARD -o eth1 -d fc00::/7 -j limit-138 --A FORWARD -o eth1 -d fc00::/7 -j limit-139 --A FORWARD -o eth1 -d fc00::/7 -j limit-140 --A FORWARD -o eth1 -d fc00::/7 -j limit-141 --A FORWARD -o eth1 -d fc00::/7 -j limit-142 --A FORWARD -o eth1 -d fc00::/7 -j limit-143 --A FORWARD -o eth1 -d fc00::/7 -j limit-144 --A FORWARD -o eth1 -d fc00::/7 -j limit-145 --A FORWARD -o eth1 -d fc00::/7 -j limit-146 --A FORWARD -o eth1 -d fc00::/7 -j limit-147 --A FORWARD -o eth1 -d fc00::/7 -j limit-148 --A FORWARD -o eth1 -d fc00::/7 -j limit-149 --A FORWARD -o eth1 -d fc00::/7 -j limit-150 --A FORWARD -o eth1 -d fc00::/7 -j limit-151 --A FORWARD -o eth1 -d fc00::/7 -j limit-152 --A FORWARD -o eth1 -d fc00::/7 -j limit-153 --A FORWARD -o eth1 -d fc00::/7 -j limit-154 --A FORWARD -o eth1 -d fc00::/7 -j limit-155 --A FORWARD -o eth1 -d fc00::/7 -j limit-156 --A FORWARD -o eth1 -d fc00::/7 -j limit-157 --A FORWARD -o eth1 -d fc00::/7 -j limit-158 --A FORWARD -o eth1 -d fc00::/7 -j limit-159 --A FORWARD -o eth1 -d fc00::/7 -j limit-160 --A FORWARD -o eth1 -d fc00::/7 -j limit-161 --A FORWARD -o eth1 -d fc00::/7 -j limit-162 --A FORWARD -o eth1 -d fc00::/7 -j limit-163 --A FORWARD -o eth1 -d fc00::/7 -j limit-164 --A FORWARD -o eth1 -d fc00::/7 -j limit-165 --A FORWARD -o eth1 -d fc00::/7 -j limit-166 --A FORWARD -o eth1 -d fc00::/7 -j limit-167 --A FORWARD -o eth1 -d fc00::/7 -j limit-168 --A FORWARD -o eth1 -d fc00::/7 -j limit-169 --A FORWARD -o eth1 -d fc00::/7 -j limit-170 --A FORWARD -o eth1 -d fc00::/7 -j limit-171 --A FORWARD -o eth1 -d fc00::/7 -j limit-172 --A FORWARD -o eth1 -d fc00::/7 -j limit-173 --A FORWARD -o eth1 -d fc00::/7 -j limit-174 --A FORWARD -o eth1 -d fc00::/7 -j limit-175 --A FORWARD -o eth1 -d fc00::/7 -j limit-176 --A FORWARD -o eth1 -d fc00::/7 -j limit-177 --A FORWARD -o eth1 -d fc00::/7 -j limit-178 --A FORWARD -o eth1 -d fc00::/7 -j limit-179 --A FORWARD -o eth1 -d fc00::/7 -j limit-180 --A FORWARD -o eth1 -d fc00::/7 -j limit-181 --A FORWARD -o eth1 -d fc00::/7 -j limit-182 --A FORWARD -o eth1 -d fc00::/7 -j limit-183 --A FORWARD -o eth1 -d fc00::/7 -j limit-184 --A FORWARD -o eth1 -d fc00::/7 -j limit-185 --A FORWARD -o eth1 -d fc00::/7 -j limit-186 --A FORWARD -o eth1 -d fc00::/7 -j limit-187 --A FORWARD -o eth1 -d fc00::/7 -j limit-188 --A FORWARD -o eth1 -d fc00::/7 -j limit-189 --A FORWARD -o eth1 -d fc00::/7 -j limit-190 --A FORWARD -o eth1 -d fc00::/7 -j limit-191 --A FORWARD -o eth1 -d fc00::/7 -j limit-192 --A FORWARD -o eth1 -d fc00::/7 -j limit-193 --A FORWARD -o eth1 -d fc00::/7 -j limit-194 --A FORWARD -o eth1 -d fc00::/7 -j limit-195 --A FORWARD -o eth1 -d fc00::/7 -j limit-196 --A FORWARD -o eth1 -d fc00::/7 -j limit-197 --A FORWARD -o eth1 -d fc00::/7 -j limit-198 --A FORWARD -o eth1 -d fc00::/7 -j limit-199 --A FORWARD -o eth1 -d fc00::/7 -j limit-200 --A FORWARD -o eth1 -d fc00::/7 -j limit-201 --A FORWARD -o eth1 -d fc00::/7 -j limit-202 --A FORWARD -o eth1 -d fc00::/7 -j limit-203 --A FORWARD -o eth1 -d fc00::/7 -j limit-204 --A FORWARD -o eth1 -d fc00::/7 -j limit-205 --A FORWARD -o eth1 -d fc00::/7 -j limit-206 --A FORWARD -o eth1 -d fc00::/7 -j limit-207 --A FORWARD -o eth1 -d fc00::/7 -j limit-208 --A FORWARD -o eth1 -d fc00::/7 -j limit-209 --A FORWARD -o eth1 -d fc00::/7 -j limit-210 --A FORWARD -o eth1 -d fc00::/7 -j limit-211 --A FORWARD -o eth1 -d fc00::/7 -j limit-212 --A FORWARD -o eth1 -d fc00::/7 -j limit-213 --A FORWARD -o eth1 -d fc00::/7 -j limit-214 --A FORWARD -o eth1 -d fc00::/7 -j limit-215 --A FORWARD -o eth1 -d fc00::/7 -j limit-216 --A FORWARD -o eth1 -d fc00::/7 -j limit-217 --A FORWARD -o eth1 -d fc00::/7 -j limit-218 --A FORWARD -o eth1 -d fc00::/7 -j limit-219 --A FORWARD -o eth1 -d fc00::/7 -j limit-220 --A FORWARD -o eth1 -d fc00::/7 -j limit-221 --A FORWARD -o eth1 -d fc00::/7 -j limit-222 --A FORWARD -o eth1 -d fc00::/7 -j limit-223 --A FORWARD -o eth1 -d fc00::/7 -j limit-224 --A FORWARD -o eth1 -d fc00::/7 -j limit-225 --A FORWARD -o eth1 -d fc00::/7 -j limit-226 --A FORWARD -o eth1 -d fc00::/7 -j limit-227 --A FORWARD -o eth1 -d fc00::/7 -j limit-228 --A FORWARD -o eth1 -d fc00::/7 -j limit-229 --A FORWARD -o eth1 -d fc00::/7 -j limit-230 --A FORWARD -o eth1 -d fc00::/7 -j limit-231 --A FORWARD -o eth1 -d fc00::/7 -j limit-232 --A FORWARD -o eth1 -d fc00::/7 -j limit-233 --A FORWARD -o eth1 -d fc00::/7 -j limit-234 --A FORWARD -o eth1 -d fc00::/7 -j limit-235 --A FORWARD -o eth1 -d fc00::/7 -j limit-236 --A FORWARD -o eth1 -d fc00::/7 -j limit-237 --A FORWARD -o eth1 -d fc00::/7 -j limit-238 --A FORWARD -o eth1 -d fc00::/7 -j limit-239 --A FORWARD -o eth1 -d fc00::/7 -j limit-240 --A FORWARD -o eth1 -d fc00::/7 -j limit-241 --A FORWARD -o eth1 -d fc00::/7 -j limit-242 --A FORWARD -o eth1 -d fc00::/7 -j limit-243 --A FORWARD -o eth1 -d fc00::/7 -j limit-244 --A FORWARD -o eth1 -d fc00::/7 -j limit-245 --A FORWARD -o eth1 -d fc00::/7 -j limit-246 --A FORWARD -o eth1 -d fc00::/7 -j limit-247 --A FORWARD -o eth1 -d fc00::/7 -j limit-248 --A FORWARD -o eth1 -d fc00::/7 -j limit-249 --A FORWARD -o eth1 -d fc00::/7 -j limit-250 --A FORWARD -o eth1 -d fc00::/7 -j limit-251 --A FORWARD -o eth1 -d fc00::/7 -j limit-252 --A FORWARD -o eth1 -d fc00::/7 -j limit-253 --A FORWARD -o eth1 -d fc00::/7 -j limit-254 --A FORWARD -o eth1 -d fc00::/7 -j limit-255 --A FORWARD -o eth1 -d fc00::/7 -j limit-256 --A FORWARD -o eth1 -d fc00::/7 -j limit-257 --A FORWARD -o eth1 -d fc00::/7 -j limit-258 --A FORWARD -o eth1 -d fc00::/7 -j limit-259 --A FORWARD -o eth1 -d fc00::/7 -j limit-260 --A FORWARD -o eth1 -d fc00::/7 -j limit-261 --A FORWARD -o eth1 -d fc00::/7 -j limit-262 --A FORWARD -o eth1 -d fc00::/7 -j limit-263 --A FORWARD -o eth1 -d fc00::/7 -j limit-264 --A FORWARD -o eth1 -d fc00::/7 -j limit-265 --A FORWARD -o eth1 -d fc00::/7 -j limit-266 --A FORWARD -o eth1 -d fc00::/7 -j limit-267 --A FORWARD -o eth1 -d fc00::/7 -j limit-268 --A FORWARD -o eth1 -d fc00::/7 -j limit-269 --A FORWARD -o eth1 -d fc00::/7 -j limit-270 --A FORWARD -o eth1 -d fc00::/7 -j limit-271 --A FORWARD -o eth1 -d fc00::/7 -j limit-272 --A FORWARD -o eth1 -d fc00::/7 -j limit-273 --A FORWARD -o eth1 -d fc00::/7 -j limit-274 --A FORWARD -o eth1 -d fc00::/7 -j limit-275 --A FORWARD -o eth1 -d fc00::/7 -j limit-276 --A FORWARD -o eth1 -d fc00::/7 -j limit-277 --A FORWARD -o eth1 -d fc00::/7 -j limit-278 --A FORWARD -o eth1 -d fc00::/7 -j limit-279 --A FORWARD -o eth1 -d fc00::/7 -j limit-280 --A FORWARD -o eth1 -d fc00::/7 -j limit-281 --A FORWARD -o eth1 -d fc00::/7 -j limit-282 --A FORWARD -o eth1 -d fc00::/7 -j limit-283 --A FORWARD -o eth1 -d fc00::/7 -j limit-284 --A FORWARD -o eth1 -d fc00::/7 -j limit-285 --A FORWARD -o eth1 -d fc00::/7 -j limit-286 --A FORWARD -o eth1 -d fc00::/7 -j limit-287 --A FORWARD -o eth1 -d fc00::/7 -j limit-288 --A FORWARD -o eth1 -d fc00::/7 -j limit-289 --A FORWARD -o eth1 -d fc00::/7 -j limit-290 --A FORWARD -o eth1 -d fc00::/7 -j limit-291 --A FORWARD -o eth1 -d fc00::/7 -j limit-292 --A FORWARD -o eth1 -d fc00::/7 -j limit-293 --A FORWARD -o eth1 -d fc00::/7 -j limit-294 --A FORWARD -o eth1 -d fc00::/7 -j limit-295 --A FORWARD -o eth1 -d fc00::/7 -j limit-296 --A FORWARD -o eth1 -d fc00::/7 -j limit-297 --A FORWARD -o eth1 -d fc00::/7 -j limit-298 --A FORWARD -o eth1 -d fc00::/7 -j limit-299 --A FORWARD -o eth1 -d fc00::/7 -j limit-300 --A FORWARD -o eth1 -d fc00::/7 -j limit-301 --A FORWARD -o eth1 -d fc00::/7 -j limit-302 --A FORWARD -o eth1 -d fc00::/7 -j limit-303 --A FORWARD -o eth1 -d fc00::/7 -j limit-304 --A FORWARD -o eth1 -d fc00::/7 -j limit-305 --A FORWARD -o eth1 -d fc00::/7 -j limit-306 --A FORWARD -o eth1 -d fc00::/7 -j limit-307 --A FORWARD -o eth1 -d fc00::/7 -j limit-308 --A FORWARD -o eth1 -d fc00::/7 -j limit-309 --A FORWARD -o eth1 -d fc00::/7 -j limit-310 --A FORWARD -o eth1 -d fc00::/7 -j limit-311 --A FORWARD -o eth1 -d fc00::/7 -j limit-312 --A FORWARD -o eth1 -d fc00::/7 -j limit-313 --A FORWARD -o eth1 -d fc00::/7 -j limit-314 --A FORWARD -o eth1 -d fc00::/7 -j limit-315 --A FORWARD -o eth1 -d fc00::/7 -j limit-316 --A FORWARD -o eth1 -d fc00::/7 -j limit-317 --A FORWARD -o eth1 -d fc00::/7 -j limit-318 --A FORWARD -o eth1 -d fc00::/7 -j limit-319 --A FORWARD -o eth1 -d fc00::/7 -j limit-320 --A FORWARD -o eth1 -d fc00::/7 -j limit-321 --A FORWARD -o eth1 -d fc00::/7 -j limit-322 --A FORWARD -o eth1 -d fc00::/7 -j limit-323 --A FORWARD -o eth1 -d fc00::/7 -j limit-324 --A FORWARD -o eth1 -d fc00::/7 -j limit-325 --A FORWARD -o eth1 -d fc00::/7 -j limit-326 --A FORWARD -o eth1 -d fc00::/7 -j limit-327 --A FORWARD -o eth1 -d fc00::/7 -j limit-328 --A FORWARD -o eth1 -d fc00::/7 -j limit-329 --A FORWARD -o eth1 -d fc00::/7 -j limit-330 --A FORWARD -o eth1 -d fc00::/7 -j limit-331 --A FORWARD -o eth1 -d fc00::/7 -j limit-332 --A FORWARD -o eth1 -d fc00::/7 -j limit-333 --A FORWARD -o eth1 -d fc00::/7 -j limit-334 --A FORWARD -o eth1 -d fc00::/7 -j limit-335 --A FORWARD -o eth1 -d fc00::/7 -j limit-336 --A FORWARD -o eth1 -d fc00::/7 -j limit-337 --A FORWARD -o eth1 -d fc00::/7 -j limit-338 --A FORWARD -o eth1 -d fc00::/7 -j limit-339 --A FORWARD -o eth1 -d fc00::/7 -j limit-340 --A FORWARD -o eth1 -d fc00::/7 -j limit-341 --A FORWARD -o eth1 -d fc00::/7 -j limit-342 --A FORWARD -o eth1 -d fc00::/7 -j limit-343 --A FORWARD -o eth1 -d fc00::/7 -j limit-344 --A FORWARD -o eth1 -d fc00::/7 -j limit-345 --A FORWARD -o eth1 -d fc00::/7 -j limit-346 --A FORWARD -o eth1 -d fc00::/7 -j limit-347 --A FORWARD -o eth1 -d fc00::/7 -j limit-348 --A FORWARD -o eth1 -d fc00::/7 -j limit-349 --A FORWARD -o eth1 -d fc00::/7 -j limit-350 --A FORWARD -o eth1 -d fc00::/7 -j limit-351 --A FORWARD -o eth1 -d fc00::/7 -j limit-352 --A FORWARD -o eth1 -d fc00::/7 -j limit-353 --A FORWARD -o eth1 -d fc00::/7 -j limit-354 --A FORWARD -o eth1 -d fc00::/7 -j limit-355 --A FORWARD -o eth1 -d fc00::/7 -j limit-356 --A FORWARD -o eth1 -d fc00::/7 -j limit-357 --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-0 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-1 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-2 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-3 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-4 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-5 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-6 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-7 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-8 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-9 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-10 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-11 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-12 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-13 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-14 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-15 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-16 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-17 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-18 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-19 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-20 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-21 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-22 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-23 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-24 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-25 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-26 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-27 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-28 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-29 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-30 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-31 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-32 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-33 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-34 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-35 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-36 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-37 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-38 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-39 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-40 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-41 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-42 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-43 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-44 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-45 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-46 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-47 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-48 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-49 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-50 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-51 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-52 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-53 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-54 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-55 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-56 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-57 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-58 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-59 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-60 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-61 --A FORWARD -j ACCEPT --A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A FORWARD -m recent --name user:C --rsource --mask fe00:: --set --A FORWARD -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set --A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A FORWARD -j ACCEPT --A FORWARD -j logdrop-457 --A FORWARD --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD --A FORWARD -j logaccept-84 --A FORWARD -j logdrop-458 --A FORWARD -j logpass-50 --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD --A FORWARD -i eth0 -j ACCEPT --A FORWARD -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -i eth0 -o eth4 -j ACCEPT --A FORWARD -i eth0 -o eth5 -j ACCEPT --A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth4 -o eth0 -j ACCEPT --A FORWARD -i eth5 -o eth0 -j ACCEPT --A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -i eth4 -o eth4 -j ACCEPT --A FORWARD -i eth4 -o eth5 -j ACCEPT --A FORWARD -i eth5 -o eth4 -j ACCEPT --A FORWARD -i eth5 -o eth5 -j ACCEPT --A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -p icmpv6 -j icmp-routing --A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -j limit-1073 --A INPUT -j limit-1072 --A INPUT -j limit-1071 --A INPUT -j limit-1070 --A INPUT -j limit-1069 --A INPUT -j limit-1068 --A INPUT -j limit-1067 --A INPUT -j limit-1066 --A INPUT -j limit-1065 --A INPUT -j limit-1064 --A INPUT -j limit-1063 --A INPUT -j limit-1062 --A INPUT -j limit-1061 --A INPUT -j limit-1060 --A INPUT -j limit-1059 --A INPUT -j limit-1058 --A INPUT -j limit-1057 --A INPUT -j limit-1056 --A INPUT -j limit-1055 --A INPUT -j limit-1054 --A INPUT -j limit-1053 --A INPUT -j limit-1052 --A INPUT -j limit-1051 --A INPUT -j limit-1050 --A INPUT -j limit-1049 --A INPUT -j limit-1048 --A INPUT -j limit-1047 --A INPUT -j limit-1046 --A INPUT -j limit-1045 --A INPUT -j limit-1044 --A INPUT -j limit-1043 --A INPUT -j limit-1042 --A INPUT -j limit-1041 --A INPUT -j limit-1040 --A INPUT -j limit-1039 --A INPUT -j limit-1038 --A INPUT -j limit-1037 --A INPUT -j limit-1036 --A INPUT -j limit-1035 --A INPUT -j limit-1034 --A INPUT -j limit-1033 --A INPUT -j limit-1032 --A INPUT -j limit-1031 --A INPUT -j limit-1030 --A INPUT -j limit-1029 --A INPUT -j limit-1028 --A INPUT -j limit-1027 --A INPUT -j limit-1026 --A INPUT -j limit-1025 --A INPUT -j limit-1024 --A INPUT -j limit-1023 --A INPUT -j limit-1022 --A INPUT -j limit-1021 --A INPUT -j limit-1020 --A INPUT -j limit-1019 --A INPUT -j limit-1018 --A INPUT -j limit-1017 --A INPUT -j limit-1016 --A INPUT -j limit-1015 --A INPUT -j limit-1014 --A INPUT -j limit-1013 --A INPUT -j limit-1012 --A INPUT -j limit-1011 --A INPUT -j limit-1010 --A INPUT -j limit-1009 --A INPUT -j limit-1008 --A INPUT -j limit-1007 --A INPUT -j limit-1006 --A INPUT -j limit-1005 --A INPUT -j limit-1004 --A INPUT -j limit-1003 --A INPUT -j limit-1002 --A INPUT -j limit-1001 --A INPUT -j limit-1000 --A INPUT -j limit-999 --A INPUT -j limit-998 --A INPUT -j limit-997 --A INPUT -j limit-996 --A INPUT -j limit-995 --A INPUT -j limit-994 --A INPUT -j limit-993 --A INPUT -j limit-992 --A INPUT -j limit-991 --A INPUT -j limit-990 --A INPUT -j limit-989 --A INPUT -j limit-988 --A INPUT -j limit-987 --A INPUT -j limit-986 --A INPUT -j limit-985 --A INPUT -j limit-984 --A INPUT -j limit-983 --A INPUT -j limit-982 --A INPUT -j limit-981 --A INPUT -j limit-980 --A INPUT -j limit-979 --A INPUT -j limit-978 --A INPUT -j limit-977 --A INPUT -j limit-976 --A INPUT -j limit-975 --A INPUT -j limit-974 --A INPUT -j limit-973 --A INPUT -j limit-972 --A INPUT -j limit-971 --A INPUT -j limit-970 --A INPUT -j limit-969 --A INPUT -j limit-968 --A INPUT -j limit-967 --A INPUT -j limit-966 --A INPUT -j limit-965 --A INPUT -j limit-964 --A INPUT -j limit-963 --A INPUT -j limit-962 --A INPUT -j limit-961 --A INPUT -j limit-960 --A INPUT -j limit-959 --A INPUT -j limit-958 --A INPUT -j limit-957 --A INPUT -j limit-956 --A INPUT -j limit-955 --A INPUT -j limit-954 --A INPUT -j limit-953 --A INPUT -j limit-952 --A INPUT -j limit-951 --A INPUT -j limit-950 --A INPUT -j limit-949 --A INPUT -j limit-948 --A INPUT -j limit-947 --A INPUT -j limit-946 --A INPUT -j limit-945 --A INPUT -j limit-944 --A INPUT -j limit-943 --A INPUT -j limit-942 --A INPUT -j limit-941 --A INPUT -j limit-940 --A INPUT -j limit-939 --A INPUT -j limit-938 --A INPUT -j limit-937 --A INPUT -j limit-936 --A INPUT -j limit-935 --A INPUT -j limit-934 --A INPUT -j limit-933 --A INPUT -j limit-932 --A INPUT -j limit-931 --A INPUT -j limit-930 --A INPUT -j limit-929 --A INPUT -j limit-928 --A INPUT -j limit-927 --A INPUT -j limit-926 --A INPUT -j limit-925 --A INPUT -j limit-924 --A INPUT -j limit-923 --A INPUT -j limit-922 --A INPUT -j limit-921 --A INPUT -j limit-920 --A INPUT -j limit-919 --A INPUT -j limit-918 --A INPUT -j limit-917 --A INPUT -j limit-916 --A INPUT -j limit-915 --A INPUT -j limit-914 --A INPUT -j limit-913 --A INPUT -j limit-912 --A INPUT -j limit-911 --A INPUT -j limit-910 --A INPUT -j limit-909 --A INPUT -j limit-908 --A INPUT -j limit-907 --A INPUT -j limit-906 --A INPUT -j limit-905 --A INPUT -j limit-904 --A INPUT -j limit-903 --A INPUT -j limit-902 --A INPUT -j limit-901 --A INPUT -j limit-900 --A INPUT -j limit-899 --A INPUT -j limit-898 --A INPUT -j limit-897 --A INPUT -j limit-896 --A INPUT -j limit-895 --A INPUT -j limit-894 --A INPUT -j limit-893 --A INPUT -j limit-892 --A INPUT -j limit-891 --A INPUT -j limit-890 --A INPUT -j limit-889 --A INPUT -j limit-888 --A INPUT -j limit-887 --A INPUT -j limit-886 --A INPUT -j limit-885 --A INPUT -j limit-884 --A INPUT -j limit-883 --A INPUT -j limit-882 --A INPUT -j limit-881 --A INPUT -j limit-880 --A INPUT -j limit-879 --A INPUT -j limit-878 --A INPUT -j limit-877 --A INPUT -j limit-876 --A INPUT -j limit-875 --A INPUT -j limit-874 --A INPUT -j limit-873 --A INPUT -j limit-872 --A INPUT -j limit-871 --A INPUT -j limit-870 --A INPUT -j limit-869 --A INPUT -j limit-868 --A INPUT -j limit-867 --A INPUT -j limit-866 --A INPUT -j limit-865 --A INPUT -j limit-864 --A INPUT -j limit-863 --A INPUT -j limit-862 --A INPUT -j limit-861 --A INPUT -j limit-860 --A INPUT -j limit-859 --A INPUT -j limit-858 --A INPUT -j limit-857 --A INPUT -j limit-856 --A INPUT -j limit-855 --A INPUT -j limit-854 --A INPUT -j limit-853 --A INPUT -j limit-852 --A INPUT -j limit-851 --A INPUT -j limit-850 --A INPUT -j limit-849 --A INPUT -j limit-848 --A INPUT -j limit-847 --A INPUT -j limit-846 --A INPUT -j limit-845 --A INPUT -j limit-844 --A INPUT -j limit-843 --A INPUT -j limit-842 --A INPUT -j limit-841 --A INPUT -j limit-840 --A INPUT -j limit-839 --A INPUT -j limit-838 --A INPUT -j limit-837 --A INPUT -j limit-836 --A INPUT -j limit-835 --A INPUT -j limit-834 --A INPUT -j limit-833 --A INPUT -j limit-832 --A INPUT -j limit-831 --A INPUT -j limit-830 --A INPUT -j limit-829 --A INPUT -j limit-828 --A INPUT -j limit-827 --A INPUT -j limit-826 --A INPUT -j limit-825 --A INPUT -j limit-824 --A INPUT -j limit-823 --A INPUT -j limit-822 --A INPUT -j limit-821 --A INPUT -j limit-820 --A INPUT -j limit-819 --A INPUT -j limit-818 --A INPUT -j limit-817 --A INPUT -j limit-816 --A INPUT -j limit-815 --A INPUT -j limit-814 --A INPUT -j limit-813 --A INPUT -j limit-812 --A INPUT -j limit-811 --A INPUT -j limit-810 --A INPUT -j limit-809 --A INPUT -j limit-808 --A INPUT -j limit-807 --A INPUT -j limit-806 --A INPUT -j limit-805 --A INPUT -j limit-804 --A INPUT -j limit-803 --A INPUT -j limit-802 --A INPUT -j limit-801 --A INPUT -j limit-800 --A INPUT -j limit-799 --A INPUT -j limit-798 --A INPUT -j limit-797 --A INPUT -j limit-796 --A INPUT -j limit-795 --A INPUT -j limit-794 --A INPUT -j limit-793 --A INPUT -j limit-792 --A INPUT -j limit-791 --A INPUT -j limit-790 --A INPUT -j limit-789 --A INPUT -j limit-788 --A INPUT -j limit-787 --A INPUT -j limit-786 --A INPUT -j limit-785 --A INPUT -j limit-784 --A INPUT -j limit-783 --A INPUT -j limit-782 --A INPUT -j limit-781 --A INPUT -j limit-780 --A INPUT -j limit-779 --A INPUT -j limit-778 --A INPUT -j limit-777 --A INPUT -j limit-776 --A INPUT -j limit-775 --A INPUT -j limit-774 --A INPUT -j limit-773 --A INPUT -j limit-772 --A INPUT -j limit-771 --A INPUT -j limit-770 --A INPUT -j limit-769 --A INPUT -j limit-768 --A INPUT -j limit-767 --A INPUT -j limit-766 --A INPUT -j limit-765 --A INPUT -j limit-764 --A INPUT -j limit-763 --A INPUT -j limit-762 --A INPUT -j limit-761 --A INPUT -j limit-760 --A INPUT -j limit-759 --A INPUT -j limit-758 --A INPUT -j limit-757 --A INPUT -j limit-756 --A INPUT -j limit-755 --A INPUT -j limit-754 --A INPUT -j limit-753 --A INPUT -j limit-752 --A INPUT -j limit-751 --A INPUT -j limit-750 --A INPUT -j limit-749 --A INPUT -j limit-748 --A INPUT -j limit-747 --A INPUT -j limit-746 --A INPUT -j limit-745 --A INPUT -j limit-744 --A INPUT -j limit-743 --A INPUT -j limit-742 --A INPUT -j limit-741 --A INPUT -j limit-740 --A INPUT -j limit-739 --A INPUT -j limit-738 --A INPUT -j limit-737 --A INPUT -j limit-736 --A INPUT -j limit-735 --A INPUT -j limit-734 --A INPUT -j limit-733 --A INPUT -j limit-732 --A INPUT -j limit-731 --A INPUT -j limit-730 --A INPUT -j limit-729 --A INPUT -j limit-728 --A INPUT -j limit-727 --A INPUT -j limit-726 --A INPUT -j limit-725 --A INPUT -j limit-724 --A INPUT -j limit-723 --A INPUT -j limit-722 --A INPUT -j limit-721 --A INPUT -j limit-720 --A INPUT -j limit-719 --A INPUT -j limit-718 --A INPUT -j limit-717 --A INPUT -j limit-716 --A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT --A INPUT -i lo -j ACCEPT --A INPUT -j ACCEPT --A INPUT --A INPUT -j logaccept-0 --A INPUT -j logpass-0 --A INPUT -i eth0 -j ACCEPT --A INPUT -i eth0 --A INPUT -i eth0 -j logaccept-18 --A INPUT -i eth0 -j logpass-16 --A INPUT -i eth1 -s fc00::/7 -j ACCEPT --A INPUT -i eth1 -s fc00::/7 --A INPUT -i eth1 -s fc00::/7 -j logaccept-36 --A INPUT -i eth1 -s fc00::/7 -j logpass-30 --A INPUT -i eth1 -s fc00::/7 -j ACCEPT --A INPUT -i eth1 -s fc00::/7 --A INPUT -i eth1 -s fc00::/7 -j logaccept-45 --A INPUT -i eth1 -s fc00::/7 -j logpass-37 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logdrop-0 --A INPUT --A INPUT -j logreject-0 --A INPUT -j logtarpit-0 --A INPUT -j ACCEPT --A INPUT -j logaccept-final-0 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-1 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-2 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-3 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-4 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-5 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-6 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-7 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-8 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-9 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-10 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-11 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-12 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-13 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-14 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-15 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-16 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-17 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-18 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-19 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-20 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-21 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-22 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-23 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-24 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-25 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-26 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-27 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-28 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-29 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-30 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-31 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-32 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-33 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-34 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-35 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-36 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-37 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-38 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-39 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-40 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-41 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-42 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-43 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-44 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-45 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-46 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-47 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-48 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-49 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-50 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-51 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-52 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-53 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-54 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-55 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-56 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-57 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-58 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-59 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-60 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-61 --A INPUT -j ACCEPT --A INPUT -i eth0 -j limit-1074 --A INPUT -i eth0 -j limit-1075 --A INPUT -i eth0 -j limit-1076 --A INPUT -i eth0 -j limit-1077 --A INPUT -i eth0 -j limit-1078 --A INPUT -i eth0 -j limit-1079 --A INPUT -i eth0 -j limit-1080 --A INPUT -i eth0 -j limit-1081 --A INPUT -i eth0 -j limit-1082 --A INPUT -i eth0 -j limit-1083 --A INPUT -i eth0 -j limit-1084 --A INPUT -i eth0 -j limit-1085 --A INPUT -i eth0 -j limit-1086 --A INPUT -i eth0 -j limit-1087 --A INPUT -i eth0 -j limit-1088 --A INPUT -i eth0 -j limit-1089 --A INPUT -i eth0 -j limit-1090 --A INPUT -i eth0 -j limit-1091 --A INPUT -i eth0 -j limit-1092 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-362 --A INPUT -i eth0 -j limit-1094 --A INPUT -i eth0 -j limit-1095 --A INPUT -i eth0 -j limit-1096 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-366 --A INPUT -i eth0 -j limit-1098 --A INPUT -i eth0 -j limit-1099 --A INPUT -i eth0 -j limit-1100 --A INPUT -i eth0 -j limit-1101 --A INPUT -i eth0 -j limit-1102 --A INPUT -i eth0 -j limit-1103 --A INPUT -i eth0 -j limit-1104 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-374 --A INPUT -i eth0 -j limit-1106 --A INPUT -i eth0 -j limit-1107 --A INPUT -i eth0 -j limit-1108 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-378 --A INPUT -i eth0 -j limit-1110 --A INPUT -i eth0 -j limit-1111 --A INPUT -i eth0 -j limit-1112 --A INPUT -i eth0 -j limit-1113 --A INPUT -i eth0 -j limit-1114 --A INPUT -i eth0 -j limit-1115 --A INPUT -i eth0 -j limit-1116 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-386 --A INPUT -i eth0 -j limit-1118 --A INPUT -i eth0 -j limit-1119 --A INPUT -i eth0 -j limit-1120 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-390 --A INPUT -i eth0 -j limit-1122 --A INPUT -i eth0 -j limit-1123 --A INPUT -i eth0 -j limit-1124 --A INPUT -i eth0 -j limit-1125 --A INPUT -i eth0 -j limit-1126 --A INPUT -i eth0 -j limit-1127 --A INPUT -i eth0 -j limit-1128 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-398 --A INPUT -i eth0 -j limit-1130 --A INPUT -i eth0 -j limit-1131 --A INPUT -i eth0 -j limit-1132 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-402 --A INPUT -i eth0 -j limit-1134 --A INPUT -i eth0 -j limit-1135 --A INPUT -i eth0 -j limit-1136 --A INPUT -i eth0 -j limit-1137 --A INPUT -i eth0 -j limit-1138 --A INPUT -i eth0 -j limit-1139 --A INPUT -i eth0 -j limit-1140 --A INPUT -i eth0 -j limit-1141 --A INPUT -i eth0 -j limit-1142 --A INPUT -i eth0 -j limit-1143 --A INPUT -i eth0 -j limit-1144 --A INPUT -i eth0 -j limit-1145 --A INPUT -i eth0 -j limit-1146 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1148 --A INPUT -i eth0 -j limit-1149 --A INPUT -i eth0 -j limit-1150 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1152 --A INPUT -i eth0 -j limit-1153 --A INPUT -i eth0 -j limit-1154 --A INPUT -i eth0 -j limit-1155 --A INPUT -i eth0 -j limit-1156 --A INPUT -i eth0 -j limit-1157 --A INPUT -i eth0 -j limit-1158 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1160 --A INPUT -i eth0 -j limit-1161 --A INPUT -i eth0 -j limit-1162 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1164 --A INPUT -i eth0 -j limit-1165 --A INPUT -i eth0 -j limit-1166 --A INPUT -i eth0 -j limit-1167 --A INPUT -i eth0 -j limit-1168 --A INPUT -i eth0 -j limit-1169 --A INPUT -i eth0 -j limit-1170 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1172 --A INPUT -i eth0 -j limit-1173 --A INPUT -i eth0 -j limit-1174 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1176 --A INPUT -i eth0 -j limit-1177 --A INPUT -i eth0 -j limit-1178 --A INPUT -i eth0 -j limit-1179 --A INPUT -i eth0 -j limit-1180 --A INPUT -i eth0 -j limit-1181 --A INPUT -i eth0 -j limit-1182 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1184 --A INPUT -i eth0 -j limit-1185 --A INPUT -i eth0 -j limit-1186 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1188 --A INPUT -i eth0 -j limit-1189 --A INPUT -i eth0 -j limit-1190 --A INPUT -i eth0 -j limit-1191 --A INPUT -i eth0 -j limit-1192 --A INPUT -i eth0 -j limit-1193 --A INPUT -i eth0 -j limit-1194 --A INPUT -i eth0 -j limit-1195 --A INPUT -i eth0 -j limit-1196 --A INPUT -i eth0 -j limit-1197 --A INPUT -i eth0 -j limit-1198 --A INPUT -i eth0 -j limit-1199 --A INPUT -i eth0 -j limit-1200 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1202 --A INPUT -i eth0 -j limit-1203 --A INPUT -i eth0 -j limit-1204 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1206 --A INPUT -i eth0 -j limit-1207 --A INPUT -i eth0 -j limit-1208 --A INPUT -i eth0 -j limit-1209 --A INPUT -i eth0 -j limit-1210 --A INPUT -i eth0 -j limit-1211 --A INPUT -i eth0 -j limit-1212 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1214 --A INPUT -i eth0 -j limit-1215 --A INPUT -i eth0 -j limit-1216 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1218 --A INPUT -i eth0 -j limit-1219 --A INPUT -i eth0 -j limit-1220 --A INPUT -i eth0 -j limit-1221 --A INPUT -i eth0 -j limit-1222 --A INPUT -i eth0 -j limit-1223 --A INPUT -i eth0 -j limit-1224 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1226 --A INPUT -i eth0 -j limit-1227 --A INPUT -i eth0 -j limit-1228 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1230 --A INPUT -i eth0 -j limit-1231 --A INPUT -i eth0 -j limit-1232 --A INPUT -i eth0 -j limit-1233 --A INPUT -i eth0 -j limit-1234 --A INPUT -i eth0 -j limit-1235 --A INPUT -i eth0 -j limit-1236 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1238 --A INPUT -i eth0 -j limit-1239 --A INPUT -i eth0 -j limit-1240 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1242 --A INPUT -i eth0 -j limit-1243 --A INPUT -i eth0 -j limit-1244 --A INPUT -i eth0 -j limit-1245 --A INPUT -i eth0 -j limit-1246 --A INPUT -i eth0 -j limit-1247 --A INPUT -i eth0 -j limit-1248 --A INPUT -i eth0 -j limit-1249 --A INPUT -i eth0 -j limit-1250 --A INPUT -i eth0 -j limit-1251 --A INPUT -i eth0 -j limit-1252 --A INPUT -i eth0 -j limit-1253 --A INPUT -i eth0 -j limit-1254 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 --A INPUT -i eth0 -j limit-1256 --A INPUT -i eth0 -j limit-1257 --A INPUT -i eth0 -j limit-1258 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-420 --A INPUT -i eth0 -j limit-1260 --A INPUT -i eth0 -j limit-1261 --A INPUT -i eth0 -j limit-1262 --A INPUT -i eth0 -j limit-1263 --A INPUT -i eth0 -j limit-1264 --A INPUT -i eth0 -j limit-1265 --A INPUT -i eth0 -j limit-1266 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-428 --A INPUT -i eth0 -j limit-1268 --A INPUT -i eth0 -j limit-1269 --A INPUT -i eth0 -j limit-1270 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-432 --A INPUT -i eth0 -j limit-1272 --A INPUT -i eth0 -j limit-1273 --A INPUT -i eth0 -j limit-1274 --A INPUT -i eth0 -j limit-1275 --A INPUT -i eth0 -j limit-1276 --A INPUT -i eth0 -j limit-1277 --A INPUT -i eth0 -j limit-1278 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-440 --A INPUT -i eth0 -j limit-1280 --A INPUT -i eth0 -j limit-1281 --A INPUT -i eth0 -j limit-1282 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-444 --A INPUT -i eth0 -j limit-1284 --A INPUT -i eth0 -j limit-1285 --A INPUT -i eth0 -j limit-1286 --A INPUT -i eth0 -j limit-1287 --A INPUT -i eth0 -j limit-1288 --A INPUT -i eth0 -j limit-1289 --A INPUT -i eth0 -j limit-1290 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 --A INPUT -i eth0 -j limit-1292 --A INPUT -i eth0 -j limit-1293 --A INPUT -i eth0 -j limit-1294 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-456 --A INPUT -i eth0 -j limit-1296 --A INPUT -i eth0 -j limit-1297 --A INPUT -i eth0 -j limit-1298 --A INPUT -i eth0 -j limit-1299 --A INPUT -i eth0 -j limit-1300 --A INPUT -i eth0 -j limit-1301 --A INPUT -i eth0 -j limit-1302 --A INPUT -i eth0 -j limit-1303 --A INPUT -i eth0 -j limit-1304 --A INPUT -i eth0 -j limit-1305 --A INPUT -i eth0 -j limit-1306 --A INPUT -i eth0 -j limit-1307 --A INPUT -i eth0 -j limit-1308 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1310 --A INPUT -i eth0 -j limit-1311 --A INPUT -i eth0 -j limit-1312 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1314 --A INPUT -i eth0 -j limit-1315 --A INPUT -i eth0 -j limit-1316 --A INPUT -i eth0 -j limit-1317 --A INPUT -i eth0 -j limit-1318 --A INPUT -i eth0 -j limit-1319 --A INPUT -i eth0 -j limit-1320 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1322 --A INPUT -i eth0 -j limit-1323 --A INPUT -i eth0 -j limit-1324 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1326 --A INPUT -i eth0 -j limit-1327 --A INPUT -i eth0 -j limit-1328 --A INPUT -i eth0 -j limit-1329 --A INPUT -i eth0 -j limit-1330 --A INPUT -i eth0 -j limit-1331 --A INPUT -i eth0 -j limit-1332 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1334 --A INPUT -i eth0 -j limit-1335 --A INPUT -i eth0 -j limit-1336 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1338 --A INPUT -i eth0 -j limit-1339 --A INPUT -i eth0 -j limit-1340 --A INPUT -i eth0 -j limit-1341 --A INPUT -i eth0 -j limit-1342 --A INPUT -i eth0 -j limit-1343 --A INPUT -i eth0 -j limit-1344 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1346 --A INPUT -i eth0 -j limit-1347 --A INPUT -i eth0 -j limit-1348 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1350 --A INPUT -i eth0 -j limit-1351 --A INPUT -i eth0 -j limit-1352 --A INPUT -i eth0 -j limit-1353 --A INPUT -i eth0 -j limit-1354 --A INPUT -i eth0 -j limit-1355 --A INPUT -i eth0 -j limit-1356 --A INPUT -i eth0 -j limit-1357 --A INPUT -i eth0 -j limit-1358 --A INPUT -i eth0 -j limit-1359 --A INPUT -i eth0 -j limit-1360 --A INPUT -i eth0 -j limit-1361 --A INPUT -i eth0 -j limit-1362 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1364 --A INPUT -i eth0 -j limit-1365 --A INPUT -i eth0 -j limit-1366 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1368 --A INPUT -i eth0 -j limit-1369 --A INPUT -i eth0 -j limit-1370 --A INPUT -i eth0 -j limit-1371 --A INPUT -i eth0 -j limit-1372 --A INPUT -i eth0 -j limit-1373 --A INPUT -i eth0 -j limit-1374 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1376 --A INPUT -i eth0 -j limit-1377 --A INPUT -i eth0 -j limit-1378 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1380 --A INPUT -i eth0 -j limit-1381 --A INPUT -i eth0 -j limit-1382 --A INPUT -i eth0 -j limit-1383 --A INPUT -i eth0 -j limit-1384 --A INPUT -i eth0 -j limit-1385 --A INPUT -i eth0 -j limit-1386 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1388 --A INPUT -i eth0 -j limit-1389 --A INPUT -i eth0 -j limit-1390 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1392 --A INPUT -i eth0 -j limit-1393 --A INPUT -i eth0 -j limit-1394 --A INPUT -i eth0 -j limit-1395 --A INPUT -i eth0 -j limit-1396 --A INPUT -i eth0 -j limit-1397 --A INPUT -i eth0 -j limit-1398 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1400 --A INPUT -i eth0 -j limit-1401 --A INPUT -i eth0 -j limit-1402 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1404 --A INPUT -i eth0 -j limit-1405 --A INPUT -i eth0 -j limit-1406 --A INPUT -i eth0 -j limit-1407 --A INPUT -i eth0 -j limit-1408 --A INPUT -i eth0 -j limit-1409 --A INPUT -i eth0 -j limit-1410 --A INPUT -i eth0 -j limit-1411 --A INPUT -i eth0 -j limit-1412 --A INPUT -i eth0 -j limit-1413 --A INPUT -i eth0 -j limit-1414 --A INPUT -i eth0 -j limit-1415 --A INPUT -i eth0 -j limit-1416 --A INPUT -i eth0 -j limit-1417 --A INPUT -i eth0 -j limit-1418 --A INPUT -i eth0 -j limit-1419 --A INPUT -i eth0 -j limit-1420 --A INPUT -i eth0 -j limit-1421 --A INPUT -i eth0 -j limit-1422 --A INPUT -i eth0 -j limit-1423 --A INPUT -i eth0 -j limit-1424 --A INPUT -i eth0 -j limit-1425 --A INPUT -i eth0 -j limit-1426 --A INPUT -i eth0 -j limit-1427 --A INPUT -i eth0 -j limit-1428 --A INPUT -i eth0 -j limit-1429 --A INPUT -i eth0 -j limit-1430 --A INPUT -i eth0 -j limit-1431 --A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -m recent --name user:C --rsource --mask fe00:: --set --A INPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set --A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -j ACCEPT --A INPUT -j logdrop-457 --A INPUT --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT --A INPUT -j logaccept-84 --A INPUT -j logdrop-458 --A INPUT -j logpass-50 --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT --A INPUT -p tcp --sport 80 -j ACCEPT --A INPUT -p esp -j ACCEPT --A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT --A INPUT -i eth0 -j ACCEPT --A INPUT -j ACCEPT --A INPUT -p icmpv6 -j ACCEPT --A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -j limit-1073 --A OUTPUT -j limit-1072 --A OUTPUT -j limit-1071 --A OUTPUT -j limit-1070 --A OUTPUT -j limit-1069 --A OUTPUT -j limit-1068 --A OUTPUT -j limit-1067 --A OUTPUT -j limit-1066 --A OUTPUT -j limit-1065 --A OUTPUT -j limit-1064 --A OUTPUT -j limit-1063 --A OUTPUT -j limit-1062 --A OUTPUT -j limit-1061 --A OUTPUT -j limit-1060 --A OUTPUT -j limit-1059 --A OUTPUT -j limit-1058 --A OUTPUT -j limit-1057 --A OUTPUT -j limit-1056 --A OUTPUT -j limit-1055 --A OUTPUT -j limit-1054 --A OUTPUT -j limit-1053 --A OUTPUT -j limit-1052 --A OUTPUT -j limit-1051 --A OUTPUT -j limit-1050 --A OUTPUT -j limit-1049 --A OUTPUT -j limit-1048 --A OUTPUT -j limit-1047 --A OUTPUT -j limit-1046 --A OUTPUT -j limit-1045 --A OUTPUT -j limit-1044 --A OUTPUT -j limit-1043 --A OUTPUT -j limit-1042 --A OUTPUT -j limit-1041 --A OUTPUT -j limit-1040 --A OUTPUT -j limit-1039 --A OUTPUT -j limit-1038 --A OUTPUT -j limit-1037 --A OUTPUT -j limit-1036 --A OUTPUT -j limit-1035 --A OUTPUT -j limit-1034 --A OUTPUT -j limit-1033 --A OUTPUT -j limit-1032 --A OUTPUT -j limit-1031 --A OUTPUT -j limit-1030 --A OUTPUT -j limit-1029 --A OUTPUT -j limit-1028 --A OUTPUT -j limit-1027 --A OUTPUT -j limit-1026 --A OUTPUT -j limit-1025 --A OUTPUT -j limit-1024 --A OUTPUT -j limit-1023 --A OUTPUT -j limit-1022 --A OUTPUT -j limit-1021 --A OUTPUT -j limit-1020 --A OUTPUT -j limit-1019 --A OUTPUT -j limit-1018 --A OUTPUT -j limit-1017 --A OUTPUT -j limit-1016 --A OUTPUT -j limit-1015 --A OUTPUT -j limit-1014 --A OUTPUT -j limit-1013 --A OUTPUT -j limit-1012 --A OUTPUT -j limit-1011 --A OUTPUT -j limit-1010 --A OUTPUT -j limit-1009 --A OUTPUT -j limit-1008 --A OUTPUT -j limit-1007 --A OUTPUT -j limit-1006 --A OUTPUT -j limit-1005 --A OUTPUT -j limit-1004 --A OUTPUT -j limit-1003 --A OUTPUT -j limit-1002 --A OUTPUT -j limit-1001 --A OUTPUT -j limit-1000 --A OUTPUT -j limit-999 --A OUTPUT -j limit-998 --A OUTPUT -j limit-997 --A OUTPUT -j limit-996 --A OUTPUT -j limit-995 --A OUTPUT -j limit-994 --A OUTPUT -j limit-993 --A OUTPUT -j limit-992 --A OUTPUT -j limit-991 --A OUTPUT -j limit-990 --A OUTPUT -j limit-989 --A OUTPUT -j limit-988 --A OUTPUT -j limit-987 --A OUTPUT -j limit-986 --A OUTPUT -j limit-985 --A OUTPUT -j limit-984 --A OUTPUT -j limit-983 --A OUTPUT -j limit-982 --A OUTPUT -j limit-981 --A OUTPUT -j limit-980 --A OUTPUT -j limit-979 --A OUTPUT -j limit-978 --A OUTPUT -j limit-977 --A OUTPUT -j limit-976 --A OUTPUT -j limit-975 --A OUTPUT -j limit-974 --A OUTPUT -j limit-973 --A OUTPUT -j limit-972 --A OUTPUT -j limit-971 --A OUTPUT -j limit-970 --A OUTPUT -j limit-969 --A OUTPUT -j limit-968 --A OUTPUT -j limit-967 --A OUTPUT -j limit-966 --A OUTPUT -j limit-965 --A OUTPUT -j limit-964 --A OUTPUT -j limit-963 --A OUTPUT -j limit-962 --A OUTPUT -j limit-961 --A OUTPUT -j limit-960 --A OUTPUT -j limit-959 --A OUTPUT -j limit-958 --A OUTPUT -j limit-957 --A OUTPUT -j limit-956 --A OUTPUT -j limit-955 --A OUTPUT -j limit-954 --A OUTPUT -j limit-953 --A OUTPUT -j limit-952 --A OUTPUT -j limit-951 --A OUTPUT -j limit-950 --A OUTPUT -j limit-949 --A OUTPUT -j limit-948 --A OUTPUT -j limit-947 --A OUTPUT -j limit-946 --A OUTPUT -j limit-945 --A OUTPUT -j limit-944 --A OUTPUT -j limit-943 --A OUTPUT -j limit-942 --A OUTPUT -j limit-941 --A OUTPUT -j limit-940 --A OUTPUT -j limit-939 --A OUTPUT -j limit-938 --A OUTPUT -j limit-937 --A OUTPUT -j limit-936 --A OUTPUT -j limit-935 --A OUTPUT -j limit-934 --A OUTPUT -j limit-933 --A OUTPUT -j limit-932 --A OUTPUT -j limit-931 --A OUTPUT -j limit-930 --A OUTPUT -j limit-929 --A OUTPUT -j limit-928 --A OUTPUT -j limit-927 --A OUTPUT -j limit-926 --A OUTPUT -j limit-925 --A OUTPUT -j limit-924 --A OUTPUT -j limit-923 --A OUTPUT -j limit-922 --A OUTPUT -j limit-921 --A OUTPUT -j limit-920 --A OUTPUT -j limit-919 --A OUTPUT -j limit-918 --A OUTPUT -j limit-917 --A OUTPUT -j limit-916 --A OUTPUT -j limit-915 --A OUTPUT -j limit-914 --A OUTPUT -j limit-913 --A OUTPUT -j limit-912 --A OUTPUT -j limit-911 --A OUTPUT -j limit-910 --A OUTPUT -j limit-909 --A OUTPUT -j limit-908 --A OUTPUT -j limit-907 --A OUTPUT -j limit-906 --A OUTPUT -j limit-905 --A OUTPUT -j limit-904 --A OUTPUT -j limit-903 --A OUTPUT -j limit-902 --A OUTPUT -j limit-901 --A OUTPUT -j limit-900 --A OUTPUT -j limit-899 --A OUTPUT -j limit-898 --A OUTPUT -j limit-897 --A OUTPUT -j limit-896 --A OUTPUT -j limit-895 --A OUTPUT -j limit-894 --A OUTPUT -j limit-893 --A OUTPUT -j limit-892 --A OUTPUT -j limit-891 --A OUTPUT -j limit-890 --A OUTPUT -j limit-889 --A OUTPUT -j limit-888 --A OUTPUT -j limit-887 --A OUTPUT -j limit-886 --A OUTPUT -j limit-885 --A OUTPUT -j limit-884 --A OUTPUT -j limit-883 --A OUTPUT -j limit-882 --A OUTPUT -j limit-881 --A OUTPUT -j limit-880 --A OUTPUT -j limit-879 --A OUTPUT -j limit-878 --A OUTPUT -j limit-877 --A OUTPUT -j limit-876 --A OUTPUT -j limit-875 --A OUTPUT -j limit-874 --A OUTPUT -j limit-873 --A OUTPUT -j limit-872 --A OUTPUT -j limit-871 --A OUTPUT -j limit-870 --A OUTPUT -j limit-869 --A OUTPUT -j limit-868 --A OUTPUT -j limit-867 --A OUTPUT -j limit-866 --A OUTPUT -j limit-865 --A OUTPUT -j limit-864 --A OUTPUT -j limit-863 --A OUTPUT -j limit-862 --A OUTPUT -j limit-861 --A OUTPUT -j limit-860 --A OUTPUT -j limit-859 --A OUTPUT -j limit-858 --A OUTPUT -j limit-857 --A OUTPUT -j limit-856 --A OUTPUT -j limit-855 --A OUTPUT -j limit-854 --A OUTPUT -j limit-853 --A OUTPUT -j limit-852 --A OUTPUT -j limit-851 --A OUTPUT -j limit-850 --A OUTPUT -j limit-849 --A OUTPUT -j limit-848 --A OUTPUT -j limit-847 --A OUTPUT -j limit-846 --A OUTPUT -j limit-845 --A OUTPUT -j limit-844 --A OUTPUT -j limit-843 --A OUTPUT -j limit-842 --A OUTPUT -j limit-841 --A OUTPUT -j limit-840 --A OUTPUT -j limit-839 --A OUTPUT -j limit-838 --A OUTPUT -j limit-837 --A OUTPUT -j limit-836 --A OUTPUT -j limit-835 --A OUTPUT -j limit-834 --A OUTPUT -j limit-833 --A OUTPUT -j limit-832 --A OUTPUT -j limit-831 --A OUTPUT -j limit-830 --A OUTPUT -j limit-829 --A OUTPUT -j limit-828 --A OUTPUT -j limit-827 --A OUTPUT -j limit-826 --A OUTPUT -j limit-825 --A OUTPUT -j limit-824 --A OUTPUT -j limit-823 --A OUTPUT -j limit-822 --A OUTPUT -j limit-821 --A OUTPUT -j limit-820 --A OUTPUT -j limit-819 --A OUTPUT -j limit-818 --A OUTPUT -j limit-817 --A OUTPUT -j limit-816 --A OUTPUT -j limit-815 --A OUTPUT -j limit-814 --A OUTPUT -j limit-813 --A OUTPUT -j limit-812 --A OUTPUT -j limit-811 --A OUTPUT -j limit-810 --A OUTPUT -j limit-809 --A OUTPUT -j limit-808 --A OUTPUT -j limit-807 --A OUTPUT -j limit-806 --A OUTPUT -j limit-805 --A OUTPUT -j limit-804 --A OUTPUT -j limit-803 --A OUTPUT -j limit-802 --A OUTPUT -j limit-801 --A OUTPUT -j limit-800 --A OUTPUT -j limit-799 --A OUTPUT -j limit-798 --A OUTPUT -j limit-797 --A OUTPUT -j limit-796 --A OUTPUT -j limit-795 --A OUTPUT -j limit-794 --A OUTPUT -j limit-793 --A OUTPUT -j limit-792 --A OUTPUT -j limit-791 --A OUTPUT -j limit-790 --A OUTPUT -j limit-789 --A OUTPUT -j limit-788 --A OUTPUT -j limit-787 --A OUTPUT -j limit-786 --A OUTPUT -j limit-785 --A OUTPUT -j limit-784 --A OUTPUT -j limit-783 --A OUTPUT -j limit-782 --A OUTPUT -j limit-781 --A OUTPUT -j limit-780 --A OUTPUT -j limit-779 --A OUTPUT -j limit-778 --A OUTPUT -j limit-777 --A OUTPUT -j limit-776 --A OUTPUT -j limit-775 --A OUTPUT -j limit-774 --A OUTPUT -j limit-773 --A OUTPUT -j limit-772 --A OUTPUT -j limit-771 --A OUTPUT -j limit-770 --A OUTPUT -j limit-769 --A OUTPUT -j limit-768 --A OUTPUT -j limit-767 --A OUTPUT -j limit-766 --A OUTPUT -j limit-765 --A OUTPUT -j limit-764 --A OUTPUT -j limit-763 --A OUTPUT -j limit-762 --A OUTPUT -j limit-761 --A OUTPUT -j limit-760 --A OUTPUT -j limit-759 --A OUTPUT -j limit-758 --A OUTPUT -j limit-757 --A OUTPUT -j limit-756 --A OUTPUT -j limit-755 --A OUTPUT -j limit-754 --A OUTPUT -j limit-753 --A OUTPUT -j limit-752 --A OUTPUT -j limit-751 --A OUTPUT -j limit-750 --A OUTPUT -j limit-749 --A OUTPUT -j limit-748 --A OUTPUT -j limit-747 --A OUTPUT -j limit-746 --A OUTPUT -j limit-745 --A OUTPUT -j limit-744 --A OUTPUT -j limit-743 --A OUTPUT -j limit-742 --A OUTPUT -j limit-741 --A OUTPUT -j limit-740 --A OUTPUT -j limit-739 --A OUTPUT -j limit-738 --A OUTPUT -j limit-737 --A OUTPUT -j limit-736 --A OUTPUT -j limit-735 --A OUTPUT -j limit-734 --A OUTPUT -j limit-733 --A OUTPUT -j limit-732 --A OUTPUT -j limit-731 --A OUTPUT -j limit-730 --A OUTPUT -j limit-729 --A OUTPUT -j limit-728 --A OUTPUT -j limit-727 --A OUTPUT -j limit-726 --A OUTPUT -j limit-725 --A OUTPUT -j limit-724 --A OUTPUT -j limit-723 --A OUTPUT -j limit-722 --A OUTPUT -j limit-721 --A OUTPUT -j limit-720 --A OUTPUT -j limit-719 --A OUTPUT -j limit-718 --A OUTPUT -j limit-717 --A OUTPUT -j limit-716 --A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT --A OUTPUT -o lo -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT --A OUTPUT -j logaccept-0 --A OUTPUT -j logpass-0 --A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT --A OUTPUT -o eth1 -d fc00::/7 --A OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 --A OUTPUT -o eth1 -d fc00::/7 -j logpass-9 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-0 --A OUTPUT --A OUTPUT -j logreject-0 --A OUTPUT -j logtarpit-0 --A OUTPUT -o eth1 -d fc00::/7 -j limit-0 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1 --A OUTPUT -o eth1 -d fc00::/7 -j limit-2 --A OUTPUT -o eth1 -d fc00::/7 -j limit-3 --A OUTPUT -o eth1 -d fc00::/7 -j limit-4 --A OUTPUT -o eth1 -d fc00::/7 -j limit-5 --A OUTPUT -o eth1 -d fc00::/7 -j limit-6 --A OUTPUT -o eth1 -d fc00::/7 -j limit-7 --A OUTPUT -o eth1 -d fc00::/7 -j limit-8 --A OUTPUT -o eth1 -d fc00::/7 -j limit-9 --A OUTPUT -o eth1 -d fc00::/7 -j limit-10 --A OUTPUT -o eth1 -d fc00::/7 -j limit-11 --A OUTPUT -o eth1 -d fc00::/7 -j limit-12 --A OUTPUT -o eth1 -d fc00::/7 -j limit-13 --A OUTPUT -o eth1 -d fc00::/7 -j limit-14 --A OUTPUT -o eth1 -d fc00::/7 -j limit-15 --A OUTPUT -o eth1 -d fc00::/7 -j limit-16 --A OUTPUT -o eth1 -d fc00::/7 -j limit-17 --A OUTPUT -o eth1 -d fc00::/7 -j limit-18 --A OUTPUT -o eth1 -d fc00::/7 -j limit-19 --A OUTPUT -o eth1 -d fc00::/7 -j limit-20 --A OUTPUT -o eth1 -d fc00::/7 -j limit-21 --A OUTPUT -o eth1 -d fc00::/7 -j limit-22 --A OUTPUT -o eth1 -d fc00::/7 -j limit-23 --A OUTPUT -o eth1 -d fc00::/7 -j limit-24 --A OUTPUT -o eth1 -d fc00::/7 -j limit-25 --A OUTPUT -o eth1 -d fc00::/7 -j limit-26 --A OUTPUT -o eth1 -d fc00::/7 -j limit-27 --A OUTPUT -o eth1 -d fc00::/7 -j limit-28 --A OUTPUT -o eth1 -d fc00::/7 -j limit-29 --A OUTPUT -o eth1 -d fc00::/7 -j limit-30 --A OUTPUT -o eth1 -d fc00::/7 -j limit-31 --A OUTPUT -o eth1 -d fc00::/7 -j limit-32 --A OUTPUT -o eth1 -d fc00::/7 -j limit-33 --A OUTPUT -o eth1 -d fc00::/7 -j limit-34 --A OUTPUT -o eth1 -d fc00::/7 -j limit-35 --A OUTPUT -o eth1 -d fc00::/7 -j limit-36 --A OUTPUT -o eth1 -d fc00::/7 -j limit-37 --A OUTPUT -o eth1 -d fc00::/7 -j limit-38 --A OUTPUT -o eth1 -d fc00::/7 -j limit-39 --A OUTPUT -o eth1 -d fc00::/7 -j limit-40 --A OUTPUT -o eth1 -d fc00::/7 -j limit-41 --A OUTPUT -o eth1 -d fc00::/7 -j limit-42 --A OUTPUT -o eth1 -d fc00::/7 -j limit-43 --A OUTPUT -o eth1 -d fc00::/7 -j limit-44 --A OUTPUT -o eth1 -d fc00::/7 -j limit-45 --A OUTPUT -o eth1 -d fc00::/7 -j limit-46 --A OUTPUT -o eth1 -d fc00::/7 -j limit-47 --A OUTPUT -o eth1 -d fc00::/7 -j limit-48 --A OUTPUT -o eth1 -d fc00::/7 -j limit-49 --A OUTPUT -o eth1 -d fc00::/7 -j limit-50 --A OUTPUT -o eth1 -d fc00::/7 -j limit-51 --A OUTPUT -o eth1 -d fc00::/7 -j limit-52 --A OUTPUT -o eth1 -d fc00::/7 -j limit-53 --A OUTPUT -o eth1 -d fc00::/7 -j limit-54 --A OUTPUT -o eth1 -d fc00::/7 -j limit-55 --A OUTPUT -o eth1 -d fc00::/7 -j limit-56 --A OUTPUT -o eth1 -d fc00::/7 -j limit-57 --A OUTPUT -o eth1 -d fc00::/7 -j limit-58 --A OUTPUT -o eth1 -d fc00::/7 -j limit-59 --A OUTPUT -o eth1 -d fc00::/7 -j limit-60 --A OUTPUT -o eth1 -d fc00::/7 -j limit-61 --A OUTPUT -o eth1 -d fc00::/7 -j limit-62 --A OUTPUT -o eth1 -d fc00::/7 -j limit-63 --A OUTPUT -o eth1 -d fc00::/7 -j limit-64 --A OUTPUT -o eth1 -d fc00::/7 -j limit-65 --A OUTPUT -o eth1 -d fc00::/7 -j limit-66 --A OUTPUT -o eth1 -d fc00::/7 -j limit-67 --A OUTPUT -o eth1 -d fc00::/7 -j limit-68 --A OUTPUT -o eth1 -d fc00::/7 -j limit-69 --A OUTPUT -o eth1 -d fc00::/7 -j limit-70 --A OUTPUT -o eth1 -d fc00::/7 -j limit-71 --A OUTPUT -o eth1 -d fc00::/7 -j limit-72 --A OUTPUT -o eth1 -d fc00::/7 -j limit-73 --A OUTPUT -o eth1 -d fc00::/7 -j limit-74 --A OUTPUT -o eth1 -d fc00::/7 -j limit-75 --A OUTPUT -o eth1 -d fc00::/7 -j limit-76 --A OUTPUT -o eth1 -d fc00::/7 -j limit-77 --A OUTPUT -o eth1 -d fc00::/7 -j limit-78 --A OUTPUT -o eth1 -d fc00::/7 -j limit-79 --A OUTPUT -o eth1 -d fc00::/7 -j limit-80 --A OUTPUT -o eth1 -d fc00::/7 -j limit-81 --A OUTPUT -o eth1 -d fc00::/7 -j limit-82 --A OUTPUT -o eth1 -d fc00::/7 -j limit-83 --A OUTPUT -o eth1 -d fc00::/7 -j limit-84 --A OUTPUT -o eth1 -d fc00::/7 -j limit-85 --A OUTPUT -o eth1 -d fc00::/7 -j limit-86 --A OUTPUT -o eth1 -d fc00::/7 -j limit-87 --A OUTPUT -o eth1 -d fc00::/7 -j limit-88 --A OUTPUT -o eth1 -d fc00::/7 -j limit-89 --A OUTPUT -o eth1 -d fc00::/7 -j limit-90 --A OUTPUT -o eth1 -d fc00::/7 -j limit-91 --A OUTPUT -o eth1 -d fc00::/7 -j limit-92 --A OUTPUT -o eth1 -d fc00::/7 -j limit-93 --A OUTPUT -o eth1 -d fc00::/7 -j limit-94 --A OUTPUT -o eth1 -d fc00::/7 -j limit-95 --A OUTPUT -o eth1 -d fc00::/7 -j limit-96 --A OUTPUT -o eth1 -d fc00::/7 -j limit-97 --A OUTPUT -o eth1 -d fc00::/7 -j limit-98 --A OUTPUT -o eth1 -d fc00::/7 -j limit-99 --A OUTPUT -o eth1 -d fc00::/7 -j limit-100 --A OUTPUT -o eth1 -d fc00::/7 -j limit-101 --A OUTPUT -o eth1 -d fc00::/7 -j limit-102 --A OUTPUT -o eth1 -d fc00::/7 -j limit-103 --A OUTPUT -o eth1 -d fc00::/7 -j limit-104 --A OUTPUT -o eth1 -d fc00::/7 -j limit-105 --A OUTPUT -o eth1 -d fc00::/7 -j limit-106 --A OUTPUT -o eth1 -d fc00::/7 -j limit-107 --A OUTPUT -o eth1 -d fc00::/7 -j limit-108 --A OUTPUT -o eth1 -d fc00::/7 -j limit-109 --A OUTPUT -o eth1 -d fc00::/7 -j limit-110 --A OUTPUT -o eth1 -d fc00::/7 -j limit-111 --A OUTPUT -o eth1 -d fc00::/7 -j limit-112 --A OUTPUT -o eth1 -d fc00::/7 -j limit-113 --A OUTPUT -o eth1 -d fc00::/7 -j limit-114 --A OUTPUT -o eth1 -d fc00::/7 -j limit-115 --A OUTPUT -o eth1 -d fc00::/7 -j limit-116 --A OUTPUT -o eth1 -d fc00::/7 -j limit-117 --A OUTPUT -o eth1 -d fc00::/7 -j limit-118 --A OUTPUT -o eth1 -d fc00::/7 -j limit-119 --A OUTPUT -o eth1 -d fc00::/7 -j limit-120 --A OUTPUT -o eth1 -d fc00::/7 -j limit-121 --A OUTPUT -o eth1 -d fc00::/7 -j limit-122 --A OUTPUT -o eth1 -d fc00::/7 -j limit-123 --A OUTPUT -o eth1 -d fc00::/7 -j limit-124 --A OUTPUT -o eth1 -d fc00::/7 -j limit-125 --A OUTPUT -o eth1 -d fc00::/7 -j limit-126 --A OUTPUT -o eth1 -d fc00::/7 -j limit-127 --A OUTPUT -o eth1 -d fc00::/7 -j limit-128 --A OUTPUT -o eth1 -d fc00::/7 -j limit-129 --A OUTPUT -o eth1 -d fc00::/7 -j limit-130 --A OUTPUT -o eth1 -d fc00::/7 -j limit-131 --A OUTPUT -o eth1 -d fc00::/7 -j limit-132 --A OUTPUT -o eth1 -d fc00::/7 -j limit-133 --A OUTPUT -o eth1 -d fc00::/7 -j limit-134 --A OUTPUT -o eth1 -d fc00::/7 -j limit-135 --A OUTPUT -o eth1 -d fc00::/7 -j limit-136 --A OUTPUT -o eth1 -d fc00::/7 -j limit-137 --A OUTPUT -o eth1 -d fc00::/7 -j limit-138 --A OUTPUT -o eth1 -d fc00::/7 -j limit-139 --A OUTPUT -o eth1 -d fc00::/7 -j limit-140 --A OUTPUT -o eth1 -d fc00::/7 -j limit-141 --A OUTPUT -o eth1 -d fc00::/7 -j limit-142 --A OUTPUT -o eth1 -d fc00::/7 -j limit-143 --A OUTPUT -o eth1 -d fc00::/7 -j limit-144 --A OUTPUT -o eth1 -d fc00::/7 -j limit-145 --A OUTPUT -o eth1 -d fc00::/7 -j limit-146 --A OUTPUT -o eth1 -d fc00::/7 -j limit-147 --A OUTPUT -o eth1 -d fc00::/7 -j limit-148 --A OUTPUT -o eth1 -d fc00::/7 -j limit-149 --A OUTPUT -o eth1 -d fc00::/7 -j limit-150 --A OUTPUT -o eth1 -d fc00::/7 -j limit-151 --A OUTPUT -o eth1 -d fc00::/7 -j limit-152 --A OUTPUT -o eth1 -d fc00::/7 -j limit-153 --A OUTPUT -o eth1 -d fc00::/7 -j limit-154 --A OUTPUT -o eth1 -d fc00::/7 -j limit-155 --A OUTPUT -o eth1 -d fc00::/7 -j limit-156 --A OUTPUT -o eth1 -d fc00::/7 -j limit-157 --A OUTPUT -o eth1 -d fc00::/7 -j limit-158 --A OUTPUT -o eth1 -d fc00::/7 -j limit-159 --A OUTPUT -o eth1 -d fc00::/7 -j limit-160 --A OUTPUT -o eth1 -d fc00::/7 -j limit-161 --A OUTPUT -o eth1 -d fc00::/7 -j limit-162 --A OUTPUT -o eth1 -d fc00::/7 -j limit-163 --A OUTPUT -o eth1 -d fc00::/7 -j limit-164 --A OUTPUT -o eth1 -d fc00::/7 -j limit-165 --A OUTPUT -o eth1 -d fc00::/7 -j limit-166 --A OUTPUT -o eth1 -d fc00::/7 -j limit-167 --A OUTPUT -o eth1 -d fc00::/7 -j limit-168 --A OUTPUT -o eth1 -d fc00::/7 -j limit-169 --A OUTPUT -o eth1 -d fc00::/7 -j limit-170 --A OUTPUT -o eth1 -d fc00::/7 -j limit-171 --A OUTPUT -o eth1 -d fc00::/7 -j limit-172 --A OUTPUT -o eth1 -d fc00::/7 -j limit-173 --A OUTPUT -o eth1 -d fc00::/7 -j limit-174 --A OUTPUT -o eth1 -d fc00::/7 -j limit-175 --A OUTPUT -o eth1 -d fc00::/7 -j limit-176 --A OUTPUT -o eth1 -d fc00::/7 -j limit-177 --A OUTPUT -o eth1 -d fc00::/7 -j limit-178 --A OUTPUT -o eth1 -d fc00::/7 -j limit-179 --A OUTPUT -o eth1 -d fc00::/7 -j limit-180 --A OUTPUT -o eth1 -d fc00::/7 -j limit-181 --A OUTPUT -o eth1 -d fc00::/7 -j limit-182 --A OUTPUT -o eth1 -d fc00::/7 -j limit-183 --A OUTPUT -o eth1 -d fc00::/7 -j limit-184 --A OUTPUT -o eth1 -d fc00::/7 -j limit-185 --A OUTPUT -o eth1 -d fc00::/7 -j limit-186 --A OUTPUT -o eth1 -d fc00::/7 -j limit-187 --A OUTPUT -o eth1 -d fc00::/7 -j limit-188 --A OUTPUT -o eth1 -d fc00::/7 -j limit-189 --A OUTPUT -o eth1 -d fc00::/7 -j limit-190 --A OUTPUT -o eth1 -d fc00::/7 -j limit-191 --A OUTPUT -o eth1 -d fc00::/7 -j limit-192 --A OUTPUT -o eth1 -d fc00::/7 -j limit-193 --A OUTPUT -o eth1 -d fc00::/7 -j limit-194 --A OUTPUT -o eth1 -d fc00::/7 -j limit-195 --A OUTPUT -o eth1 -d fc00::/7 -j limit-196 --A OUTPUT -o eth1 -d fc00::/7 -j limit-197 --A OUTPUT -o eth1 -d fc00::/7 -j limit-198 --A OUTPUT -o eth1 -d fc00::/7 -j limit-199 --A OUTPUT -o eth1 -d fc00::/7 -j limit-200 --A OUTPUT -o eth1 -d fc00::/7 -j limit-201 --A OUTPUT -o eth1 -d fc00::/7 -j limit-202 --A OUTPUT -o eth1 -d fc00::/7 -j limit-203 --A OUTPUT -o eth1 -d fc00::/7 -j limit-204 --A OUTPUT -o eth1 -d fc00::/7 -j limit-205 --A OUTPUT -o eth1 -d fc00::/7 -j limit-206 --A OUTPUT -o eth1 -d fc00::/7 -j limit-207 --A OUTPUT -o eth1 -d fc00::/7 -j limit-208 --A OUTPUT -o eth1 -d fc00::/7 -j limit-209 --A OUTPUT -o eth1 -d fc00::/7 -j limit-210 --A OUTPUT -o eth1 -d fc00::/7 -j limit-211 --A OUTPUT -o eth1 -d fc00::/7 -j limit-212 --A OUTPUT -o eth1 -d fc00::/7 -j limit-213 --A OUTPUT -o eth1 -d fc00::/7 -j limit-214 --A OUTPUT -o eth1 -d fc00::/7 -j limit-215 --A OUTPUT -o eth1 -d fc00::/7 -j limit-216 --A OUTPUT -o eth1 -d fc00::/7 -j limit-217 --A OUTPUT -o eth1 -d fc00::/7 -j limit-218 --A OUTPUT -o eth1 -d fc00::/7 -j limit-219 --A OUTPUT -o eth1 -d fc00::/7 -j limit-220 --A OUTPUT -o eth1 -d fc00::/7 -j limit-221 --A OUTPUT -o eth1 -d fc00::/7 -j limit-222 --A OUTPUT -o eth1 -d fc00::/7 -j limit-223 --A OUTPUT -o eth1 -d fc00::/7 -j limit-224 --A OUTPUT -o eth1 -d fc00::/7 -j limit-225 --A OUTPUT -o eth1 -d fc00::/7 -j limit-226 --A OUTPUT -o eth1 -d fc00::/7 -j limit-227 --A OUTPUT -o eth1 -d fc00::/7 -j limit-228 --A OUTPUT -o eth1 -d fc00::/7 -j limit-229 --A OUTPUT -o eth1 -d fc00::/7 -j limit-230 --A OUTPUT -o eth1 -d fc00::/7 -j limit-231 --A OUTPUT -o eth1 -d fc00::/7 -j limit-232 --A OUTPUT -o eth1 -d fc00::/7 -j limit-233 --A OUTPUT -o eth1 -d fc00::/7 -j limit-234 --A OUTPUT -o eth1 -d fc00::/7 -j limit-235 --A OUTPUT -o eth1 -d fc00::/7 -j limit-236 --A OUTPUT -o eth1 -d fc00::/7 -j limit-237 --A OUTPUT -o eth1 -d fc00::/7 -j limit-238 --A OUTPUT -o eth1 -d fc00::/7 -j limit-239 --A OUTPUT -o eth1 -d fc00::/7 -j limit-240 --A OUTPUT -o eth1 -d fc00::/7 -j limit-241 --A OUTPUT -o eth1 -d fc00::/7 -j limit-242 --A OUTPUT -o eth1 -d fc00::/7 -j limit-243 --A OUTPUT -o eth1 -d fc00::/7 -j limit-244 --A OUTPUT -o eth1 -d fc00::/7 -j limit-245 --A OUTPUT -o eth1 -d fc00::/7 -j limit-246 --A OUTPUT -o eth1 -d fc00::/7 -j limit-247 --A OUTPUT -o eth1 -d fc00::/7 -j limit-248 --A OUTPUT -o eth1 -d fc00::/7 -j limit-249 --A OUTPUT -o eth1 -d fc00::/7 -j limit-250 --A OUTPUT -o eth1 -d fc00::/7 -j limit-251 --A OUTPUT -o eth1 -d fc00::/7 -j limit-252 --A OUTPUT -o eth1 -d fc00::/7 -j limit-253 --A OUTPUT -o eth1 -d fc00::/7 -j limit-254 --A OUTPUT -o eth1 -d fc00::/7 -j limit-255 --A OUTPUT -o eth1 -d fc00::/7 -j limit-256 --A OUTPUT -o eth1 -d fc00::/7 -j limit-257 --A OUTPUT -o eth1 -d fc00::/7 -j limit-258 --A OUTPUT -o eth1 -d fc00::/7 -j limit-259 --A OUTPUT -o eth1 -d fc00::/7 -j limit-260 --A OUTPUT -o eth1 -d fc00::/7 -j limit-261 --A OUTPUT -o eth1 -d fc00::/7 -j limit-262 --A OUTPUT -o eth1 -d fc00::/7 -j limit-263 --A OUTPUT -o eth1 -d fc00::/7 -j limit-264 --A OUTPUT -o eth1 -d fc00::/7 -j limit-265 --A OUTPUT -o eth1 -d fc00::/7 -j limit-266 --A OUTPUT -o eth1 -d fc00::/7 -j limit-267 --A OUTPUT -o eth1 -d fc00::/7 -j limit-268 --A OUTPUT -o eth1 -d fc00::/7 -j limit-269 --A OUTPUT -o eth1 -d fc00::/7 -j limit-270 --A OUTPUT -o eth1 -d fc00::/7 -j limit-271 --A OUTPUT -o eth1 -d fc00::/7 -j limit-272 --A OUTPUT -o eth1 -d fc00::/7 -j limit-273 --A OUTPUT -o eth1 -d fc00::/7 -j limit-274 --A OUTPUT -o eth1 -d fc00::/7 -j limit-275 --A OUTPUT -o eth1 -d fc00::/7 -j limit-276 --A OUTPUT -o eth1 -d fc00::/7 -j limit-277 --A OUTPUT -o eth1 -d fc00::/7 -j limit-278 --A OUTPUT -o eth1 -d fc00::/7 -j limit-279 --A OUTPUT -o eth1 -d fc00::/7 -j limit-280 --A OUTPUT -o eth1 -d fc00::/7 -j limit-281 --A OUTPUT -o eth1 -d fc00::/7 -j limit-282 --A OUTPUT -o eth1 -d fc00::/7 -j limit-283 --A OUTPUT -o eth1 -d fc00::/7 -j limit-284 --A OUTPUT -o eth1 -d fc00::/7 -j limit-285 --A OUTPUT -o eth1 -d fc00::/7 -j limit-286 --A OUTPUT -o eth1 -d fc00::/7 -j limit-287 --A OUTPUT -o eth1 -d fc00::/7 -j limit-288 --A OUTPUT -o eth1 -d fc00::/7 -j limit-289 --A OUTPUT -o eth1 -d fc00::/7 -j limit-290 --A OUTPUT -o eth1 -d fc00::/7 -j limit-291 --A OUTPUT -o eth1 -d fc00::/7 -j limit-292 --A OUTPUT -o eth1 -d fc00::/7 -j limit-293 --A OUTPUT -o eth1 -d fc00::/7 -j limit-294 --A OUTPUT -o eth1 -d fc00::/7 -j limit-295 --A OUTPUT -o eth1 -d fc00::/7 -j limit-296 --A OUTPUT -o eth1 -d fc00::/7 -j limit-297 --A OUTPUT -o eth1 -d fc00::/7 -j limit-298 --A OUTPUT -o eth1 -d fc00::/7 -j limit-299 --A OUTPUT -o eth1 -d fc00::/7 -j limit-300 --A OUTPUT -o eth1 -d fc00::/7 -j limit-301 --A OUTPUT -o eth1 -d fc00::/7 -j limit-302 --A OUTPUT -o eth1 -d fc00::/7 -j limit-303 --A OUTPUT -o eth1 -d fc00::/7 -j limit-304 --A OUTPUT -o eth1 -d fc00::/7 -j limit-305 --A OUTPUT -o eth1 -d fc00::/7 -j limit-306 --A OUTPUT -o eth1 -d fc00::/7 -j limit-307 --A OUTPUT -o eth1 -d fc00::/7 -j limit-308 --A OUTPUT -o eth1 -d fc00::/7 -j limit-309 --A OUTPUT -o eth1 -d fc00::/7 -j limit-310 --A OUTPUT -o eth1 -d fc00::/7 -j limit-311 --A OUTPUT -o eth1 -d fc00::/7 -j limit-312 --A OUTPUT -o eth1 -d fc00::/7 -j limit-313 --A OUTPUT -o eth1 -d fc00::/7 -j limit-314 --A OUTPUT -o eth1 -d fc00::/7 -j limit-315 --A OUTPUT -o eth1 -d fc00::/7 -j limit-316 --A OUTPUT -o eth1 -d fc00::/7 -j limit-317 --A OUTPUT -o eth1 -d fc00::/7 -j limit-318 --A OUTPUT -o eth1 -d fc00::/7 -j limit-319 --A OUTPUT -o eth1 -d fc00::/7 -j limit-320 --A OUTPUT -o eth1 -d fc00::/7 -j limit-321 --A OUTPUT -o eth1 -d fc00::/7 -j limit-322 --A OUTPUT -o eth1 -d fc00::/7 -j limit-323 --A OUTPUT -o eth1 -d fc00::/7 -j limit-324 --A OUTPUT -o eth1 -d fc00::/7 -j limit-325 --A OUTPUT -o eth1 -d fc00::/7 -j limit-326 --A OUTPUT -o eth1 -d fc00::/7 -j limit-327 --A OUTPUT -o eth1 -d fc00::/7 -j limit-328 --A OUTPUT -o eth1 -d fc00::/7 -j limit-329 --A OUTPUT -o eth1 -d fc00::/7 -j limit-330 --A OUTPUT -o eth1 -d fc00::/7 -j limit-331 --A OUTPUT -o eth1 -d fc00::/7 -j limit-332 --A OUTPUT -o eth1 -d fc00::/7 -j limit-333 --A OUTPUT -o eth1 -d fc00::/7 -j limit-334 --A OUTPUT -o eth1 -d fc00::/7 -j limit-335 --A OUTPUT -o eth1 -d fc00::/7 -j limit-336 --A OUTPUT -o eth1 -d fc00::/7 -j limit-337 --A OUTPUT -o eth1 -d fc00::/7 -j limit-338 --A OUTPUT -o eth1 -d fc00::/7 -j limit-339 --A OUTPUT -o eth1 -d fc00::/7 -j limit-340 --A OUTPUT -o eth1 -d fc00::/7 -j limit-341 --A OUTPUT -o eth1 -d fc00::/7 -j limit-342 --A OUTPUT -o eth1 -d fc00::/7 -j limit-343 --A OUTPUT -o eth1 -d fc00::/7 -j limit-344 --A OUTPUT -o eth1 -d fc00::/7 -j limit-345 --A OUTPUT -o eth1 -d fc00::/7 -j limit-346 --A OUTPUT -o eth1 -d fc00::/7 -j limit-347 --A OUTPUT -o eth1 -d fc00::/7 -j limit-348 --A OUTPUT -o eth1 -d fc00::/7 -j limit-349 --A OUTPUT -o eth1 -d fc00::/7 -j limit-350 --A OUTPUT -o eth1 -d fc00::/7 -j limit-351 --A OUTPUT -o eth1 -d fc00::/7 -j limit-352 --A OUTPUT -o eth1 -d fc00::/7 -j limit-353 --A OUTPUT -o eth1 -d fc00::/7 -j limit-354 --A OUTPUT -o eth1 -d fc00::/7 -j limit-355 --A OUTPUT -o eth1 -d fc00::/7 -j limit-356 --A OUTPUT -o eth1 -d fc00::/7 -j limit-357 --A OUTPUT -o eth1 -d fc00::/7 -j limit-358 --A OUTPUT -o eth1 -d fc00::/7 -j limit-359 --A OUTPUT -o eth1 -d fc00::/7 -j limit-360 --A OUTPUT -o eth1 -d fc00::/7 -j limit-361 --A OUTPUT -o eth1 -d fc00::/7 -j limit-362 --A OUTPUT -o eth1 -d fc00::/7 -j limit-363 --A OUTPUT -o eth1 -d fc00::/7 -j limit-364 --A OUTPUT -o eth1 -d fc00::/7 -j limit-365 --A OUTPUT -o eth1 -d fc00::/7 -j limit-366 --A OUTPUT -o eth1 -d fc00::/7 -j limit-367 --A OUTPUT -o eth1 -d fc00::/7 -j limit-368 --A OUTPUT -o eth1 -d fc00::/7 -j limit-369 --A OUTPUT -o eth1 -d fc00::/7 -j limit-370 --A OUTPUT -o eth1 -d fc00::/7 -j limit-371 --A OUTPUT -o eth1 -d fc00::/7 -j limit-372 --A OUTPUT -o eth1 -d fc00::/7 -j limit-373 --A OUTPUT -o eth1 -d fc00::/7 -j limit-374 --A OUTPUT -o eth1 -d fc00::/7 -j limit-375 --A OUTPUT -o eth1 -d fc00::/7 -j limit-376 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 --A OUTPUT -o eth1 -d fc00::/7 -j limit-378 --A OUTPUT -o eth1 -d fc00::/7 -j limit-379 --A OUTPUT -o eth1 -d fc00::/7 -j limit-380 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-138 --A OUTPUT -o eth1 -d fc00::/7 -j limit-382 --A OUTPUT -o eth1 -d fc00::/7 -j limit-383 --A OUTPUT -o eth1 -d fc00::/7 -j limit-384 --A OUTPUT -o eth1 -d fc00::/7 -j limit-385 --A OUTPUT -o eth1 -d fc00::/7 -j limit-386 --A OUTPUT -o eth1 -d fc00::/7 -j limit-387 --A OUTPUT -o eth1 -d fc00::/7 -j limit-388 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 --A OUTPUT -o eth1 -d fc00::/7 -j limit-390 --A OUTPUT -o eth1 -d fc00::/7 -j limit-391 --A OUTPUT -o eth1 -d fc00::/7 -j limit-392 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-150 --A OUTPUT -o eth1 -d fc00::/7 -j limit-394 --A OUTPUT -o eth1 -d fc00::/7 -j limit-395 --A OUTPUT -o eth1 -d fc00::/7 -j limit-396 --A OUTPUT -o eth1 -d fc00::/7 -j limit-397 --A OUTPUT -o eth1 -d fc00::/7 -j limit-398 --A OUTPUT -o eth1 -d fc00::/7 -j limit-399 --A OUTPUT -o eth1 -d fc00::/7 -j limit-400 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 --A OUTPUT -o eth1 -d fc00::/7 -j limit-402 --A OUTPUT -o eth1 -d fc00::/7 -j limit-403 --A OUTPUT -o eth1 -d fc00::/7 -j limit-404 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 --A OUTPUT -o eth1 -d fc00::/7 -j limit-406 --A OUTPUT -o eth1 -d fc00::/7 -j limit-407 --A OUTPUT -o eth1 -d fc00::/7 -j limit-408 --A OUTPUT -o eth1 -d fc00::/7 -j limit-409 --A OUTPUT -o eth1 -d fc00::/7 -j limit-410 --A OUTPUT -o eth1 -d fc00::/7 -j limit-411 --A OUTPUT -o eth1 -d fc00::/7 -j limit-412 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 --A OUTPUT -o eth1 -d fc00::/7 -j limit-414 --A OUTPUT -o eth1 -d fc00::/7 -j limit-415 --A OUTPUT -o eth1 -d fc00::/7 -j limit-416 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-174 --A OUTPUT -o eth1 -d fc00::/7 -j limit-418 --A OUTPUT -o eth1 -d fc00::/7 -j limit-419 --A OUTPUT -o eth1 -d fc00::/7 -j limit-420 --A OUTPUT -o eth1 -d fc00::/7 -j limit-421 --A OUTPUT -o eth1 -d fc00::/7 -j limit-422 --A OUTPUT -o eth1 -d fc00::/7 -j limit-423 --A OUTPUT -o eth1 -d fc00::/7 -j limit-424 --A OUTPUT -o eth1 -d fc00::/7 -j limit-425 --A OUTPUT -o eth1 -d fc00::/7 -j limit-426 --A OUTPUT -o eth1 -d fc00::/7 -j limit-427 --A OUTPUT -o eth1 -d fc00::/7 -j limit-428 --A OUTPUT -o eth1 -d fc00::/7 -j limit-429 --A OUTPUT -o eth1 -d fc00::/7 -j limit-430 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-432 --A OUTPUT -o eth1 -d fc00::/7 -j limit-433 --A OUTPUT -o eth1 -d fc00::/7 -j limit-434 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-436 --A OUTPUT -o eth1 -d fc00::/7 -j limit-437 --A OUTPUT -o eth1 -d fc00::/7 -j limit-438 --A OUTPUT -o eth1 -d fc00::/7 -j limit-439 --A OUTPUT -o eth1 -d fc00::/7 -j limit-440 --A OUTPUT -o eth1 -d fc00::/7 -j limit-441 --A OUTPUT -o eth1 -d fc00::/7 -j limit-442 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-444 --A OUTPUT -o eth1 -d fc00::/7 -j limit-445 --A OUTPUT -o eth1 -d fc00::/7 -j limit-446 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-448 --A OUTPUT -o eth1 -d fc00::/7 -j limit-449 --A OUTPUT -o eth1 -d fc00::/7 -j limit-450 --A OUTPUT -o eth1 -d fc00::/7 -j limit-451 --A OUTPUT -o eth1 -d fc00::/7 -j limit-452 --A OUTPUT -o eth1 -d fc00::/7 -j limit-453 --A OUTPUT -o eth1 -d fc00::/7 -j limit-454 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-456 --A OUTPUT -o eth1 -d fc00::/7 -j limit-457 --A OUTPUT -o eth1 -d fc00::/7 -j limit-458 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-460 --A OUTPUT -o eth1 -d fc00::/7 -j limit-461 --A OUTPUT -o eth1 -d fc00::/7 -j limit-462 --A OUTPUT -o eth1 -d fc00::/7 -j limit-463 --A OUTPUT -o eth1 -d fc00::/7 -j limit-464 --A OUTPUT -o eth1 -d fc00::/7 -j limit-465 --A OUTPUT -o eth1 -d fc00::/7 -j limit-466 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-468 --A OUTPUT -o eth1 -d fc00::/7 -j limit-469 --A OUTPUT -o eth1 -d fc00::/7 -j limit-470 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-472 --A OUTPUT -o eth1 -d fc00::/7 -j limit-473 --A OUTPUT -o eth1 -d fc00::/7 -j limit-474 --A OUTPUT -o eth1 -d fc00::/7 -j limit-475 --A OUTPUT -o eth1 -d fc00::/7 -j limit-476 --A OUTPUT -o eth1 -d fc00::/7 -j limit-477 --A OUTPUT -o eth1 -d fc00::/7 -j limit-478 --A OUTPUT -o eth1 -d fc00::/7 -j limit-479 --A OUTPUT -o eth1 -d fc00::/7 -j limit-480 --A OUTPUT -o eth1 -d fc00::/7 -j limit-481 --A OUTPUT -o eth1 -d fc00::/7 -j limit-482 --A OUTPUT -o eth1 -d fc00::/7 -j limit-483 --A OUTPUT -o eth1 -d fc00::/7 -j limit-484 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-486 --A OUTPUT -o eth1 -d fc00::/7 -j limit-487 --A OUTPUT -o eth1 -d fc00::/7 -j limit-488 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-490 --A OUTPUT -o eth1 -d fc00::/7 -j limit-491 --A OUTPUT -o eth1 -d fc00::/7 -j limit-492 --A OUTPUT -o eth1 -d fc00::/7 -j limit-493 --A OUTPUT -o eth1 -d fc00::/7 -j limit-494 --A OUTPUT -o eth1 -d fc00::/7 -j limit-495 --A OUTPUT -o eth1 -d fc00::/7 -j limit-496 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-498 --A OUTPUT -o eth1 -d fc00::/7 -j limit-499 --A OUTPUT -o eth1 -d fc00::/7 -j limit-500 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-502 --A OUTPUT -o eth1 -d fc00::/7 -j limit-503 --A OUTPUT -o eth1 -d fc00::/7 -j limit-504 --A OUTPUT -o eth1 -d fc00::/7 -j limit-505 --A OUTPUT -o eth1 -d fc00::/7 -j limit-506 --A OUTPUT -o eth1 -d fc00::/7 -j limit-507 --A OUTPUT -o eth1 -d fc00::/7 -j limit-508 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-510 --A OUTPUT -o eth1 -d fc00::/7 -j limit-511 --A OUTPUT -o eth1 -d fc00::/7 -j limit-512 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-514 --A OUTPUT -o eth1 -d fc00::/7 -j limit-515 --A OUTPUT -o eth1 -d fc00::/7 -j limit-516 --A OUTPUT -o eth1 -d fc00::/7 -j limit-517 --A OUTPUT -o eth1 -d fc00::/7 -j limit-518 --A OUTPUT -o eth1 -d fc00::/7 -j limit-519 --A OUTPUT -o eth1 -d fc00::/7 -j limit-520 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-522 --A OUTPUT -o eth1 -d fc00::/7 -j limit-523 --A OUTPUT -o eth1 -d fc00::/7 -j limit-524 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-526 --A OUTPUT -o eth1 -d fc00::/7 -j limit-527 --A OUTPUT -o eth1 -d fc00::/7 -j limit-528 --A OUTPUT -o eth1 -d fc00::/7 -j limit-529 --A OUTPUT -o eth1 -d fc00::/7 -j limit-530 --A OUTPUT -o eth1 -d fc00::/7 -j limit-531 --A OUTPUT -o eth1 -d fc00::/7 -j limit-532 --A OUTPUT -o eth1 -d fc00::/7 -j limit-533 --A OUTPUT -o eth1 -d fc00::/7 -j limit-534 --A OUTPUT -o eth1 -d fc00::/7 -j limit-535 --A OUTPUT -o eth1 -d fc00::/7 -j limit-536 --A OUTPUT -o eth1 -d fc00::/7 -j limit-537 --A OUTPUT -o eth1 -d fc00::/7 -j limit-538 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 --A OUTPUT -o eth1 -d fc00::/7 -j limit-540 --A OUTPUT -o eth1 -d fc00::/7 -j limit-541 --A OUTPUT -o eth1 -d fc00::/7 -j limit-542 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-192 --A OUTPUT -o eth1 -d fc00::/7 -j limit-544 --A OUTPUT -o eth1 -d fc00::/7 -j limit-545 --A OUTPUT -o eth1 -d fc00::/7 -j limit-546 --A OUTPUT -o eth1 -d fc00::/7 -j limit-547 --A OUTPUT -o eth1 -d fc00::/7 -j limit-548 --A OUTPUT -o eth1 -d fc00::/7 -j limit-549 --A OUTPUT -o eth1 -d fc00::/7 -j limit-550 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 --A OUTPUT -o eth1 -d fc00::/7 -j limit-552 --A OUTPUT -o eth1 -d fc00::/7 -j limit-553 --A OUTPUT -o eth1 -d fc00::/7 -j limit-554 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-204 --A OUTPUT -o eth1 -d fc00::/7 -j limit-556 --A OUTPUT -o eth1 -d fc00::/7 -j limit-557 --A OUTPUT -o eth1 -d fc00::/7 -j limit-558 --A OUTPUT -o eth1 -d fc00::/7 -j limit-559 --A OUTPUT -o eth1 -d fc00::/7 -j limit-560 --A OUTPUT -o eth1 -d fc00::/7 -j limit-561 --A OUTPUT -o eth1 -d fc00::/7 -j limit-562 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 --A OUTPUT -o eth1 -d fc00::/7 -j limit-564 --A OUTPUT -o eth1 -d fc00::/7 -j limit-565 --A OUTPUT -o eth1 -d fc00::/7 -j limit-566 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 --A OUTPUT -o eth1 -d fc00::/7 -j limit-568 --A OUTPUT -o eth1 -d fc00::/7 -j limit-569 --A OUTPUT -o eth1 -d fc00::/7 -j limit-570 --A OUTPUT -o eth1 -d fc00::/7 -j limit-571 --A OUTPUT -o eth1 -d fc00::/7 -j limit-572 --A OUTPUT -o eth1 -d fc00::/7 -j limit-573 --A OUTPUT -o eth1 -d fc00::/7 -j limit-574 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 --A OUTPUT -o eth1 -d fc00::/7 -j limit-576 --A OUTPUT -o eth1 -d fc00::/7 -j limit-577 --A OUTPUT -o eth1 -d fc00::/7 -j limit-578 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-228 --A OUTPUT -o eth1 -d fc00::/7 -j limit-580 --A OUTPUT -o eth1 -d fc00::/7 -j limit-581 --A OUTPUT -o eth1 -d fc00::/7 -j limit-582 --A OUTPUT -o eth1 -d fc00::/7 -j limit-583 --A OUTPUT -o eth1 -d fc00::/7 -j limit-584 --A OUTPUT -o eth1 -d fc00::/7 -j limit-585 --A OUTPUT -o eth1 -d fc00::/7 -j limit-586 --A OUTPUT -o eth1 -d fc00::/7 -j limit-587 --A OUTPUT -o eth1 -d fc00::/7 -j limit-588 --A OUTPUT -o eth1 -d fc00::/7 -j limit-589 --A OUTPUT -o eth1 -d fc00::/7 -j limit-590 --A OUTPUT -o eth1 -d fc00::/7 -j limit-591 --A OUTPUT -o eth1 -d fc00::/7 -j limit-592 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-594 --A OUTPUT -o eth1 -d fc00::/7 -j limit-595 --A OUTPUT -o eth1 -d fc00::/7 -j limit-596 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-598 --A OUTPUT -o eth1 -d fc00::/7 -j limit-599 --A OUTPUT -o eth1 -d fc00::/7 -j limit-600 --A OUTPUT -o eth1 -d fc00::/7 -j limit-601 --A OUTPUT -o eth1 -d fc00::/7 -j limit-602 --A OUTPUT -o eth1 -d fc00::/7 -j limit-603 --A OUTPUT -o eth1 -d fc00::/7 -j limit-604 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-606 --A OUTPUT -o eth1 -d fc00::/7 -j limit-607 --A OUTPUT -o eth1 -d fc00::/7 -j limit-608 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-610 --A OUTPUT -o eth1 -d fc00::/7 -j limit-611 --A OUTPUT -o eth1 -d fc00::/7 -j limit-612 --A OUTPUT -o eth1 -d fc00::/7 -j limit-613 --A OUTPUT -o eth1 -d fc00::/7 -j limit-614 --A OUTPUT -o eth1 -d fc00::/7 -j limit-615 --A OUTPUT -o eth1 -d fc00::/7 -j limit-616 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-618 --A OUTPUT -o eth1 -d fc00::/7 -j limit-619 --A OUTPUT -o eth1 -d fc00::/7 -j limit-620 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-622 --A OUTPUT -o eth1 -d fc00::/7 -j limit-623 --A OUTPUT -o eth1 -d fc00::/7 -j limit-624 --A OUTPUT -o eth1 -d fc00::/7 -j limit-625 --A OUTPUT -o eth1 -d fc00::/7 -j limit-626 --A OUTPUT -o eth1 -d fc00::/7 -j limit-627 --A OUTPUT -o eth1 -d fc00::/7 -j limit-628 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-630 --A OUTPUT -o eth1 -d fc00::/7 -j limit-631 --A OUTPUT -o eth1 -d fc00::/7 -j limit-632 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-634 --A OUTPUT -o eth1 -d fc00::/7 -j limit-635 --A OUTPUT -o eth1 -d fc00::/7 -j limit-636 --A OUTPUT -o eth1 -d fc00::/7 -j limit-637 --A OUTPUT -o eth1 -d fc00::/7 -j limit-638 --A OUTPUT -o eth1 -d fc00::/7 -j limit-639 --A OUTPUT -o eth1 -d fc00::/7 -j limit-640 --A OUTPUT -o eth1 -d fc00::/7 -j limit-641 --A OUTPUT -o eth1 -d fc00::/7 -j limit-642 --A OUTPUT -o eth1 -d fc00::/7 -j limit-643 --A OUTPUT -o eth1 -d fc00::/7 -j limit-644 --A OUTPUT -o eth1 -d fc00::/7 -j limit-645 --A OUTPUT -o eth1 -d fc00::/7 -j limit-646 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-648 --A OUTPUT -o eth1 -d fc00::/7 -j limit-649 --A OUTPUT -o eth1 -d fc00::/7 -j limit-650 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-652 --A OUTPUT -o eth1 -d fc00::/7 -j limit-653 --A OUTPUT -o eth1 -d fc00::/7 -j limit-654 --A OUTPUT -o eth1 -d fc00::/7 -j limit-655 --A OUTPUT -o eth1 -d fc00::/7 -j limit-656 --A OUTPUT -o eth1 -d fc00::/7 -j limit-657 --A OUTPUT -o eth1 -d fc00::/7 -j limit-658 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-660 --A OUTPUT -o eth1 -d fc00::/7 -j limit-661 --A OUTPUT -o eth1 -d fc00::/7 -j limit-662 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-664 --A OUTPUT -o eth1 -d fc00::/7 -j limit-665 --A OUTPUT -o eth1 -d fc00::/7 -j limit-666 --A OUTPUT -o eth1 -d fc00::/7 -j limit-667 --A OUTPUT -o eth1 -d fc00::/7 -j limit-668 --A OUTPUT -o eth1 -d fc00::/7 -j limit-669 --A OUTPUT -o eth1 -d fc00::/7 -j limit-670 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-672 --A OUTPUT -o eth1 -d fc00::/7 -j limit-673 --A OUTPUT -o eth1 -d fc00::/7 -j limit-674 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-676 --A OUTPUT -o eth1 -d fc00::/7 -j limit-677 --A OUTPUT -o eth1 -d fc00::/7 -j limit-678 --A OUTPUT -o eth1 -d fc00::/7 -j limit-679 --A OUTPUT -o eth1 -d fc00::/7 -j limit-680 --A OUTPUT -o eth1 -d fc00::/7 -j limit-681 --A OUTPUT -o eth1 -d fc00::/7 -j limit-682 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-684 --A OUTPUT -o eth1 -d fc00::/7 -j limit-685 --A OUTPUT -o eth1 -d fc00::/7 -j limit-686 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-688 --A OUTPUT -o eth1 -d fc00::/7 -j limit-689 --A OUTPUT -o eth1 -d fc00::/7 -j limit-690 --A OUTPUT -o eth1 -d fc00::/7 -j limit-691 --A OUTPUT -o eth1 -d fc00::/7 -j limit-692 --A OUTPUT -o eth1 -d fc00::/7 -j limit-693 --A OUTPUT -o eth1 -d fc00::/7 -j limit-694 --A OUTPUT -o eth1 -d fc00::/7 -j limit-695 --A OUTPUT -o eth1 -d fc00::/7 -j limit-696 --A OUTPUT -o eth1 -d fc00::/7 -j limit-697 --A OUTPUT -o eth1 -d fc00::/7 -j limit-698 --A OUTPUT -o eth1 -d fc00::/7 -j limit-699 --A OUTPUT -o eth1 -d fc00::/7 -j limit-700 --A OUTPUT -o eth1 -d fc00::/7 -j limit-701 --A OUTPUT -o eth1 -d fc00::/7 -j limit-702 --A OUTPUT -o eth1 -d fc00::/7 -j limit-703 --A OUTPUT -o eth1 -d fc00::/7 -j limit-704 --A OUTPUT -o eth1 -d fc00::/7 -j limit-705 --A OUTPUT -o eth1 -d fc00::/7 -j limit-706 --A OUTPUT -o eth1 -d fc00::/7 -j limit-707 --A OUTPUT -o eth1 -d fc00::/7 -j limit-708 --A OUTPUT -o eth1 -d fc00::/7 -j limit-709 --A OUTPUT -o eth1 -d fc00::/7 -j limit-710 --A OUTPUT -o eth1 -d fc00::/7 -j limit-711 --A OUTPUT -o eth1 -d fc00::/7 -j limit-712 --A OUTPUT -o eth1 -d fc00::/7 -j limit-713 --A OUTPUT -o eth1 -d fc00::/7 -j limit-714 --A OUTPUT -o eth1 -d fc00::/7 -j limit-715 --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-0 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-1 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-2 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-3 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-4 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-5 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-6 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-7 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-8 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-9 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-10 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-11 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-12 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-13 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-14 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-15 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-16 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-17 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-18 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-19 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-20 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-21 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-22 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-23 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-24 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-25 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-26 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-27 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-28 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-29 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-30 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-31 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-32 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-33 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-34 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-35 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-36 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-37 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-38 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-39 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-40 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-41 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-42 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-43 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-44 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-45 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-46 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-47 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-48 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-49 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-50 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-51 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-52 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-53 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-54 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-55 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-56 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-57 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-58 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-59 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-60 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-61 --A OUTPUT -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -m recent --name user:C --rsource --mask fe00:: --set --A OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set --A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-457 --A OUTPUT --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT --A OUTPUT -j logaccept-84 --A OUTPUT -j logdrop-458 --A OUTPUT -j logpass-50 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT --A OUTPUT -p tcp --dport 80 -j ACCEPT --A OUTPUT -p esp -j ACCEPT --A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT --A OUTPUT -p icmpv6 -j ACCEPT --A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT --A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT --A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT --A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT --A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 --A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 --A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 --A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-100 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-100 -j ACCEPT --A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1007 -m limit --limit 1/second -j LOG --A limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-101 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1019 -m limit --limit 1/second -j LOG --A limit-102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1022 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1022 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1023 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1023 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1024 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1024 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1025 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1025 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1026 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1026 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1027 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1027 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1029 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-103 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1031 -m limit --limit 1/second -j LOG --A limit-1032 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1033 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1034 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1035 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1036 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1037 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1038 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1039 -m recent --name user:C --rdest --mask fe00:: --set --A limit-104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-104 -m limit --limit 1/second -j LOG --A limit-104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1040 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1041 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1043 -m limit --limit 1/second -j LOG --A limit-1044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1045 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1046 -j RETURN --A limit-1046 -m limit --limit 1/second -j LOG --A limit-1046 -j DROP --A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1047 -j RETURN --A limit-1047 -m limit --limit 1/second -j LOG --A limit-1047 -j DROP --A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j RETURN --A limit-1048 -m limit --limit 1/second -j LOG --A limit-1048 -j DROP --A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1049 -j RETURN --A limit-1049 -m limit --limit 1/second -j LOG --A limit-1049 -j DROP --A limit-105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-105 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1050 -j RETURN --A limit-1050 -m limit --limit 1/second -j LOG --A limit-1050 -j DROP --A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1051 -j RETURN --A limit-1051 -m limit --limit 1/second -j LOG --A limit-1051 -j DROP --A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j RETURN --A limit-1052 -m limit --limit 1/second -j LOG --A limit-1052 -j DROP --A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1053 -j RETURN --A limit-1053 -m limit --limit 1/second -j LOG --A limit-1053 -j DROP --A limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1054 -j RETURN --A limit-1054 -j DROP --A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1055 -j RETURN --A limit-1055 -j DROP --A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j RETURN --A limit-1056 -j DROP --A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1057 -j RETURN --A limit-1057 -j DROP --A limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1058 -j RETURN --A limit-1058 -j DROP --A limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1059 -j RETURN --A limit-1059 -j DROP --A limit-106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j RETURN --A limit-1060 -j DROP --A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1061 -j RETURN --A limit-1061 -j DROP --A limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1062 -j RETURN --A limit-1062 -m limit --limit 1/second -j LOG --A limit-1062 -j DROP --A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1063 -j RETURN --A limit-1063 -m limit --limit 1/second -j LOG --A limit-1063 -j DROP --A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j RETURN --A limit-1064 -m limit --limit 1/second -j LOG --A limit-1064 -j DROP --A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1065 -j RETURN --A limit-1065 -m limit --limit 1/second -j LOG --A limit-1065 -j DROP --A limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1066 -j RETURN --A limit-1066 -j DROP --A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1067 -j RETURN --A limit-1067 -j DROP --A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j RETURN --A limit-1068 -j DROP --A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1069 -j RETURN --A limit-1069 -j DROP --A limit-107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-107 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1070 -j RETURN --A limit-1070 -j DROP --A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1071 -j RETURN --A limit-1071 -j DROP --A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j RETURN --A limit-1072 -j DROP --A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1073 -j RETURN --A limit-1073 -j DROP --A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-343 --A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-344 --A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-345 --A limit-1076 -m limit --limit 1/second -j LOG --A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-346 --A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-347 --A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-348 --A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-108 -j ACCEPT --A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-349 --A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-350 --A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-351 --A limit-1082 -m limit --limit 1/second -j LOG --A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-352 --A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-353 --A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-354 --A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-355 --A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-356 --A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-357 --A limit-1088 -m limit --limit 1/second -j LOG --A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-358 --A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-109 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-359 --A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-360 --A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-361 --A limit-1092 -j ACCEPT --A limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-363 --A limit-1094 -m limit --limit 1/second -j LOG --A limit-1094 -j ACCEPT --A limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-364 --A limit-1095 -m limit --limit 1/second -j LOG --A limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-365 --A limit-1096 -j ACCEPT --A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-367 --A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-368 --A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 --A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-110 -m limit --limit 1/second -j LOG --A limit-110 -j ACCEPT --A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-369 --A limit-1100 -m limit --limit 1/second -j LOG --A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-370 --A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-371 --A limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-372 --A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-373 --A limit-1104 -j ACCEPT --A limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-375 --A limit-1106 -m limit --limit 1/second -j LOG --A limit-1106 -j ACCEPT --A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-376 --A limit-1107 -m limit --limit 1/second -j LOG --A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-377 --A limit-1108 -j ACCEPT --A limit-111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-111 -m limit --limit 1/second -j LOG --A limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-379 --A limit-1110 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-380 --A limit-1111 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-381 --A limit-1112 -m limit --limit 1/second -j LOG --A limit-1112 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-382 --A limit-1113 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-383 --A limit-1114 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-384 --A limit-1115 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-385 --A limit-1116 -j ACCEPT --A limit-1118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-387 --A limit-1118 -m limit --limit 1/second -j LOG --A limit-1118 -j ACCEPT --A limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-388 --A limit-1119 -m limit --limit 1/second -j LOG --A limit-112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-112 -j ACCEPT --A limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-389 --A limit-1120 -j ACCEPT --A limit-1122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-391 --A limit-1122 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-392 --A limit-1123 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-393 --A limit-1124 -m limit --limit 1/second -j LOG --A limit-1124 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-394 --A limit-1125 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-395 --A limit-1126 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-396 --A limit-1127 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1128 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-397 --A limit-1128 -j ACCEPT --A limit-113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1130 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-399 --A limit-1130 -m limit --limit 1/second -j LOG --A limit-1130 -j ACCEPT --A limit-1131 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-400 --A limit-1131 -m limit --limit 1/second -j LOG --A limit-1132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-401 --A limit-1132 -j ACCEPT --A limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1135 -m recent --name limit-1135 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1135 -m recent --name limit-1135 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1136 -m recent --name limit-1136 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1136 -m limit --limit 1/second -j LOG --A limit-1136 -m recent --name limit-1136 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1137 -m recent --name limit-1137 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1137 -m recent --name limit-1137 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1138 -m recent --name limit-1138 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1138 -m recent --name limit-1138 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1139 -m recent --name limit-1139 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1139 -m recent --name limit-1139 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1142 -m limit --limit 1/second -j LOG --A limit-1142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1145 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1145 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1146 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1146 -j ACCEPT --A limit-1148 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1148 -m limit --limit 1/second -j LOG --A limit-1148 -j ACCEPT --A limit-1149 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1149 -m limit --limit 1/second -j LOG --A limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1150 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1150 -j ACCEPT --A limit-1152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1154 -m limit --limit 1/second -j LOG --A limit-1154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1158 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1158 -j ACCEPT --A limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-116 -m limit --limit 1/second -j LOG --A limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1160 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1160 -m limit --limit 1/second -j LOG --A limit-1160 -j ACCEPT --A limit-1161 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1161 -m limit --limit 1/second -j LOG --A limit-1162 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1162 -j ACCEPT --A limit-1164 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1164 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1165 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1165 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1166 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1166 -m limit --limit 1/second -j LOG --A limit-1166 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1167 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1167 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1168 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1168 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1169 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1169 -m recent --name user:C --rsource --mask fe00:: --set --A limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1170 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1170 -j ACCEPT --A limit-1172 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1172 -m limit --limit 1/second -j LOG --A limit-1172 -j ACCEPT --A limit-1173 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1173 -m limit --limit 1/second -j LOG --A limit-1174 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1174 -j ACCEPT --A limit-1176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1177 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1178 -m limit --limit 1/second -j LOG --A limit-1178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1179 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1180 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1180 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1181 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1181 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1182 -j ACCEPT --A limit-1184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1184 -m limit --limit 1/second -j LOG --A limit-1184 -j ACCEPT --A limit-1185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1185 -m limit --limit 1/second -j LOG --A limit-1186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1186 -j ACCEPT --A limit-1188 -m recent --name limit-1188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1188 -m recent --name limit-1188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1189 -m recent --name limit-1189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1189 -m recent --name limit-1189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1190 -m recent --name limit-1190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1190 -m limit --limit 1/second -j LOG --A limit-1190 -m recent --name limit-1190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1191 -m recent --name limit-1191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1191 -m recent --name limit-1191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1192 -m recent --name limit-1192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1192 -m recent --name limit-1192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1193 -m recent --name limit-1193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1193 -m recent --name limit-1193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1196 -m limit --limit 1/second -j LOG --A limit-1196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 --A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1200 -j ACCEPT --A limit-1202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1202 -m limit --limit 1/second -j LOG --A limit-1202 -j ACCEPT --A limit-1203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1203 -m limit --limit 1/second -j LOG --A limit-1204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1204 -j ACCEPT --A limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1208 -m limit --limit 1/second -j LOG --A limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1212 -j ACCEPT --A limit-1214 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1214 -m limit --limit 1/second -j LOG --A limit-1214 -j ACCEPT --A limit-1215 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1215 -m limit --limit 1/second -j LOG --A limit-1216 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1216 -j ACCEPT --A limit-1218 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1218 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1219 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1219 -m recent --name user:C --rsource --mask fe00:: --set --A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-122 -m limit --limit 1/second -j LOG --A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1220 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1220 -m limit --limit 1/second -j LOG --A limit-1220 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1221 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1221 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1222 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1222 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1223 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1223 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1224 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1224 -j ACCEPT --A limit-1226 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1226 -m limit --limit 1/second -j LOG --A limit-1226 -j ACCEPT --A limit-1227 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1227 -m limit --limit 1/second -j LOG --A limit-1228 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1228 -j ACCEPT --A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1230 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1230 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1231 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1231 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1232 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1232 -m limit --limit 1/second -j LOG --A limit-1232 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1233 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1233 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1234 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1234 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1235 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1235 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1236 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1236 -j ACCEPT --A limit-1238 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1238 -m limit --limit 1/second -j LOG --A limit-1238 -j ACCEPT --A limit-1239 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1239 -m limit --limit 1/second -j LOG --A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1240 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1240 -j ACCEPT --A limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 --A limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 --A limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 --A limit-1244 -m limit --limit 1/second -j LOG --A limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 --A limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 --A limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 --A limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 --A limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-410 --A limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-411 --A limit-1250 -m limit --limit 1/second -j LOG --A limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-412 --A limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-413 --A limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-414 --A limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 --A limit-1254 -j ACCEPT --A limit-1256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 --A limit-1256 -m limit --limit 1/second -j LOG --A limit-1256 -j ACCEPT --A limit-1257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 --A limit-1257 -m limit --limit 1/second -j LOG --A limit-1258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 --A limit-1258 -j ACCEPT --A limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-126 -j ACCEPT --A limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-421 --A limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-422 --A limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-423 --A limit-1262 -m limit --limit 1/second -j LOG --A limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-424 --A limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-425 --A limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-426 --A limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-427 --A limit-1266 -j ACCEPT --A limit-1268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-429 --A limit-1268 -m limit --limit 1/second -j LOG --A limit-1268 -j ACCEPT --A limit-1269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-430 --A limit-1269 -m limit --limit 1/second -j LOG --A limit-127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-431 --A limit-1270 -j ACCEPT --A limit-1272 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-433 --A limit-1272 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1273 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-434 --A limit-1273 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1274 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-435 --A limit-1274 -m limit --limit 1/second -j LOG --A limit-1274 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1275 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-436 --A limit-1275 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1276 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-437 --A limit-1276 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1277 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-438 --A limit-1277 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 --A limit-1278 -j ACCEPT --A limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-128 -m limit --limit 1/second -j LOG --A limit-128 -j ACCEPT --A limit-1280 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-441 --A limit-1280 -m limit --limit 1/second -j LOG --A limit-1280 -j ACCEPT --A limit-1281 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-442 --A limit-1281 -m limit --limit 1/second -j LOG --A limit-1282 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-443 --A limit-1282 -j ACCEPT --A limit-1284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 --A limit-1284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 --A limit-1285 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 --A limit-1286 -m limit --limit 1/second -j LOG --A limit-1286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 --A limit-1287 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1288 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 --A limit-1288 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1289 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-450 --A limit-1289 -m recent --name user:C --rdest --mask fe00:: --set --A limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-129 -m limit --limit 1/second -j LOG --A limit-1290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 --A limit-1290 -j ACCEPT --A limit-1292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 --A limit-1292 -m limit --limit 1/second -j LOG --A limit-1292 -j ACCEPT --A limit-1293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 --A limit-1293 -m limit --limit 1/second -j LOG --A limit-1294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 --A limit-1294 -j ACCEPT --A limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1297 -m recent --name limit-1297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1297 -m recent --name limit-1297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1298 -m recent --name limit-1298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1298 -m limit --limit 1/second -j LOG --A limit-1298 -m recent --name limit-1298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 --A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-130 -j ACCEPT --A limit-1300 -m recent --name limit-1300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1300 -m recent --name limit-1300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1301 -m recent --name limit-1301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1301 -m recent --name limit-1301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1304 -m limit --limit 1/second -j LOG --A limit-1304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1308 -j ACCEPT --A limit-131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1310 -m limit --limit 1/second -j LOG --A limit-1310 -j ACCEPT --A limit-1311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1311 -m limit --limit 1/second -j LOG --A limit-1312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1312 -j ACCEPT --A limit-1314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1316 -m limit --limit 1/second -j LOG --A limit-1316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1320 -j ACCEPT --A limit-1322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1322 -m limit --limit 1/second -j LOG --A limit-1322 -j ACCEPT --A limit-1323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1323 -m limit --limit 1/second -j LOG --A limit-1324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1324 -j ACCEPT --A limit-1326 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1326 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1327 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1327 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1328 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1328 -m limit --limit 1/second -j LOG --A limit-1328 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1329 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1329 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1331 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1332 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1332 -j ACCEPT --A limit-1334 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1334 -m limit --limit 1/second -j LOG --A limit-1334 -j ACCEPT --A limit-1335 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1335 -m limit --limit 1/second -j LOG --A limit-1336 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1336 -j ACCEPT --A limit-1338 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1338 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1339 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1339 -m recent --name user:C --rdest --mask fe00:: --set --A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-134 -m limit --limit 1/second -j LOG --A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1340 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1340 -m limit --limit 1/second -j LOG --A limit-1340 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1341 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1341 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1342 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1342 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1343 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1343 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1344 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1344 -j ACCEPT --A limit-1346 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1346 -m limit --limit 1/second -j LOG --A limit-1346 -j ACCEPT --A limit-1347 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1347 -m limit --limit 1/second -j LOG --A limit-1348 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1348 -j ACCEPT --A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1352 -m limit --limit 1/second -j LOG --A limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1358 -m limit --limit 1/second -j LOG --A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1362 -j ACCEPT --A limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1364 -m limit --limit 1/second -j LOG --A limit-1364 -j ACCEPT --A limit-1365 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1365 -m limit --limit 1/second -j LOG --A limit-1366 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1366 -j ACCEPT --A limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1370 -m limit --limit 1/second -j LOG --A limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1374 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1374 -j ACCEPT --A limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1376 -m limit --limit 1/second -j LOG --A limit-1376 -j ACCEPT --A limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1377 -m limit --limit 1/second -j LOG --A limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1378 -j ACCEPT --A limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-138 -j ACCEPT --A limit-1380 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1380 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1381 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1381 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1382 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1382 -m limit --limit 1/second -j LOG --A limit-1382 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1383 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1383 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1384 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1384 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1385 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1385 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1386 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1386 -j ACCEPT --A limit-1388 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1388 -m limit --limit 1/second -j LOG --A limit-1388 -j ACCEPT --A limit-1389 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1389 -m limit --limit 1/second -j LOG --A limit-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1390 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1390 -j ACCEPT --A limit-1392 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1392 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1393 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1393 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1394 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1394 -m limit --limit 1/second -j LOG --A limit-1394 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1395 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1395 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1396 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1396 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1397 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1397 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1398 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1398 -j ACCEPT --A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 --A limit-14 -m limit --limit 1/second -j LOG --A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-140 -m limit --limit 1/second -j LOG --A limit-140 -j ACCEPT --A limit-1400 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1400 -m limit --limit 1/second -j LOG --A limit-1400 -j ACCEPT --A limit-1401 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1401 -m limit --limit 1/second -j LOG --A limit-1402 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1402 -j ACCEPT --A limit-1404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1404 -j ACCEPT --A limit-1404 -m limit --limit 1/second -j LOG --A limit-1404 -j DROP --A limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1405 -j RETURN --A limit-1405 -m limit --limit 1/second -j LOG --A limit-1405 -j DROP --A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1406 -j logaccept-77 --A limit-1406 -m limit --limit 1/second -j LOG --A limit-1406 -j DROP --A limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1407 -j ACCEPT --A limit-1407 -m limit --limit 1/second -j LOG --A limit-1407 -j DROP --A limit-1408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1408 -j ACCEPT --A limit-1408 -m limit --limit 1/second -j LOG --A limit-1408 -j DROP --A limit-1409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1409 -j RETURN --A limit-1409 -m limit --limit 1/second -j LOG --A limit-1409 -j DROP --A limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-141 -m limit --limit 1/second -j LOG --A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1410 -j logaccept-78 --A limit-1410 -m limit --limit 1/second -j LOG --A limit-1410 -j DROP --A limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1411 -j ACCEPT --A limit-1411 -m limit --limit 1/second -j LOG --A limit-1411 -j DROP --A limit-1412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1412 -j ACCEPT --A limit-1412 -j DROP --A limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1413 -j RETURN --A limit-1413 -j DROP --A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1414 -j logaccept-79 --A limit-1414 -j DROP --A limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1415 -j ACCEPT --A limit-1415 -j DROP --A limit-1416 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1416 -j ACCEPT --A limit-1416 -j DROP --A limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1417 -j RETURN --A limit-1417 -j DROP --A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1418 -j logaccept-80 --A limit-1418 -j DROP --A limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1419 -j ACCEPT --A limit-1419 -j DROP --A limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-142 -j ACCEPT --A limit-1420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1420 -j ACCEPT --A limit-1420 -m limit --limit 1/second -j LOG --A limit-1420 -j DROP --A limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1421 -j RETURN --A limit-1421 -m limit --limit 1/second -j LOG --A limit-1421 -j DROP --A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1422 -j logaccept-81 --A limit-1422 -m limit --limit 1/second -j LOG --A limit-1422 -j DROP --A limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1423 -j ACCEPT --A limit-1423 -m limit --limit 1/second -j LOG --A limit-1423 -j DROP --A limit-1424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1424 -j ACCEPT --A limit-1424 -j DROP --A limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1425 -j RETURN --A limit-1425 -j DROP --A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1426 -j logaccept-82 --A limit-1426 -j DROP --A limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1427 -j ACCEPT --A limit-1427 -j DROP --A limit-1428 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1428 -j ACCEPT --A limit-1428 -j DROP --A limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1429 -j RETURN --A limit-1429 -j DROP --A limit-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1430 -j logaccept-83 --A limit-1430 -j DROP --A limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1431 -j ACCEPT --A limit-1431 -j DROP --A limit-144 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-144 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-145 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-145 -m recent --name user:C --rsource --mask fe00:: --set --A limit-146 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-146 -m limit --limit 1/second -j LOG --A limit-146 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-147 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-147 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-148 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-148 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-149 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-149 -m recent --name user:C --rsource --mask fe00:: --set --A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 --A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-150 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-150 -j ACCEPT --A limit-151 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-152 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-152 -m limit --limit 1/second -j LOG --A limit-152 -j ACCEPT --A limit-153 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-153 -m limit --limit 1/second -j LOG --A limit-154 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-154 -j ACCEPT --A limit-155 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-156 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-156 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-157 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-157 -m recent --name user:C --rdest --mask fe00:: --set --A limit-158 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-158 -m limit --limit 1/second -j LOG --A limit-158 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-159 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-159 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 --A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-160 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-160 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-161 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-161 -m recent --name user:C --rdest --mask fe00:: --set --A limit-162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-162 -j ACCEPT --A limit-163 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-164 -m limit --limit 1/second -j LOG --A limit-164 -j ACCEPT --A limit-165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-165 -m limit --limit 1/second -j LOG --A limit-166 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-166 -j ACCEPT --A limit-167 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 --A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 --A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 --A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 --A limit-170 -m limit --limit 1/second -j LOG --A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 --A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 --A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 --A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 --A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 --A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 --A limit-176 -m limit --limit 1/second -j LOG --A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 --A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 --A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-72 --A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 --A limit-18 -j ACCEPT --A limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 --A limit-180 -j ACCEPT --A limit-181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 --A limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 --A limit-182 -m limit --limit 1/second -j LOG --A limit-182 -j ACCEPT --A limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 --A limit-183 -m limit --limit 1/second -j LOG --A limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 --A limit-184 -j ACCEPT --A limit-185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78 --A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 --A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 --A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 --A limit-188 -m limit --limit 1/second -j LOG --A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 --A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-20 --A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 --A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-84 --A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 --A limit-192 -j ACCEPT --A limit-193 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 --A limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 --A limit-194 -m limit --limit 1/second -j LOG --A limit-194 -j ACCEPT --A limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 --A limit-195 -m limit --limit 1/second -j LOG --A limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 --A limit-196 -j ACCEPT --A limit-197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90 --A limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 --A limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 --A limit-199 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 --A limit-2 -m limit --limit 1/second -j LOG --A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 --A limit-20 -m limit --limit 1/second -j LOG --A limit-20 -j ACCEPT --A limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 --A limit-200 -m limit --limit 1/second -j LOG --A limit-200 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 --A limit-201 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 --A limit-202 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-96 --A limit-203 -m recent --name user:C --rsource --mask fe00:: --set --A limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 --A limit-204 -j ACCEPT --A limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 --A limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 --A limit-206 -m limit --limit 1/second -j LOG --A limit-206 -j ACCEPT --A limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 --A limit-207 -m limit --limit 1/second -j LOG --A limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 --A limit-208 -j ACCEPT --A limit-209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102 --A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 --A limit-21 -m limit --limit 1/second -j LOG --A limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 --A limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 --A limit-211 -m recent --name user:C --rdest --mask fe00:: --set --A limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 --A limit-212 -m limit --limit 1/second -j LOG --A limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 --A limit-213 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 --A limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-108 --A limit-215 -m recent --name user:C --rdest --mask fe00:: --set --A limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 --A limit-216 -j ACCEPT --A limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 --A limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 --A limit-218 -m limit --limit 1/second -j LOG --A limit-218 -j ACCEPT --A limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 --A limit-219 -m limit --limit 1/second -j LOG --A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 --A limit-22 -j ACCEPT --A limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 --A limit-220 -j ACCEPT --A limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114 --A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-224 -m limit --limit 1/second -j LOG --A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-24 --A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-230 -m limit --limit 1/second -j LOG --A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-234 -j ACCEPT --A limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-236 -m limit --limit 1/second -j LOG --A limit-236 -j ACCEPT --A limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-237 -m limit --limit 1/second -j LOG --A limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-238 -j ACCEPT --A limit-239 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 --A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-242 -m limit --limit 1/second -j LOG --A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-246 -j ACCEPT --A limit-247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-248 -m limit --limit 1/second -j LOG --A limit-248 -j ACCEPT --A limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-249 -m limit --limit 1/second -j LOG --A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 --A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-250 -j ACCEPT --A limit-251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-252 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-252 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-253 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-253 -m recent --name user:C --rsource --mask fe00:: --set --A limit-254 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-254 -m limit --limit 1/second -j LOG --A limit-254 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-255 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-255 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-256 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-256 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-257 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-257 -m recent --name user:C --rsource --mask fe00:: --set --A limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-258 -j ACCEPT --A limit-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 --A limit-26 -m limit --limit 1/second -j LOG --A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-260 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-260 -m limit --limit 1/second -j LOG --A limit-260 -j ACCEPT --A limit-261 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-261 -m limit --limit 1/second -j LOG --A limit-262 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-262 -j ACCEPT --A limit-263 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-265 -m recent --name user:C --rdest --mask fe00:: --set --A limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-266 -m limit --limit 1/second -j LOG --A limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-267 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-269 -m recent --name user:C --rdest --mask fe00:: --set --A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 --A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-270 -j ACCEPT --A limit-271 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-272 -m limit --limit 1/second -j LOG --A limit-272 -j ACCEPT --A limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-273 -m limit --limit 1/second -j LOG --A limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-274 -j ACCEPT --A limit-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-278 -m limit --limit 1/second -j LOG --A limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 --A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-284 -m limit --limit 1/second -j LOG --A limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-288 -j ACCEPT --A limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-30 --A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-290 -m limit --limit 1/second -j LOG --A limit-290 -j ACCEPT --A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-291 -m limit --limit 1/second -j LOG --A limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-292 -j ACCEPT --A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-296 -m limit --limit 1/second -j LOG --A limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 --A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-30 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 --A limit-30 -j ACCEPT --A limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-300 -j ACCEPT --A limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-302 -m limit --limit 1/second -j LOG --A limit-302 -j ACCEPT --A limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-303 -m limit --limit 1/second -j LOG --A limit-304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-304 -j ACCEPT --A limit-305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-307 -m recent --name user:C --rsource --mask fe00:: --set --A limit-308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-308 -m limit --limit 1/second -j LOG --A limit-308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-31 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 --A limit-310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-311 -m recent --name user:C --rsource --mask fe00:: --set --A limit-312 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-312 -j ACCEPT --A limit-313 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m limit --limit 1/second -j LOG --A limit-314 -j ACCEPT --A limit-315 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-315 -m limit --limit 1/second -j LOG --A limit-316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-316 -j ACCEPT --A limit-317 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-318 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-318 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-319 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-319 -m recent --name user:C --rdest --mask fe00:: --set --A limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 --A limit-32 -m limit --limit 1/second -j LOG --A limit-32 -j ACCEPT --A limit-320 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-320 -m limit --limit 1/second -j LOG --A limit-320 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-321 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-321 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-322 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-322 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-323 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-323 -m recent --name user:C --rdest --mask fe00:: --set --A limit-324 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-324 -j ACCEPT --A limit-325 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-326 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-326 -m limit --limit 1/second -j LOG --A limit-326 -j ACCEPT --A limit-327 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-327 -m limit --limit 1/second -j LOG --A limit-328 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-328 -j ACCEPT --A limit-329 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 --A limit-33 -m limit --limit 1/second -j LOG --A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-330 -j ACCEPT --A limit-330 -m limit --limit 1/second -j LOG --A limit-330 -j DROP --A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j RETURN --A limit-331 -m limit --limit 1/second -j LOG --A limit-331 -j DROP --A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-63 --A limit-332 -m limit --limit 1/second -j LOG --A limit-332 -j DROP --A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j ACCEPT --A limit-333 -m limit --limit 1/second -j LOG --A limit-333 -j DROP --A limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-334 -j ACCEPT --A limit-334 -m limit --limit 1/second -j LOG --A limit-334 -j DROP --A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j RETURN --A limit-335 -m limit --limit 1/second -j LOG --A limit-335 -j DROP --A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-64 --A limit-336 -m limit --limit 1/second -j LOG --A limit-336 -j DROP --A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-337 -j ACCEPT --A limit-337 -m limit --limit 1/second -j LOG --A limit-337 -j DROP --A limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-338 -j ACCEPT --A limit-338 -j DROP --A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-339 -j RETURN --A limit-339 -j DROP --A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 --A limit-34 -j ACCEPT --A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-65 --A limit-340 -j DROP --A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-341 -j ACCEPT --A limit-341 -j DROP --A limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-342 -j ACCEPT --A limit-342 -j DROP --A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-343 -j RETURN --A limit-343 -j DROP --A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-66 --A limit-344 -j DROP --A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-345 -j ACCEPT --A limit-345 -j DROP --A limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-346 -j ACCEPT --A limit-346 -m limit --limit 1/second -j LOG --A limit-346 -j DROP --A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-347 -j RETURN --A limit-347 -m limit --limit 1/second -j LOG --A limit-347 -j DROP --A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-67 --A limit-348 -m limit --limit 1/second -j LOG --A limit-348 -j DROP --A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-349 -j ACCEPT --A limit-349 -m limit --limit 1/second -j LOG --A limit-349 -j DROP --A limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 --A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-350 -j ACCEPT --A limit-350 -j DROP --A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-351 -j RETURN --A limit-351 -j DROP --A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-68 --A limit-352 -j DROP --A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-353 -j ACCEPT --A limit-353 -j DROP --A limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-354 -j ACCEPT --A limit-354 -j DROP --A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-355 -j RETURN --A limit-355 -j DROP --A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-69 --A limit-356 -j DROP --A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-357 -j ACCEPT --A limit-357 -j DROP --A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 --A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 --A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 --A limit-36 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 --A limit-360 -m limit --limit 1/second -j LOG --A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 --A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 --A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 --A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 --A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 --A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 --A limit-366 -m limit --limit 1/second -j LOG --A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 --A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 --A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 --A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 --A limit-37 -m recent --name user:C --rsource --mask fe00:: --set --A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 --A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 --A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 --A limit-372 -m limit --limit 1/second -j LOG --A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 --A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 --A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 --A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 --A limit-376 -j ACCEPT --A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 --A limit-378 -m limit --limit 1/second -j LOG --A limit-378 -j ACCEPT --A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 --A limit-379 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 --A limit-38 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 --A limit-380 -j ACCEPT --A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 --A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 --A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 --A limit-384 -m limit --limit 1/second -j LOG --A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 --A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 --A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-144 --A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 --A limit-388 -j ACCEPT --A limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 --A limit-39 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 --A limit-390 -m limit --limit 1/second -j LOG --A limit-390 -j ACCEPT --A limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 --A limit-391 -m limit --limit 1/second -j LOG --A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 --A limit-392 -j ACCEPT --A limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 --A limit-394 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 --A limit-395 -m recent --name user:C --rsource --mask fe00:: --set --A limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 --A limit-396 -m limit --limit 1/second -j LOG --A limit-396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 --A limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 --A limit-398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 --A limit-399 -m recent --name user:C --rsource --mask fe00:: --set --A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 --A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 --A limit-40 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 --A limit-400 -j ACCEPT --A limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 --A limit-402 -m limit --limit 1/second -j LOG --A limit-402 -j ACCEPT --A limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 --A limit-403 -m limit --limit 1/second -j LOG --A limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 --A limit-404 -j ACCEPT --A limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 --A limit-406 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 --A limit-407 -m recent --name user:C --rdest --mask fe00:: --set --A limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 --A limit-408 -m limit --limit 1/second -j LOG --A limit-408 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 --A limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-42 --A limit-41 -m recent --name user:C --rsource --mask fe00:: --set --A limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 --A limit-410 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-168 --A limit-411 -m recent --name user:C --rdest --mask fe00:: --set --A limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 --A limit-412 -j ACCEPT --A limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 --A limit-414 -m limit --limit 1/second -j LOG --A limit-414 -j ACCEPT --A limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 --A limit-415 -m limit --limit 1/second -j LOG --A limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 --A limit-416 -j ACCEPT --A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 --A limit-42 -j ACCEPT --A limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-420 -m limit --limit 1/second -j LOG --A limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-426 -m limit --limit 1/second -j LOG --A limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-43 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 --A limit-430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-430 -j ACCEPT --A limit-432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-432 -m limit --limit 1/second -j LOG --A limit-432 -j ACCEPT --A limit-433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-433 -m limit --limit 1/second -j LOG --A limit-434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-434 -j ACCEPT --A limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-438 -m limit --limit 1/second -j LOG --A limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 --A limit-44 -m limit --limit 1/second -j LOG --A limit-44 -j ACCEPT --A limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-442 -j ACCEPT --A limit-444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-444 -m limit --limit 1/second -j LOG --A limit-444 -j ACCEPT --A limit-445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-445 -m limit --limit 1/second -j LOG --A limit-446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-446 -j ACCEPT --A limit-448 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-448 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-449 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-449 -m recent --name user:C --rsource --mask fe00:: --set --A limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 --A limit-45 -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-450 -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-451 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-451 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-452 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-452 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-453 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-453 -m recent --name user:C --rsource --mask fe00:: --set --A limit-454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-454 -j ACCEPT --A limit-456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-456 -m limit --limit 1/second -j LOG --A limit-456 -j ACCEPT --A limit-457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-457 -m limit --limit 1/second -j LOG --A limit-458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-458 -j ACCEPT --A limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 --A limit-46 -j ACCEPT --A limit-460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-461 -m recent --name user:C --rdest --mask fe00:: --set --A limit-462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-462 -m limit --limit 1/second -j LOG --A limit-462 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-463 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-464 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-465 -m recent --name user:C --rdest --mask fe00:: --set --A limit-466 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-466 -j ACCEPT --A limit-468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-468 -m limit --limit 1/second -j LOG --A limit-468 -j ACCEPT --A limit-469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-469 -m limit --limit 1/second -j LOG --A limit-47 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48 --A limit-470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-470 -j ACCEPT --A limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-474 -m limit --limit 1/second -j LOG --A limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 --A limit-48 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-480 -m limit --limit 1/second -j LOG --A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-484 -j ACCEPT --A limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-486 -m limit --limit 1/second -j LOG --A limit-486 -j ACCEPT --A limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-487 -m limit --limit 1/second -j LOG --A limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-488 -j ACCEPT --A limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 --A limit-49 -m recent --name user:C --rdest --mask fe00:: --set --A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-492 -m limit --limit 1/second -j LOG --A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-496 -j ACCEPT --A limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-498 -m limit --limit 1/second -j LOG --A limit-498 -j ACCEPT --A limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-499 -m limit --limit 1/second -j LOG --A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 --A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 --A limit-50 -m limit --limit 1/second -j LOG --A limit-50 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-500 -j ACCEPT --A limit-502 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-502 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-503 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-503 -m recent --name user:C --rsource --mask fe00:: --set --A limit-504 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-504 -m limit --limit 1/second -j LOG --A limit-504 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-505 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-505 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-506 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-506 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-507 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-507 -m recent --name user:C --rsource --mask fe00:: --set --A limit-508 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-508 -j ACCEPT --A limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 --A limit-51 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-510 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-510 -m limit --limit 1/second -j LOG --A limit-510 -j ACCEPT --A limit-511 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-511 -m limit --limit 1/second -j LOG --A limit-512 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-512 -j ACCEPT --A limit-514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-514 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-515 -m recent --name user:C --rdest --mask fe00:: --set --A limit-516 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-516 -m limit --limit 1/second -j LOG --A limit-516 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-517 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-517 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-518 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-518 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-519 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-519 -m recent --name user:C --rdest --mask fe00:: --set --A limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 --A limit-52 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-520 -j ACCEPT --A limit-522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-522 -m limit --limit 1/second -j LOG --A limit-522 -j ACCEPT --A limit-523 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-523 -m limit --limit 1/second -j LOG --A limit-524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-524 -j ACCEPT --A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 --A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 --A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 --A limit-528 -m limit --limit 1/second -j LOG --A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 --A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-54 --A limit-53 -m recent --name user:C --rdest --mask fe00:: --set --A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 --A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 --A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 --A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 --A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 --A limit-534 -m limit --limit 1/second -j LOG --A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 --A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 --A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-186 --A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 --A limit-538 -j ACCEPT --A limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 --A limit-54 -j ACCEPT --A limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 --A limit-540 -m limit --limit 1/second -j LOG --A limit-540 -j ACCEPT --A limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 --A limit-541 -m limit --limit 1/second -j LOG --A limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 --A limit-542 -j ACCEPT --A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 --A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 --A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 --A limit-546 -m limit --limit 1/second -j LOG --A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 --A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 --A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-198 --A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-55 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 --A limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 --A limit-550 -j ACCEPT --A limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 --A limit-552 -m limit --limit 1/second -j LOG --A limit-552 -j ACCEPT --A limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 --A limit-553 -m limit --limit 1/second -j LOG --A limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 --A limit-554 -j ACCEPT --A limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 --A limit-556 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 --A limit-557 -m recent --name user:C --rsource --mask fe00:: --set --A limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 --A limit-558 -m limit --limit 1/second -j LOG --A limit-558 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 --A limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 --A limit-56 -m limit --limit 1/second -j LOG --A limit-56 -j ACCEPT --A limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 --A limit-560 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-210 --A limit-561 -m recent --name user:C --rsource --mask fe00:: --set --A limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 --A limit-562 -j ACCEPT --A limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 --A limit-564 -m limit --limit 1/second -j LOG --A limit-564 -j ACCEPT --A limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 --A limit-565 -m limit --limit 1/second -j LOG --A limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 --A limit-566 -j ACCEPT --A limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 --A limit-568 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 --A limit-569 -m recent --name user:C --rdest --mask fe00:: --set --A limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 --A limit-57 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 --A limit-570 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 --A limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 --A limit-572 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-222 --A limit-573 -m recent --name user:C --rdest --mask fe00:: --set --A limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 --A limit-574 -j ACCEPT --A limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 --A limit-576 -m limit --limit 1/second -j LOG --A limit-576 -j ACCEPT --A limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 --A limit-577 -m limit --limit 1/second -j LOG --A limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 --A limit-578 -j ACCEPT --A limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 --A limit-58 -j ACCEPT --A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-582 -m limit --limit 1/second -j LOG --A limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-588 -m limit --limit 1/second -j LOG --A limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-59 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 --A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-592 -j ACCEPT --A limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-594 -m limit --limit 1/second -j LOG --A limit-594 -j ACCEPT --A limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-595 -m limit --limit 1/second -j LOG --A limit-596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-596 -j ACCEPT --A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 --A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-600 -m limit --limit 1/second -j LOG --A limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-604 -j ACCEPT --A limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-606 -m limit --limit 1/second -j LOG --A limit-606 -j ACCEPT --A limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-607 -m limit --limit 1/second -j LOG --A limit-608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-608 -j ACCEPT --A limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-610 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-610 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-611 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-611 -m recent --name user:C --rsource --mask fe00:: --set --A limit-612 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-612 -m limit --limit 1/second -j LOG --A limit-612 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-613 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-613 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-614 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-614 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-615 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-615 -m recent --name user:C --rsource --mask fe00:: --set --A limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-616 -j ACCEPT --A limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-618 -m limit --limit 1/second -j LOG --A limit-618 -j ACCEPT --A limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-619 -m limit --limit 1/second -j LOG --A limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-62 -m limit --limit 1/second -j LOG --A limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-620 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-620 -j ACCEPT --A limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-623 -m recent --name user:C --rdest --mask fe00:: --set --A limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-624 -m limit --limit 1/second -j LOG --A limit-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-625 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-627 -m recent --name user:C --rdest --mask fe00:: --set --A limit-628 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-628 -j ACCEPT --A limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-630 -m limit --limit 1/second -j LOG --A limit-630 -j ACCEPT --A limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-631 -m limit --limit 1/second -j LOG --A limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-632 -j ACCEPT --A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-636 -m limit --limit 1/second -j LOG --A limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-642 -m limit --limit 1/second -j LOG --A limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-646 -j ACCEPT --A limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-648 -m limit --limit 1/second -j LOG --A limit-648 -j ACCEPT --A limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-649 -m limit --limit 1/second -j LOG --A limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-650 -j ACCEPT --A limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-654 -m limit --limit 1/second -j LOG --A limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-658 -j ACCEPT --A limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-660 -m limit --limit 1/second -j LOG --A limit-660 -j ACCEPT --A limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-661 -m limit --limit 1/second -j LOG --A limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-662 -j ACCEPT --A limit-664 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-664 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-665 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-665 -m recent --name user:C --rsource --mask fe00:: --set --A limit-666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-666 -m limit --limit 1/second -j LOG --A limit-666 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-667 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-668 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-669 -m recent --name user:C --rsource --mask fe00:: --set --A limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-670 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-670 -j ACCEPT --A limit-672 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-672 -m limit --limit 1/second -j LOG --A limit-672 -j ACCEPT --A limit-673 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-673 -m limit --limit 1/second -j LOG --A limit-674 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-674 -j ACCEPT --A limit-676 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-676 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-677 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-677 -m recent --name user:C --rdest --mask fe00:: --set --A limit-678 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-678 -m limit --limit 1/second -j LOG --A limit-678 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-679 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-679 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-68 -m limit --limit 1/second -j LOG --A limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-680 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-680 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-681 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-681 -m recent --name user:C --rdest --mask fe00:: --set --A limit-682 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-682 -j ACCEPT --A limit-684 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-684 -m limit --limit 1/second -j LOG --A limit-684 -j ACCEPT --A limit-685 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-685 -m limit --limit 1/second -j LOG --A limit-686 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-686 -j ACCEPT --A limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-688 -j ACCEPT --A limit-688 -m limit --limit 1/second -j LOG --A limit-688 -j DROP --A limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-689 -j RETURN --A limit-689 -m limit --limit 1/second -j LOG --A limit-689 -j DROP --A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j logaccept-70 --A limit-690 -m limit --limit 1/second -j LOG --A limit-690 -j DROP --A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-691 -j ACCEPT --A limit-691 -m limit --limit 1/second -j LOG --A limit-691 -j DROP --A limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-692 -j ACCEPT --A limit-692 -m limit --limit 1/second -j LOG --A limit-692 -j DROP --A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-693 -j RETURN --A limit-693 -m limit --limit 1/second -j LOG --A limit-693 -j DROP --A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j logaccept-71 --A limit-694 -m limit --limit 1/second -j LOG --A limit-694 -j DROP --A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-695 -j ACCEPT --A limit-695 -m limit --limit 1/second -j LOG --A limit-695 -j DROP --A limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-696 -j ACCEPT --A limit-696 -j DROP --A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-697 -j RETURN --A limit-697 -j DROP --A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j logaccept-72 --A limit-698 -j DROP --A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-699 -j ACCEPT --A limit-699 -j DROP --A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 --A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-700 -j ACCEPT --A limit-700 -j DROP --A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-701 -j RETURN --A limit-701 -j DROP --A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j logaccept-73 --A limit-702 -j DROP --A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-703 -j ACCEPT --A limit-703 -j DROP --A limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-704 -j ACCEPT --A limit-704 -m limit --limit 1/second -j LOG --A limit-704 -j DROP --A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-705 -j RETURN --A limit-705 -m limit --limit 1/second -j LOG --A limit-705 -j DROP --A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j logaccept-74 --A limit-706 -m limit --limit 1/second -j LOG --A limit-706 -j DROP --A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-707 -j ACCEPT --A limit-707 -m limit --limit 1/second -j LOG --A limit-707 -j DROP --A limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-708 -j ACCEPT --A limit-708 -j DROP --A limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-709 -j RETURN --A limit-709 -j DROP --A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j logaccept-75 --A limit-710 -j DROP --A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-711 -j ACCEPT --A limit-711 -j DROP --A limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-712 -j ACCEPT --A limit-712 -j DROP --A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-713 -j RETURN --A limit-713 -j DROP --A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j logaccept-76 --A limit-714 -j DROP --A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-715 -j ACCEPT --A limit-715 -j DROP --A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 --A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 --A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 --A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 --A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-72 -j ACCEPT --A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 --A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 --A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 --A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 --A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 --A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 --A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 --A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 --A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 --A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 --A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 --A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 --A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 --A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-246 --A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 --A limit-735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 --A limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 --A limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 --A limit-737 -m limit --limit 1/second -j LOG --A limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 --A limit-739 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-252 --A limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-74 -m limit --limit 1/second -j LOG --A limit-74 -j ACCEPT --A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 --A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 --A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 --A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 --A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 --A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-258 --A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 --A limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 --A limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 --A limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 --A limit-749 -m limit --limit 1/second -j LOG --A limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-75 -m limit --limit 1/second -j LOG --A limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 --A limit-751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-264 --A limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 --A limit-752 -m recent --name user:C --rsource --mask fe00:: --set --A limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 --A limit-753 -m recent --name user:C --rsource --mask fe00:: --set --A limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 --A limit-754 -m recent --name user:C --rsource --mask fe00:: --set --A limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 --A limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 --A limit-756 -m recent --name user:C --rsource --mask fe00:: --set --A limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-270 --A limit-757 -m recent --name user:C --rsource --mask fe00:: --set --A limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 --A limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 --A limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-76 -j ACCEPT --A limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 --A limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 --A limit-761 -m limit --limit 1/second -j LOG --A limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 --A limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 --A limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 --A limit-764 -m recent --name user:C --rdest --mask fe00:: --set --A limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 --A limit-765 -m recent --name user:C --rdest --mask fe00:: --set --A limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 --A limit-766 -m recent --name user:C --rdest --mask fe00:: --set --A limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 --A limit-767 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 --A limit-768 -m recent --name user:C --rdest --mask fe00:: --set --A limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-282 --A limit-769 -m recent --name user:C --rdest --mask fe00:: --set --A limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 --A limit-771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 --A limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 --A limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 --A limit-773 -m limit --limit 1/second -j LOG --A limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 --A limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-288 --A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-791 -m limit --limit 1/second -j LOG --A limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 --A limit-8 -m limit --limit 1/second -j LOG --A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-80 -m limit --limit 1/second -j LOG --A limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-801 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-803 -m limit --limit 1/second -j LOG --A limit-804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-806 -m recent --name user:C --rsource --mask fe00:: --set --A limit-807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-807 -m recent --name user:C --rsource --mask fe00:: --set --A limit-808 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-808 -m recent --name user:C --rsource --mask fe00:: --set --A limit-809 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-809 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-810 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-810 -m recent --name user:C --rsource --mask fe00:: --set --A limit-811 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-811 -m recent --name user:C --rsource --mask fe00:: --set --A limit-812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-813 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-815 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-815 -m limit --limit 1/second -j LOG --A limit-816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-817 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-818 -m recent --name user:C --rdest --mask fe00:: --set --A limit-819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-819 -m recent --name user:C --rdest --mask fe00:: --set --A limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-820 -m recent --name user:C --rdest --mask fe00:: --set --A limit-821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-822 -m recent --name user:C --rdest --mask fe00:: --set --A limit-823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-823 -m recent --name user:C --rdest --mask fe00:: --set --A limit-824 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-825 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-826 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-827 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-827 -m limit --limit 1/second -j LOG --A limit-828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-829 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-84 -j ACCEPT --A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-845 -m limit --limit 1/second -j LOG --A limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-847 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-857 -m limit --limit 1/second -j LOG --A limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-86 -m limit --limit 1/second -j LOG --A limit-86 -j ACCEPT --A limit-860 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-860 -m recent --name user:C --rsource --mask fe00:: --set --A limit-861 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-861 -m recent --name user:C --rsource --mask fe00:: --set --A limit-862 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-862 -m recent --name user:C --rsource --mask fe00:: --set --A limit-863 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-863 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-864 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-864 -m recent --name user:C --rsource --mask fe00:: --set --A limit-865 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-865 -m recent --name user:C --rsource --mask fe00:: --set --A limit-866 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-867 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-868 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-869 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-869 -m limit --limit 1/second -j LOG --A limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-87 -m limit --limit 1/second -j LOG --A limit-870 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-871 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-872 -m recent --name user:C --rdest --mask fe00:: --set --A limit-873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-873 -m recent --name user:C --rdest --mask fe00:: --set --A limit-874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-874 -m recent --name user:C --rdest --mask fe00:: --set --A limit-875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-875 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-876 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-876 -m recent --name user:C --rdest --mask fe00:: --set --A limit-877 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-877 -m recent --name user:C --rdest --mask fe00:: --set --A limit-878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-879 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-88 -j ACCEPT --A limit-880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-881 -m limit --limit 1/second -j LOG --A limit-882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-883 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 --A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 --A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 --A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 --A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 --A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 --A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 --A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 --A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 --A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 --A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 --A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-300 --A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 --A limit-897 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 --A limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 --A limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 --A limit-899 -m limit --limit 1/second -j LOG --A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 --A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-90 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-90 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 --A limit-901 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 --A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 --A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 --A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 --A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 --A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 --A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 --A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 --A limit-909 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 --A limit-91 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-91 -m recent --name user:C --rsource --mask fe00:: --set --A limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 --A limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 --A limit-911 -m limit --limit 1/second -j LOG --A limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 --A limit-913 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-318 --A limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 --A limit-914 -m recent --name user:C --rsource --mask fe00:: --set --A limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 --A limit-915 -m recent --name user:C --rsource --mask fe00:: --set --A limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 --A limit-916 -m recent --name user:C --rsource --mask fe00:: --set --A limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 --A limit-917 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 --A limit-918 -m recent --name user:C --rsource --mask fe00:: --set --A limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-324 --A limit-919 -m recent --name user:C --rsource --mask fe00:: --set --A limit-92 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-92 -m limit --limit 1/second -j LOG --A limit-92 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 --A limit-921 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 --A limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 --A limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 --A limit-923 -m limit --limit 1/second -j LOG --A limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 --A limit-925 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-330 --A limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 --A limit-926 -m recent --name user:C --rdest --mask fe00:: --set --A limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 --A limit-927 -m recent --name user:C --rdest --mask fe00:: --set --A limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 --A limit-928 -m recent --name user:C --rdest --mask fe00:: --set --A limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 --A limit-929 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-93 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-93 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 --A limit-930 -m recent --name user:C --rdest --mask fe00:: --set --A limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 --A limit-931 -m recent --name user:C --rdest --mask fe00:: --set --A limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 --A limit-933 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 --A limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 --A limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 --A limit-935 -m limit --limit 1/second -j LOG --A limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 --A limit-937 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 --A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-94 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-94 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-95 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-95 -m recent --name user:C --rsource --mask fe00:: --set --A limit-950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-953 -m limit --limit 1/second -j LOG --A limit-954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-96 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-96 -j ACCEPT --A limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-962 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-963 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-964 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-965 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-965 -m limit --limit 1/second -j LOG --A limit-966 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-967 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-968 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-968 -m recent --name user:C --rsource --mask fe00:: --set --A limit-969 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-969 -m recent --name user:C --rsource --mask fe00:: --set --A limit-97 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-970 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-970 -m recent --name user:C --rsource --mask fe00:: --set --A limit-971 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-971 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-972 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-972 -m recent --name user:C --rsource --mask fe00:: --set --A limit-973 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-973 -m recent --name user:C --rsource --mask fe00:: --set --A limit-974 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-975 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-976 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-977 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-977 -m limit --limit 1/second -j LOG --A limit-978 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-979 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-98 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-98 -m limit --limit 1/second -j LOG --A limit-98 -j ACCEPT --A limit-980 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-980 -m recent --name user:C --rdest --mask fe00:: --set --A limit-981 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-981 -m recent --name user:C --rdest --mask fe00:: --set --A limit-982 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-982 -m recent --name user:C --rdest --mask fe00:: --set --A limit-983 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-983 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-984 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-984 -m recent --name user:C --rdest --mask fe00:: --set --A limit-985 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-985 -m recent --name user:C --rdest --mask fe00:: --set --A limit-986 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-987 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-988 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-989 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-989 -m limit --limit 1/second -j LOG --A limit-99 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-99 -m limit --limit 1/second -j LOG --A limit-990 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-991 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A logaccept-0 -m limit --limit 1/second -j LOG --A logaccept-0 -j ACCEPT --A logaccept-18 -m limit --limit 1/second -j LOG --A logaccept-18 -j ACCEPT --A logaccept-27 -m limit --limit 1/second -j LOG --A logaccept-27 -j ACCEPT --A logaccept-36 -m limit --limit 1/second -j LOG --A logaccept-36 -j ACCEPT --A logaccept-45 -m limit --limit 1/second -j LOG --A logaccept-45 -j ACCEPT --A logaccept-63 -m limit --limit 1/second -j LOG --A logaccept-63 -j ACCEPT --A logaccept-64 -m limit --limit 1/second -j LOG --A logaccept-64 -j ACCEPT --A logaccept-65 -m limit --limit 1/second -j LOG --A logaccept-65 -j ACCEPT --A logaccept-66 -m limit --limit 1/second -j LOG --A logaccept-66 -j ACCEPT --A logaccept-67 -m limit --limit 1/second -j LOG --A logaccept-67 -j ACCEPT --A logaccept-68 -m limit --limit 1/second -j LOG --A logaccept-68 -j ACCEPT --A logaccept-69 -m limit --limit 1/second -j LOG --A logaccept-69 -j ACCEPT --A logaccept-70 -m limit --limit 1/second -j LOG --A logaccept-70 -j ACCEPT --A logaccept-71 -m limit --limit 1/second -j LOG --A logaccept-71 -j ACCEPT --A logaccept-72 -m limit --limit 1/second -j LOG --A logaccept-72 -j ACCEPT --A logaccept-73 -m limit --limit 1/second -j LOG --A logaccept-73 -j ACCEPT --A logaccept-74 -m limit --limit 1/second -j LOG --A logaccept-74 -j ACCEPT --A logaccept-75 -m limit --limit 1/second -j LOG --A logaccept-75 -j ACCEPT --A logaccept-76 -m limit --limit 1/second -j LOG --A logaccept-76 -j ACCEPT --A logaccept-77 -m limit --limit 1/second -j LOG --A logaccept-77 -j ACCEPT --A logaccept-78 -m limit --limit 1/second -j LOG --A logaccept-78 -j ACCEPT --A logaccept-79 -m limit --limit 1/second -j LOG --A logaccept-79 -j ACCEPT --A logaccept-80 -m limit --limit 1/second -j LOG --A logaccept-80 -j ACCEPT --A logaccept-81 -m limit --limit 1/second -j LOG --A logaccept-81 -j ACCEPT --A logaccept-82 -m limit --limit 1/second -j LOG --A logaccept-82 -j ACCEPT --A logaccept-83 -m limit --limit 1/second -j LOG --A logaccept-83 -j ACCEPT --A logaccept-84 -m limit --limit 1/second -j LOG --A logaccept-84 -j ACCEPT --A logaccept-9 -m limit --limit 1/second -j LOG --A logaccept-9 -j ACCEPT --A logaccept-final-0 -m limit --limit 1/second -j LOG --A logaccept-final-0 -j ACCEPT --A logaccept-final-1 -m limit --limit 1/second -j LOG --A logaccept-final-1 -j ACCEPT --A logaccept-final-10 -m limit --limit 1/second -j LOG --A logaccept-final-10 -j ACCEPT --A logaccept-final-11 -m limit --limit 1/second -j LOG --A logaccept-final-11 -j ACCEPT --A logaccept-final-12 -m limit --limit 1/second -j LOG --A logaccept-final-12 -j ACCEPT --A logaccept-final-13 -m limit --limit 1/second -j LOG --A logaccept-final-13 -j ACCEPT --A logaccept-final-14 -m limit --limit 1/second -j LOG --A logaccept-final-14 -j ACCEPT --A logaccept-final-15 -m limit --limit 1/second -j LOG --A logaccept-final-15 -j ACCEPT --A logaccept-final-16 -m limit --limit 1/second -j LOG --A logaccept-final-16 -j ACCEPT --A logaccept-final-17 -m limit --limit 1/second -j LOG --A logaccept-final-17 -j ACCEPT --A logaccept-final-18 -m limit --limit 1/second -j LOG --A logaccept-final-18 -j ACCEPT --A logaccept-final-19 -m limit --limit 1/second -j LOG --A logaccept-final-19 -j ACCEPT --A logaccept-final-2 -m limit --limit 1/second -j LOG --A logaccept-final-2 -j ACCEPT --A logaccept-final-20 -m limit --limit 1/second -j LOG --A logaccept-final-20 -j ACCEPT --A logaccept-final-21 -m limit --limit 1/second -j LOG --A logaccept-final-21 -j ACCEPT --A logaccept-final-22 -m limit --limit 1/second -j LOG --A logaccept-final-22 -j ACCEPT --A logaccept-final-23 -m limit --limit 1/second -j LOG --A logaccept-final-23 -j ACCEPT --A logaccept-final-24 -m limit --limit 1/second -j LOG --A logaccept-final-24 -j ACCEPT --A logaccept-final-25 -m limit --limit 1/second -j LOG --A logaccept-final-25 -j ACCEPT --A logaccept-final-26 -m limit --limit 1/second -j LOG --A logaccept-final-26 -j ACCEPT --A logaccept-final-27 -m limit --limit 1/second -j LOG --A logaccept-final-27 -j ACCEPT --A logaccept-final-28 -m limit --limit 1/second -j LOG --A logaccept-final-28 -j ACCEPT --A logaccept-final-29 -m limit --limit 1/second -j LOG --A logaccept-final-29 -j ACCEPT --A logaccept-final-3 -m limit --limit 1/second -j LOG --A logaccept-final-3 -j ACCEPT --A logaccept-final-30 -m limit --limit 1/second -j LOG --A logaccept-final-30 -j ACCEPT --A logaccept-final-31 -m limit --limit 1/second -j LOG --A logaccept-final-31 -j ACCEPT --A logaccept-final-32 -m limit --limit 1/second -j LOG --A logaccept-final-32 -j ACCEPT --A logaccept-final-33 -m limit --limit 1/second -j LOG --A logaccept-final-33 -j ACCEPT --A logaccept-final-34 -m limit --limit 1/second -j LOG --A logaccept-final-34 -j ACCEPT --A logaccept-final-35 -m limit --limit 1/second -j LOG --A logaccept-final-35 -j ACCEPT --A logaccept-final-36 -m limit --limit 1/second -j LOG --A logaccept-final-36 -j ACCEPT --A logaccept-final-37 -m limit --limit 1/second -j LOG --A logaccept-final-37 -j ACCEPT --A logaccept-final-38 -m limit --limit 1/second -j LOG --A logaccept-final-38 -j ACCEPT --A logaccept-final-39 -m limit --limit 1/second -j LOG --A logaccept-final-39 -j ACCEPT --A logaccept-final-4 -m limit --limit 1/second -j LOG --A logaccept-final-4 -j ACCEPT --A logaccept-final-40 -m limit --limit 1/second -j LOG --A logaccept-final-40 -j ACCEPT --A logaccept-final-41 -m limit --limit 1/second -j LOG --A logaccept-final-41 -j ACCEPT --A logaccept-final-42 -m limit --limit 1/second -j LOG --A logaccept-final-42 -j ACCEPT --A logaccept-final-43 -m limit --limit 1/second -j LOG --A logaccept-final-43 -j ACCEPT --A logaccept-final-44 -m limit --limit 1/second -j LOG --A logaccept-final-44 -j ACCEPT --A logaccept-final-45 -m limit --limit 1/second -j LOG --A logaccept-final-45 -j ACCEPT --A logaccept-final-46 -m limit --limit 1/second -j LOG --A logaccept-final-46 -j ACCEPT --A logaccept-final-47 -m limit --limit 1/second -j LOG --A logaccept-final-47 -j ACCEPT --A logaccept-final-48 -m limit --limit 1/second -j LOG --A logaccept-final-48 -j ACCEPT --A logaccept-final-49 -m limit --limit 1/second -j LOG --A logaccept-final-49 -j ACCEPT --A logaccept-final-5 -m limit --limit 1/second -j LOG --A logaccept-final-5 -j ACCEPT --A logaccept-final-50 -m limit --limit 1/second -j LOG --A logaccept-final-50 -j ACCEPT --A logaccept-final-51 -m limit --limit 1/second -j LOG --A logaccept-final-51 -j ACCEPT --A logaccept-final-52 -m limit --limit 1/second -j LOG --A logaccept-final-52 -j ACCEPT --A logaccept-final-53 -m limit --limit 1/second -j LOG --A logaccept-final-53 -j ACCEPT --A logaccept-final-54 -m limit --limit 1/second -j LOG --A logaccept-final-54 -j ACCEPT --A logaccept-final-55 -m limit --limit 1/second -j LOG --A logaccept-final-55 -j ACCEPT --A logaccept-final-56 -m limit --limit 1/second -j LOG --A logaccept-final-56 -j ACCEPT --A logaccept-final-57 -m limit --limit 1/second -j LOG --A logaccept-final-57 -j ACCEPT --A logaccept-final-58 -m limit --limit 1/second -j LOG --A logaccept-final-58 -j ACCEPT --A logaccept-final-59 -m limit --limit 1/second -j LOG --A logaccept-final-59 -j ACCEPT --A logaccept-final-6 -m limit --limit 1/second -j LOG --A logaccept-final-6 -j ACCEPT --A logaccept-final-60 -m limit --limit 1/second -j LOG --A logaccept-final-60 -j ACCEPT --A logaccept-final-61 -m limit --limit 1/second -j LOG --A logaccept-final-61 -j ACCEPT --A logaccept-final-7 -m limit --limit 1/second -j LOG --A logaccept-final-7 -j ACCEPT --A logaccept-final-8 -m limit --limit 1/second -j LOG --A logaccept-final-8 -j ACCEPT --A logaccept-final-9 -m limit --limit 1/second -j LOG --A logaccept-final-9 -j ACCEPT --A logdrop-0 -m limit --limit 1/second -j LOG --A logdrop-0 -j DROP --A logdrop-1 -m limit --limit 1/second -j LOG --A logdrop-1 -j DROP --A logdrop-10 -m limit --limit 1/second -j LOG --A logdrop-10 -j DROP --A logdrop-100 -m limit --limit 1/second -j LOG --A logdrop-100 -j DROP --A logdrop-101 -m limit --limit 1/second -j LOG --A logdrop-101 -j DROP --A logdrop-102 -m limit --limit 1/second -j LOG --A logdrop-102 -j DROP --A logdrop-103 -m limit --limit 1/second -j LOG --A logdrop-103 -j DROP --A logdrop-104 -m limit --limit 1/second -j LOG --A logdrop-104 -j DROP --A logdrop-105 -m limit --limit 1/second -j LOG --A logdrop-105 -j DROP --A logdrop-106 -m limit --limit 1/second -j LOG --A logdrop-106 -j DROP --A logdrop-107 -m limit --limit 1/second -j LOG --A logdrop-107 -j DROP --A logdrop-108 -m limit --limit 1/second -j LOG --A logdrop-108 -j DROP --A logdrop-109 -m limit --limit 1/second -j LOG --A logdrop-109 -j DROP --A logdrop-11 -m limit --limit 1/second -j LOG --A logdrop-11 -j DROP --A logdrop-110 -m limit --limit 1/second -j LOG --A logdrop-110 -j DROP --A logdrop-111 -m limit --limit 1/second -j LOG --A logdrop-111 -j DROP --A logdrop-112 -m limit --limit 1/second -j LOG --A logdrop-112 -j DROP --A logdrop-113 -m limit --limit 1/second -j LOG --A logdrop-113 -j DROP --A logdrop-114 -m limit --limit 1/second -j LOG --A logdrop-114 -j DROP --A logdrop-115 -m limit --limit 1/second -j LOG --A logdrop-115 -j DROP --A logdrop-116 -m limit --limit 1/second -j LOG --A logdrop-116 -j DROP --A logdrop-117 -m limit --limit 1/second -j LOG --A logdrop-117 -j DROP --A logdrop-118 -m limit --limit 1/second -j LOG --A logdrop-118 -j DROP --A logdrop-119 -m limit --limit 1/second -j LOG --A logdrop-119 -j DROP --A logdrop-12 -m limit --limit 1/second -j LOG --A logdrop-12 -j DROP --A logdrop-120 -m limit --limit 1/second -j LOG --A logdrop-120 -j DROP --A logdrop-121 -m limit --limit 1/second -j LOG --A logdrop-121 -j DROP --A logdrop-122 -m limit --limit 1/second -j LOG --A logdrop-122 -j DROP --A logdrop-123 -m limit --limit 1/second -j LOG --A logdrop-123 -j DROP --A logdrop-124 -m limit --limit 1/second -j LOG --A logdrop-124 -j DROP --A logdrop-125 -m limit --limit 1/second -j LOG --A logdrop-125 -j DROP --A logdrop-126 -m limit --limit 1/second -j LOG --A logdrop-126 -j DROP --A logdrop-127 -m limit --limit 1/second -j LOG --A logdrop-127 -j DROP --A logdrop-128 -m limit --limit 1/second -j LOG --A logdrop-128 -j DROP --A logdrop-129 -m limit --limit 1/second -j LOG --A logdrop-129 -j DROP --A logdrop-13 -m limit --limit 1/second -j LOG --A logdrop-13 -j DROP --A logdrop-130 -m limit --limit 1/second -j LOG --A logdrop-130 -j DROP --A logdrop-131 -m limit --limit 1/second -j LOG --A logdrop-131 -j DROP --A logdrop-132 -m limit --limit 1/second -j LOG --A logdrop-132 -j DROP --A logdrop-133 -m limit --limit 1/second -j LOG --A logdrop-133 -j DROP --A logdrop-134 -m limit --limit 1/second -j LOG --A logdrop-134 -j DROP --A logdrop-135 -m limit --limit 1/second -j LOG --A logdrop-135 -j DROP --A logdrop-136 -m limit --limit 1/second -j LOG --A logdrop-136 -j DROP --A logdrop-137 -m limit --limit 1/second -j LOG --A logdrop-137 -j DROP --A logdrop-138 -m limit --limit 1/second -j LOG --A logdrop-138 -j DROP --A logdrop-139 -m limit --limit 1/second -j LOG --A logdrop-139 -j DROP --A logdrop-14 -m limit --limit 1/second -j LOG --A logdrop-14 -j DROP --A logdrop-140 -m limit --limit 1/second -j LOG --A logdrop-140 -j DROP --A logdrop-141 -m limit --limit 1/second -j LOG --A logdrop-141 -j DROP --A logdrop-142 -m limit --limit 1/second -j LOG --A logdrop-142 -j DROP --A logdrop-143 -m limit --limit 1/second -j LOG --A logdrop-143 -j DROP --A logdrop-144 -m limit --limit 1/second -j LOG --A logdrop-144 -j DROP --A logdrop-145 -m limit --limit 1/second -j LOG --A logdrop-145 -j DROP --A logdrop-146 -m limit --limit 1/second -j LOG --A logdrop-146 -j DROP --A logdrop-147 -m limit --limit 1/second -j LOG --A logdrop-147 -j DROP --A logdrop-148 -m limit --limit 1/second -j LOG --A logdrop-148 -j DROP --A logdrop-149 -m limit --limit 1/second -j LOG --A logdrop-149 -j DROP --A logdrop-15 -m limit --limit 1/second -j LOG --A logdrop-15 -j DROP --A logdrop-150 -m limit --limit 1/second -j LOG --A logdrop-150 -j DROP --A logdrop-151 -m limit --limit 1/second -j LOG --A logdrop-151 -j DROP --A logdrop-152 -m limit --limit 1/second -j LOG --A logdrop-152 -j DROP --A logdrop-153 -m limit --limit 1/second -j LOG --A logdrop-153 -j DROP --A logdrop-154 -m limit --limit 1/second -j LOG --A logdrop-154 -j DROP --A logdrop-155 -m limit --limit 1/second -j LOG --A logdrop-155 -j DROP --A logdrop-156 -m limit --limit 1/second -j LOG --A logdrop-156 -j DROP --A logdrop-157 -m limit --limit 1/second -j LOG --A logdrop-157 -j DROP --A logdrop-158 -m limit --limit 1/second -j LOG --A logdrop-158 -j DROP --A logdrop-159 -m limit --limit 1/second -j LOG --A logdrop-159 -j DROP --A logdrop-16 -m limit --limit 1/second -j LOG --A logdrop-16 -j DROP --A logdrop-160 -m limit --limit 1/second -j LOG --A logdrop-160 -j DROP --A logdrop-161 -m limit --limit 1/second -j LOG --A logdrop-161 -j DROP --A logdrop-162 -m limit --limit 1/second -j LOG --A logdrop-162 -j DROP --A logdrop-163 -m limit --limit 1/second -j LOG --A logdrop-163 -j DROP --A logdrop-164 -m limit --limit 1/second -j LOG --A logdrop-164 -j DROP --A logdrop-165 -m limit --limit 1/second -j LOG --A logdrop-165 -j DROP --A logdrop-166 -m limit --limit 1/second -j LOG --A logdrop-166 -j DROP --A logdrop-167 -m limit --limit 1/second -j LOG --A logdrop-167 -j DROP --A logdrop-168 -m limit --limit 1/second -j LOG --A logdrop-168 -j DROP --A logdrop-169 -m limit --limit 1/second -j LOG --A logdrop-169 -j DROP --A logdrop-17 -m limit --limit 1/second -j LOG --A logdrop-17 -j DROP --A logdrop-170 -m limit --limit 1/second -j LOG --A logdrop-170 -j DROP --A logdrop-171 -m limit --limit 1/second -j LOG --A logdrop-171 -j DROP --A logdrop-172 -m limit --limit 1/second -j LOG --A logdrop-172 -j DROP --A logdrop-173 -m limit --limit 1/second -j LOG --A logdrop-173 -j DROP --A logdrop-174 -m limit --limit 1/second -j LOG --A logdrop-174 -j DROP --A logdrop-175 -m limit --limit 1/second -j LOG --A logdrop-175 -j DROP --A logdrop-176 -m limit --limit 1/second -j LOG --A logdrop-176 -j DROP --A logdrop-177 -m limit --limit 1/second -j LOG --A logdrop-177 -j DROP --A logdrop-178 -m limit --limit 1/second -j LOG --A logdrop-178 -j DROP --A logdrop-179 -m limit --limit 1/second -j LOG --A logdrop-179 -j DROP --A logdrop-18 -m limit --limit 1/second -j LOG --A logdrop-18 -j DROP --A logdrop-180 -m limit --limit 1/second -j LOG --A logdrop-180 -j DROP --A logdrop-181 -m limit --limit 1/second -j LOG --A logdrop-181 -j DROP --A logdrop-182 -m limit --limit 1/second -j LOG --A logdrop-182 -j DROP --A logdrop-183 -m limit --limit 1/second -j LOG --A logdrop-183 -j DROP --A logdrop-184 -m limit --limit 1/second -j LOG --A logdrop-184 -j DROP --A logdrop-185 -m limit --limit 1/second -j LOG --A logdrop-185 -j DROP --A logdrop-186 -m limit --limit 1/second -j LOG --A logdrop-186 -j DROP --A logdrop-187 -m limit --limit 1/second -j LOG --A logdrop-187 -j DROP --A logdrop-188 -m limit --limit 1/second -j LOG --A logdrop-188 -j DROP --A logdrop-189 -m limit --limit 1/second -j LOG --A logdrop-189 -j DROP --A logdrop-19 -m limit --limit 1/second -j LOG --A logdrop-19 -j DROP --A logdrop-190 -m limit --limit 1/second -j LOG --A logdrop-190 -j DROP --A logdrop-191 -m limit --limit 1/second -j LOG --A logdrop-191 -j DROP --A logdrop-192 -m limit --limit 1/second -j LOG --A logdrop-192 -j DROP --A logdrop-193 -m limit --limit 1/second -j LOG --A logdrop-193 -j DROP --A logdrop-194 -m limit --limit 1/second -j LOG --A logdrop-194 -j DROP --A logdrop-195 -m limit --limit 1/second -j LOG --A logdrop-195 -j DROP --A logdrop-196 -m limit --limit 1/second -j LOG --A logdrop-196 -j DROP --A logdrop-197 -m limit --limit 1/second -j LOG --A logdrop-197 -j DROP --A logdrop-198 -m limit --limit 1/second -j LOG --A logdrop-198 -j DROP --A logdrop-199 -m limit --limit 1/second -j LOG --A logdrop-199 -j DROP --A logdrop-2 -m limit --limit 1/second -j LOG --A logdrop-2 -j DROP --A logdrop-20 -m limit --limit 1/second -j LOG --A logdrop-20 -j DROP --A logdrop-200 -m limit --limit 1/second -j LOG --A logdrop-200 -j DROP --A logdrop-201 -m limit --limit 1/second -j LOG --A logdrop-201 -j DROP --A logdrop-202 -m limit --limit 1/second -j LOG --A logdrop-202 -j DROP --A logdrop-203 -m limit --limit 1/second -j LOG --A logdrop-203 -j DROP --A logdrop-204 -m limit --limit 1/second -j LOG --A logdrop-204 -j DROP --A logdrop-205 -m limit --limit 1/second -j LOG --A logdrop-205 -j DROP --A logdrop-206 -m limit --limit 1/second -j LOG --A logdrop-206 -j DROP --A logdrop-207 -m limit --limit 1/second -j LOG --A logdrop-207 -j DROP --A logdrop-208 -m limit --limit 1/second -j LOG --A logdrop-208 -j DROP --A logdrop-209 -m limit --limit 1/second -j LOG --A logdrop-209 -j DROP --A logdrop-21 -m limit --limit 1/second -j LOG --A logdrop-21 -j DROP --A logdrop-210 -m limit --limit 1/second -j LOG --A logdrop-210 -j DROP --A logdrop-211 -m limit --limit 1/second -j LOG --A logdrop-211 -j DROP --A logdrop-212 -m limit --limit 1/second -j LOG --A logdrop-212 -j DROP --A logdrop-213 -m limit --limit 1/second -j LOG --A logdrop-213 -j DROP --A logdrop-214 -m limit --limit 1/second -j LOG --A logdrop-214 -j DROP --A logdrop-215 -m limit --limit 1/second -j LOG --A logdrop-215 -j DROP --A logdrop-216 -m limit --limit 1/second -j LOG --A logdrop-216 -j DROP --A logdrop-217 -m limit --limit 1/second -j LOG --A logdrop-217 -j DROP --A logdrop-218 -m limit --limit 1/second -j LOG --A logdrop-218 -j DROP --A logdrop-219 -m limit --limit 1/second -j LOG --A logdrop-219 -j DROP --A logdrop-22 -m limit --limit 1/second -j LOG --A logdrop-22 -j DROP --A logdrop-220 -m limit --limit 1/second -j LOG --A logdrop-220 -j DROP --A logdrop-221 -m limit --limit 1/second -j LOG --A logdrop-221 -j DROP --A logdrop-222 -m limit --limit 1/second -j LOG --A logdrop-222 -j DROP --A logdrop-223 -m limit --limit 1/second -j LOG --A logdrop-223 -j DROP --A logdrop-224 -m limit --limit 1/second -j LOG --A logdrop-224 -j DROP --A logdrop-225 -m limit --limit 1/second -j LOG --A logdrop-225 -j DROP --A logdrop-226 -m limit --limit 1/second -j LOG --A logdrop-226 -j DROP --A logdrop-227 -m limit --limit 1/second -j LOG --A logdrop-227 -j DROP --A logdrop-228 -m limit --limit 1/second -j LOG --A logdrop-228 -j DROP --A logdrop-229 -m limit --limit 1/second -j LOG --A logdrop-229 -j DROP --A logdrop-23 -m limit --limit 1/second -j LOG --A logdrop-23 -j DROP --A logdrop-230 -m limit --limit 1/second -j LOG --A logdrop-230 -j DROP --A logdrop-231 -m limit --limit 1/second -j LOG --A logdrop-231 -j DROP --A logdrop-232 -m limit --limit 1/second -j LOG --A logdrop-232 -j DROP --A logdrop-233 -m limit --limit 1/second -j LOG --A logdrop-233 -j DROP --A logdrop-234 -m limit --limit 1/second -j LOG --A logdrop-234 -j DROP --A logdrop-235 -m limit --limit 1/second -j LOG --A logdrop-235 -j DROP --A logdrop-236 -m limit --limit 1/second -j LOG --A logdrop-236 -j DROP --A logdrop-237 -m limit --limit 1/second -j LOG --A logdrop-237 -j DROP --A logdrop-238 -m limit --limit 1/second -j LOG --A logdrop-238 -j DROP --A logdrop-239 -m limit --limit 1/second -j LOG --A logdrop-239 -j DROP --A logdrop-24 -m limit --limit 1/second -j LOG --A logdrop-24 -j DROP --A logdrop-240 -m limit --limit 1/second -j LOG --A logdrop-240 -j DROP --A logdrop-241 -m limit --limit 1/second -j LOG --A logdrop-241 -j DROP --A logdrop-242 -m limit --limit 1/second -j LOG --A logdrop-242 -j DROP --A logdrop-243 -m limit --limit 1/second -j LOG --A logdrop-243 -j DROP --A logdrop-244 -m limit --limit 1/second -j LOG --A logdrop-244 -j DROP --A logdrop-245 -m limit --limit 1/second -j LOG --A logdrop-245 -j DROP --A logdrop-246 -m limit --limit 1/second -j LOG --A logdrop-246 -j DROP --A logdrop-247 -m limit --limit 1/second -j LOG --A logdrop-247 -j DROP --A logdrop-248 -m limit --limit 1/second -j LOG --A logdrop-248 -j DROP --A logdrop-249 -m limit --limit 1/second -j LOG --A logdrop-249 -j DROP --A logdrop-25 -m limit --limit 1/second -j LOG --A logdrop-25 -j DROP --A logdrop-250 -m limit --limit 1/second -j LOG --A logdrop-250 -j DROP --A logdrop-251 -m limit --limit 1/second -j LOG --A logdrop-251 -j DROP --A logdrop-252 -m limit --limit 1/second -j LOG --A logdrop-252 -j DROP --A logdrop-253 -m limit --limit 1/second -j LOG --A logdrop-253 -j DROP --A logdrop-254 -m limit --limit 1/second -j LOG --A logdrop-254 -j DROP --A logdrop-255 -m limit --limit 1/second -j LOG --A logdrop-255 -j DROP --A logdrop-256 -m limit --limit 1/second -j LOG --A logdrop-256 -j DROP --A logdrop-257 -m limit --limit 1/second -j LOG --A logdrop-257 -j DROP --A logdrop-258 -m limit --limit 1/second -j LOG --A logdrop-258 -j DROP --A logdrop-259 -m limit --limit 1/second -j LOG --A logdrop-259 -j DROP --A logdrop-26 -m limit --limit 1/second -j LOG --A logdrop-26 -j DROP --A logdrop-260 -m limit --limit 1/second -j LOG --A logdrop-260 -j DROP --A logdrop-261 -m limit --limit 1/second -j LOG --A logdrop-261 -j DROP --A logdrop-262 -m limit --limit 1/second -j LOG --A logdrop-262 -j DROP --A logdrop-263 -m limit --limit 1/second -j LOG --A logdrop-263 -j DROP --A logdrop-264 -m limit --limit 1/second -j LOG --A logdrop-264 -j DROP --A logdrop-265 -m limit --limit 1/second -j LOG --A logdrop-265 -j DROP --A logdrop-266 -m limit --limit 1/second -j LOG --A logdrop-266 -j DROP --A logdrop-267 -m limit --limit 1/second -j LOG --A logdrop-267 -j DROP --A logdrop-268 -m limit --limit 1/second -j LOG --A logdrop-268 -j DROP --A logdrop-269 -m limit --limit 1/second -j LOG --A logdrop-269 -j DROP --A logdrop-27 -m limit --limit 1/second -j LOG --A logdrop-27 -j DROP --A logdrop-270 -m limit --limit 1/second -j LOG --A logdrop-270 -j DROP --A logdrop-271 -m limit --limit 1/second -j LOG --A logdrop-271 -j DROP --A logdrop-272 -m limit --limit 1/second -j LOG --A logdrop-272 -j DROP --A logdrop-273 -m limit --limit 1/second -j LOG --A logdrop-273 -j DROP --A logdrop-274 -m limit --limit 1/second -j LOG --A logdrop-274 -j DROP --A logdrop-275 -m limit --limit 1/second -j LOG --A logdrop-275 -j DROP --A logdrop-276 -m limit --limit 1/second -j LOG --A logdrop-276 -j DROP --A logdrop-277 -m limit --limit 1/second -j LOG --A logdrop-277 -j DROP --A logdrop-278 -m limit --limit 1/second -j LOG --A logdrop-278 -j DROP --A logdrop-279 -m limit --limit 1/second -j LOG --A logdrop-279 -j DROP --A logdrop-28 -m limit --limit 1/second -j LOG --A logdrop-28 -j DROP --A logdrop-280 -m limit --limit 1/second -j LOG --A logdrop-280 -j DROP --A logdrop-281 -m limit --limit 1/second -j LOG --A logdrop-281 -j DROP --A logdrop-282 -m limit --limit 1/second -j LOG --A logdrop-282 -j DROP --A logdrop-283 -m limit --limit 1/second -j LOG --A logdrop-283 -j DROP --A logdrop-284 -m limit --limit 1/second -j LOG --A logdrop-284 -j DROP --A logdrop-285 -m limit --limit 1/second -j LOG --A logdrop-285 -j DROP --A logdrop-286 -m limit --limit 1/second -j LOG --A logdrop-286 -j DROP --A logdrop-287 -m limit --limit 1/second -j LOG --A logdrop-287 -j DROP --A logdrop-288 -m limit --limit 1/second -j LOG --A logdrop-288 -j DROP --A logdrop-289 -m limit --limit 1/second -j LOG --A logdrop-289 -j DROP --A logdrop-29 -m limit --limit 1/second -j LOG --A logdrop-29 -j DROP --A logdrop-290 -m limit --limit 1/second -j LOG --A logdrop-290 -j DROP --A logdrop-291 -m limit --limit 1/second -j LOG --A logdrop-291 -j DROP --A logdrop-292 -m limit --limit 1/second -j LOG --A logdrop-292 -j DROP --A logdrop-293 -m limit --limit 1/second -j LOG --A logdrop-293 -j DROP --A logdrop-294 -m limit --limit 1/second -j LOG --A logdrop-294 -j DROP --A logdrop-295 -m limit --limit 1/second -j LOG --A logdrop-295 -j DROP --A logdrop-296 -m limit --limit 1/second -j LOG --A logdrop-296 -j DROP --A logdrop-297 -m limit --limit 1/second -j LOG --A logdrop-297 -j DROP --A logdrop-298 -m limit --limit 1/second -j LOG --A logdrop-298 -j DROP --A logdrop-299 -m limit --limit 1/second -j LOG --A logdrop-299 -j DROP --A logdrop-3 -m limit --limit 1/second -j LOG --A logdrop-3 -j DROP --A logdrop-30 -m limit --limit 1/second -j LOG --A logdrop-30 -j DROP --A logdrop-300 -m limit --limit 1/second -j LOG --A logdrop-300 -j DROP --A logdrop-301 -m limit --limit 1/second -j LOG --A logdrop-301 -j DROP --A logdrop-302 -m limit --limit 1/second -j LOG --A logdrop-302 -j DROP --A logdrop-303 -m limit --limit 1/second -j LOG --A logdrop-303 -j DROP --A logdrop-304 -m limit --limit 1/second -j LOG --A logdrop-304 -j DROP --A logdrop-305 -m limit --limit 1/second -j LOG --A logdrop-305 -j DROP --A logdrop-306 -m limit --limit 1/second -j LOG --A logdrop-306 -j DROP --A logdrop-307 -m limit --limit 1/second -j LOG --A logdrop-307 -j DROP --A logdrop-308 -m limit --limit 1/second -j LOG --A logdrop-308 -j DROP --A logdrop-309 -m limit --limit 1/second -j LOG --A logdrop-309 -j DROP --A logdrop-31 -m limit --limit 1/second -j LOG --A logdrop-31 -j DROP --A logdrop-310 -m limit --limit 1/second -j LOG --A logdrop-310 -j DROP --A logdrop-311 -m limit --limit 1/second -j LOG --A logdrop-311 -j DROP --A logdrop-312 -m limit --limit 1/second -j LOG --A logdrop-312 -j DROP --A logdrop-313 -m limit --limit 1/second -j LOG --A logdrop-313 -j DROP --A logdrop-314 -m limit --limit 1/second -j LOG --A logdrop-314 -j DROP --A logdrop-315 -m limit --limit 1/second -j LOG --A logdrop-315 -j DROP --A logdrop-316 -m limit --limit 1/second -j LOG --A logdrop-316 -j DROP --A logdrop-317 -m limit --limit 1/second -j LOG --A logdrop-317 -j DROP --A logdrop-318 -m limit --limit 1/second -j LOG --A logdrop-318 -j DROP --A logdrop-319 -m limit --limit 1/second -j LOG --A logdrop-319 -j DROP --A logdrop-32 -m limit --limit 1/second -j LOG --A logdrop-32 -j DROP --A logdrop-320 -m limit --limit 1/second -j LOG --A logdrop-320 -j DROP --A logdrop-321 -m limit --limit 1/second -j LOG --A logdrop-321 -j DROP --A logdrop-322 -m limit --limit 1/second -j LOG --A logdrop-322 -j DROP --A logdrop-323 -m limit --limit 1/second -j LOG --A logdrop-323 -j DROP --A logdrop-324 -m limit --limit 1/second -j LOG --A logdrop-324 -j DROP --A logdrop-325 -m limit --limit 1/second -j LOG --A logdrop-325 -j DROP --A logdrop-326 -m limit --limit 1/second -j LOG --A logdrop-326 -j DROP --A logdrop-327 -m limit --limit 1/second -j LOG --A logdrop-327 -j DROP --A logdrop-328 -m limit --limit 1/second -j LOG --A logdrop-328 -j DROP --A logdrop-329 -m limit --limit 1/second -j LOG --A logdrop-329 -j DROP --A logdrop-33 -m limit --limit 1/second -j LOG --A logdrop-33 -j DROP --A logdrop-330 -m limit --limit 1/second -j LOG --A logdrop-330 -j DROP --A logdrop-331 -m limit --limit 1/second -j LOG --A logdrop-331 -j DROP --A logdrop-332 -m limit --limit 1/second -j LOG --A logdrop-332 -j DROP --A logdrop-333 -m limit --limit 1/second -j LOG --A logdrop-333 -j DROP --A logdrop-334 -m limit --limit 1/second -j LOG --A logdrop-334 -j DROP --A logdrop-335 -m limit --limit 1/second -j LOG --A logdrop-335 -j DROP --A logdrop-336 -m limit --limit 1/second -j LOG --A logdrop-336 -j DROP --A logdrop-337 -m limit --limit 1/second -j LOG --A logdrop-337 -j DROP --A logdrop-338 -m limit --limit 1/second -j LOG --A logdrop-338 -j DROP --A logdrop-339 -m limit --limit 1/second -j LOG --A logdrop-339 -j DROP --A logdrop-34 -m limit --limit 1/second -j LOG --A logdrop-34 -j DROP --A logdrop-340 -m limit --limit 1/second -j LOG --A logdrop-340 -j DROP --A logdrop-341 -m limit --limit 1/second -j LOG --A logdrop-341 -j DROP --A logdrop-342 -m limit --limit 1/second -j LOG --A logdrop-342 -j DROP --A logdrop-343 -m limit --limit 1/second -j LOG --A logdrop-343 -j DROP --A logdrop-344 -m limit --limit 1/second -j LOG --A logdrop-344 -j DROP --A logdrop-345 -m limit --limit 1/second -j LOG --A logdrop-345 -j DROP --A logdrop-346 -m limit --limit 1/second -j LOG --A logdrop-346 -j DROP --A logdrop-347 -m limit --limit 1/second -j LOG --A logdrop-347 -j DROP --A logdrop-348 -m limit --limit 1/second -j LOG --A logdrop-348 -j DROP --A logdrop-349 -m limit --limit 1/second -j LOG --A logdrop-349 -j DROP --A logdrop-35 -m limit --limit 1/second -j LOG --A logdrop-35 -j DROP --A logdrop-350 -m limit --limit 1/second -j LOG --A logdrop-350 -j DROP --A logdrop-351 -m limit --limit 1/second -j LOG --A logdrop-351 -j DROP --A logdrop-352 -m limit --limit 1/second -j LOG --A logdrop-352 -j DROP --A logdrop-353 -m limit --limit 1/second -j LOG --A logdrop-353 -j DROP --A logdrop-354 -m limit --limit 1/second -j LOG --A logdrop-354 -j DROP --A logdrop-355 -m limit --limit 1/second -j LOG --A logdrop-355 -j DROP --A logdrop-356 -m limit --limit 1/second -j LOG --A logdrop-356 -j DROP --A logdrop-357 -m limit --limit 1/second -j LOG --A logdrop-357 -j DROP --A logdrop-358 -m limit --limit 1/second -j LOG --A logdrop-358 -j DROP --A logdrop-359 -m limit --limit 1/second -j LOG --A logdrop-359 -j DROP --A logdrop-36 -m limit --limit 1/second -j LOG --A logdrop-36 -j DROP --A logdrop-360 -m limit --limit 1/second -j LOG --A logdrop-360 -j DROP --A logdrop-361 -m limit --limit 1/second -j LOG --A logdrop-361 -j DROP --A logdrop-362 -m limit --limit 1/second -j LOG --A logdrop-362 -j DROP --A logdrop-363 -m limit --limit 1/second -j LOG --A logdrop-363 -j DROP --A logdrop-364 -m limit --limit 1/second -j LOG --A logdrop-364 -j DROP --A logdrop-365 -m limit --limit 1/second -j LOG --A logdrop-365 -j DROP --A logdrop-366 -m limit --limit 1/second -j LOG --A logdrop-366 -j DROP --A logdrop-367 -m limit --limit 1/second -j LOG --A logdrop-367 -j DROP --A logdrop-368 -m limit --limit 1/second -j LOG --A logdrop-368 -j DROP --A logdrop-369 -m limit --limit 1/second -j LOG --A logdrop-369 -j DROP --A logdrop-37 -m limit --limit 1/second -j LOG --A logdrop-37 -j DROP --A logdrop-370 -m limit --limit 1/second -j LOG --A logdrop-370 -j DROP --A logdrop-371 -m limit --limit 1/second -j LOG --A logdrop-371 -j DROP --A logdrop-372 -m limit --limit 1/second -j LOG --A logdrop-372 -j DROP --A logdrop-373 -m limit --limit 1/second -j LOG --A logdrop-373 -j DROP --A logdrop-374 -m limit --limit 1/second -j LOG --A logdrop-374 -j DROP --A logdrop-375 -m limit --limit 1/second -j LOG --A logdrop-375 -j DROP --A logdrop-376 -m limit --limit 1/second -j LOG --A logdrop-376 -j DROP --A logdrop-377 -m limit --limit 1/second -j LOG --A logdrop-377 -j DROP --A logdrop-378 -m limit --limit 1/second -j LOG --A logdrop-378 -j DROP --A logdrop-379 -m limit --limit 1/second -j LOG --A logdrop-379 -j DROP --A logdrop-38 -m limit --limit 1/second -j LOG --A logdrop-38 -j DROP --A logdrop-380 -m limit --limit 1/second -j LOG --A logdrop-380 -j DROP --A logdrop-381 -m limit --limit 1/second -j LOG --A logdrop-381 -j DROP --A logdrop-382 -m limit --limit 1/second -j LOG --A logdrop-382 -j DROP --A logdrop-383 -m limit --limit 1/second -j LOG --A logdrop-383 -j DROP --A logdrop-384 -m limit --limit 1/second -j LOG --A logdrop-384 -j DROP --A logdrop-385 -m limit --limit 1/second -j LOG --A logdrop-385 -j DROP --A logdrop-386 -m limit --limit 1/second -j LOG --A logdrop-386 -j DROP --A logdrop-387 -m limit --limit 1/second -j LOG --A logdrop-387 -j DROP --A logdrop-388 -m limit --limit 1/second -j LOG --A logdrop-388 -j DROP --A logdrop-389 -m limit --limit 1/second -j LOG --A logdrop-389 -j DROP --A logdrop-39 -m limit --limit 1/second -j LOG --A logdrop-39 -j DROP --A logdrop-390 -m limit --limit 1/second -j LOG --A logdrop-390 -j DROP --A logdrop-391 -m limit --limit 1/second -j LOG --A logdrop-391 -j DROP --A logdrop-392 -m limit --limit 1/second -j LOG --A logdrop-392 -j DROP --A logdrop-393 -m limit --limit 1/second -j LOG --A logdrop-393 -j DROP --A logdrop-394 -m limit --limit 1/second -j LOG --A logdrop-394 -j DROP --A logdrop-395 -m limit --limit 1/second -j LOG --A logdrop-395 -j DROP --A logdrop-396 -m limit --limit 1/second -j LOG --A logdrop-396 -j DROP --A logdrop-397 -m limit --limit 1/second -j LOG --A logdrop-397 -j DROP --A logdrop-398 -m limit --limit 1/second -j LOG --A logdrop-398 -j DROP --A logdrop-399 -m limit --limit 1/second -j LOG --A logdrop-399 -j DROP --A logdrop-4 -m limit --limit 1/second -j LOG --A logdrop-4 -j DROP --A logdrop-40 -m limit --limit 1/second -j LOG --A logdrop-40 -j DROP --A logdrop-400 -m limit --limit 1/second -j LOG --A logdrop-400 -j DROP --A logdrop-401 -m limit --limit 1/second -j LOG --A logdrop-401 -j DROP --A logdrop-402 -m limit --limit 1/second -j LOG --A logdrop-402 -j DROP --A logdrop-403 -m limit --limit 1/second -j LOG --A logdrop-403 -j DROP --A logdrop-404 -m limit --limit 1/second -j LOG --A logdrop-404 -j DROP --A logdrop-405 -m limit --limit 1/second -j LOG --A logdrop-405 -j DROP --A logdrop-406 -m limit --limit 1/second -j LOG --A logdrop-406 -j DROP --A logdrop-407 -m limit --limit 1/second -j LOG --A logdrop-407 -j DROP --A logdrop-408 -m limit --limit 1/second -j LOG --A logdrop-408 -j DROP --A logdrop-409 -m limit --limit 1/second -j LOG --A logdrop-409 -j DROP --A logdrop-41 -m limit --limit 1/second -j LOG --A logdrop-41 -j DROP --A logdrop-410 -m limit --limit 1/second -j LOG --A logdrop-410 -j DROP --A logdrop-411 -m limit --limit 1/second -j LOG --A logdrop-411 -j DROP --A logdrop-412 -m limit --limit 1/second -j LOG --A logdrop-412 -j DROP --A logdrop-413 -m limit --limit 1/second -j LOG --A logdrop-413 -j DROP --A logdrop-414 -m limit --limit 1/second -j LOG --A logdrop-414 -j DROP --A logdrop-415 -m limit --limit 1/second -j LOG --A logdrop-415 -j DROP --A logdrop-416 -m limit --limit 1/second -j LOG --A logdrop-416 -j DROP --A logdrop-417 -m limit --limit 1/second -j LOG --A logdrop-417 -j DROP --A logdrop-418 -m limit --limit 1/second -j LOG --A logdrop-418 -j DROP --A logdrop-419 -m limit --limit 1/second -j LOG --A logdrop-419 -j DROP --A logdrop-42 -m limit --limit 1/second -j LOG --A logdrop-42 -j DROP --A logdrop-420 -m limit --limit 1/second -j LOG --A logdrop-420 -j DROP --A logdrop-421 -m limit --limit 1/second -j LOG --A logdrop-421 -j DROP --A logdrop-422 -m limit --limit 1/second -j LOG --A logdrop-422 -j DROP --A logdrop-423 -m limit --limit 1/second -j LOG --A logdrop-423 -j DROP --A logdrop-424 -m limit --limit 1/second -j LOG --A logdrop-424 -j DROP --A logdrop-425 -m limit --limit 1/second -j LOG --A logdrop-425 -j DROP --A logdrop-426 -m limit --limit 1/second -j LOG --A logdrop-426 -j DROP --A logdrop-427 -m limit --limit 1/second -j LOG --A logdrop-427 -j DROP --A logdrop-428 -m limit --limit 1/second -j LOG --A logdrop-428 -j DROP --A logdrop-429 -m limit --limit 1/second -j LOG --A logdrop-429 -j DROP --A logdrop-43 -m limit --limit 1/second -j LOG --A logdrop-43 -j DROP --A logdrop-430 -m limit --limit 1/second -j LOG --A logdrop-430 -j DROP --A logdrop-431 -m limit --limit 1/second -j LOG --A logdrop-431 -j DROP --A logdrop-432 -m limit --limit 1/second -j LOG --A logdrop-432 -j DROP --A logdrop-433 -m limit --limit 1/second -j LOG --A logdrop-433 -j DROP --A logdrop-434 -m limit --limit 1/second -j LOG --A logdrop-434 -j DROP --A logdrop-435 -m limit --limit 1/second -j LOG --A logdrop-435 -j DROP --A logdrop-436 -m limit --limit 1/second -j LOG --A logdrop-436 -j DROP --A logdrop-437 -m limit --limit 1/second -j LOG --A logdrop-437 -j DROP --A logdrop-438 -m limit --limit 1/second -j LOG --A logdrop-438 -j DROP --A logdrop-439 -m limit --limit 1/second -j LOG --A logdrop-439 -j DROP --A logdrop-44 -m limit --limit 1/second -j LOG --A logdrop-44 -j DROP --A logdrop-440 -m limit --limit 1/second -j LOG --A logdrop-440 -j DROP --A logdrop-441 -m limit --limit 1/second -j LOG --A logdrop-441 -j DROP --A logdrop-442 -m limit --limit 1/second -j LOG --A logdrop-442 -j DROP --A logdrop-443 -m limit --limit 1/second -j LOG --A logdrop-443 -j DROP --A logdrop-444 -m limit --limit 1/second -j LOG --A logdrop-444 -j DROP --A logdrop-445 -m limit --limit 1/second -j LOG --A logdrop-445 -j DROP --A logdrop-446 -m limit --limit 1/second -j LOG --A logdrop-446 -j DROP --A logdrop-447 -m limit --limit 1/second -j LOG --A logdrop-447 -j DROP --A logdrop-448 -m limit --limit 1/second -j LOG --A logdrop-448 -j DROP --A logdrop-449 -m limit --limit 1/second -j LOG --A logdrop-449 -j DROP --A logdrop-45 -m limit --limit 1/second -j LOG --A logdrop-45 -j DROP --A logdrop-450 -m limit --limit 1/second -j LOG --A logdrop-450 -j DROP --A logdrop-451 -m limit --limit 1/second -j LOG --A logdrop-451 -j DROP --A logdrop-452 -m limit --limit 1/second -j LOG --A logdrop-452 -j DROP --A logdrop-453 -m limit --limit 1/second -j LOG --A logdrop-453 -j DROP --A logdrop-454 -m limit --limit 1/second -j LOG --A logdrop-454 -j DROP --A logdrop-455 -m limit --limit 1/second -j LOG --A logdrop-455 -j DROP --A logdrop-456 -m limit --limit 1/second -j LOG --A logdrop-456 -j DROP --A logdrop-457 -m limit --limit 1/second -j LOG --A logdrop-457 -j DROP --A logdrop-458 -m limit --limit 1/second -j LOG --A logdrop-458 -j DROP --A logdrop-46 -m limit --limit 1/second -j LOG --A logdrop-46 -j DROP --A logdrop-47 -m limit --limit 1/second -j LOG --A logdrop-47 -j DROP --A logdrop-48 -m limit --limit 1/second -j LOG --A logdrop-48 -j DROP --A logdrop-49 -m limit --limit 1/second -j LOG --A logdrop-49 -j DROP --A logdrop-5 -m limit --limit 1/second -j LOG --A logdrop-5 -j DROP --A logdrop-50 -m limit --limit 1/second -j LOG --A logdrop-50 -j DROP --A logdrop-51 -m limit --limit 1/second -j LOG --A logdrop-51 -j DROP --A logdrop-52 -m limit --limit 1/second -j LOG --A logdrop-52 -j DROP --A logdrop-53 -m limit --limit 1/second -j LOG --A logdrop-53 -j DROP --A logdrop-54 -m limit --limit 1/second -j LOG --A logdrop-54 -j DROP --A logdrop-55 -m limit --limit 1/second -j LOG --A logdrop-55 -j DROP --A logdrop-56 -m limit --limit 1/second -j LOG --A logdrop-56 -j DROP --A logdrop-57 -m limit --limit 1/second -j LOG --A logdrop-57 -j DROP --A logdrop-58 -m limit --limit 1/second -j LOG --A logdrop-58 -j DROP --A logdrop-59 -m limit --limit 1/second -j LOG --A logdrop-59 -j DROP --A logdrop-6 -m limit --limit 1/second -j LOG --A logdrop-6 -j DROP --A logdrop-60 -m limit --limit 1/second -j LOG --A logdrop-60 -j DROP --A logdrop-61 -m limit --limit 1/second -j LOG --A logdrop-61 -j DROP --A logdrop-62 -m limit --limit 1/second -j LOG --A logdrop-62 -j DROP --A logdrop-63 -m limit --limit 1/second -j LOG --A logdrop-63 -j DROP --A logdrop-64 -m limit --limit 1/second -j LOG --A logdrop-64 -j DROP --A logdrop-65 -m limit --limit 1/second -j LOG --A logdrop-65 -j DROP --A logdrop-66 -m limit --limit 1/second -j LOG --A logdrop-66 -j DROP --A logdrop-67 -m limit --limit 1/second -j LOG --A logdrop-67 -j DROP --A logdrop-68 -m limit --limit 1/second -j LOG --A logdrop-68 -j DROP --A logdrop-69 -m limit --limit 1/second -j LOG --A logdrop-69 -j DROP --A logdrop-7 -m limit --limit 1/second -j LOG --A logdrop-7 -j DROP --A logdrop-70 -m limit --limit 1/second -j LOG --A logdrop-70 -j DROP --A logdrop-71 -m limit --limit 1/second -j LOG --A logdrop-71 -j DROP --A logdrop-72 -m limit --limit 1/second -j LOG --A logdrop-72 -j DROP --A logdrop-73 -m limit --limit 1/second -j LOG --A logdrop-73 -j DROP --A logdrop-74 -m limit --limit 1/second -j LOG --A logdrop-74 -j DROP --A logdrop-75 -m limit --limit 1/second -j LOG --A logdrop-75 -j DROP --A logdrop-76 -m limit --limit 1/second -j LOG --A logdrop-76 -j DROP --A logdrop-77 -m limit --limit 1/second -j LOG --A logdrop-77 -j DROP --A logdrop-78 -m limit --limit 1/second -j LOG --A logdrop-78 -j DROP --A logdrop-79 -m limit --limit 1/second -j LOG --A logdrop-79 -j DROP --A logdrop-8 -m limit --limit 1/second -j LOG --A logdrop-8 -j DROP --A logdrop-80 -m limit --limit 1/second -j LOG --A logdrop-80 -j DROP --A logdrop-81 -m limit --limit 1/second -j LOG --A logdrop-81 -j DROP --A logdrop-82 -m limit --limit 1/second -j LOG --A logdrop-82 -j DROP --A logdrop-83 -m limit --limit 1/second -j LOG --A logdrop-83 -j DROP --A logdrop-84 -m limit --limit 1/second -j LOG --A logdrop-84 -j DROP --A logdrop-85 -m limit --limit 1/second -j LOG --A logdrop-85 -j DROP --A logdrop-86 -m limit --limit 1/second -j LOG --A logdrop-86 -j DROP --A logdrop-87 -m limit --limit 1/second -j LOG --A logdrop-87 -j DROP --A logdrop-88 -m limit --limit 1/second -j LOG --A logdrop-88 -j DROP --A logdrop-89 -m limit --limit 1/second -j LOG --A logdrop-89 -j DROP --A logdrop-9 -m limit --limit 1/second -j LOG --A logdrop-9 -j DROP --A logdrop-90 -m limit --limit 1/second -j LOG --A logdrop-90 -j DROP --A logdrop-91 -m limit --limit 1/second -j LOG --A logdrop-91 -j DROP --A logdrop-92 -m limit --limit 1/second -j LOG --A logdrop-92 -j DROP --A logdrop-93 -m limit --limit 1/second -j LOG --A logdrop-93 -j DROP --A logdrop-94 -m limit --limit 1/second -j LOG --A logdrop-94 -j DROP --A logdrop-95 -m limit --limit 1/second -j LOG --A logdrop-95 -j DROP --A logdrop-96 -m limit --limit 1/second -j LOG --A logdrop-96 -j DROP --A logdrop-97 -m limit --limit 1/second -j LOG --A logdrop-97 -j DROP --A logdrop-98 -m limit --limit 1/second -j LOG --A logdrop-98 -j DROP --A logdrop-99 -m limit --limit 1/second -j LOG --A logdrop-99 -j DROP --A logpass-0 -m limit --limit 1/second -j LOG --A logpass-16 -m limit --limit 1/second -j LOG --A logpass-30 -m limit --limit 1/second -j LOG --A logpass-37 -m limit --limit 1/second -j LOG --A logpass-50 -m limit --limit 1/second -j LOG --A logpass-9 -m limit --limit 1/second -j LOG --A logreject-0 -m limit --limit 1/second -j LOG --A logreject-0 -j REJECT --A logtarpit-0 -m limit --limit 1/second -j LOG --A logtarpit-0 -j tarpit --A tarpit -p tcp -j TARPIT --A tarpit -j DROP -COMMIT -*mangle -:INPUT ACCEPT [0:0] -:OUTPUT ACCEPT [0:0] -:POSTROUTING ACCEPT [0:0] -:PREROUTING ACCEPT [0:0] --A INPUT -j MARK --set-mark 2 --A OUTPUT -j MARK --set-mark 0 --A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 --A PREROUTING -i eth0 -j MARK --set-mark 0 -COMMIT -*raw -:OUTPUT ACCEPT [0:0] -:PREROUTING ACCEPT [0:0] --A OUTPUT -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -p tcp --dport 80 -j CT --notrack --A OUTPUT -p esp -j CT --notrack --A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack --A OUTPUT -j CT --notrack --A PREROUTING -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack --A PREROUTING -i eth0 -j CT --notrack --A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack -COMMIT - diff --git a/test/output/filter-limit/dump b/test/output/filter-limit/dump new file mode 100644 index 0000000..281fd03 --- /dev/null +++ b/test/output/filter-limit/dump @@ -0,0 +1,39284 @@ +Dnat 1 {"in":["_fw","A"]} +(zone) + inet/nat/OUTPUT -j REDIRECT + inet/nat/PREROUTING -i eth0 -j REDIRECT + +Dnat 2 {"in":"B"} +(zone) + inet/nat/PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT + + +Filter 1 {"conn-limit":1,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-0 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-0 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-0 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-0 + inet/filter/limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-0 + inet6/filter/limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-0 + inet/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet/filter/logdrop-0 -j DROP + inet6/filter/logdrop-0 -j DROP + inet/filter/limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 2 {"action":"pass","conn-limit":1,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-1 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-1 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1 + inet/filter/limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 + inet6/filter/limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 + inet/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1 -j DROP + inet6/filter/logdrop-1 -j DROP + inet/filter/limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 3 {"conn-limit":1,"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-2 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-2 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-2 + inet/filter/limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 + inet6/filter/limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 + inet/filter/logdrop-2 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2 -j DROP + inet6/filter/logdrop-2 -j DROP + inet/filter/limit-2 -m limit --limit 1/second -j LOG + inet6/filter/limit-2 -m limit --limit 1/second -j LOG + inet/filter/limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 4 {"action":"pass","conn-limit":1,"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-3 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-3 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-3 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-3 + inet/filter/limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 + inet6/filter/limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 + inet/filter/logdrop-3 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-3 -m limit --limit 1/second -j LOG + inet/filter/logdrop-3 -j DROP + inet6/filter/logdrop-3 -j DROP + inet/filter/limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 5 {"conn-limit":1,"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-4 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-4 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-4 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-4 + inet/filter/limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 + inet6/filter/limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 + inet/filter/logdrop-4 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-4 -m limit --limit 1/second -j LOG + inet/filter/logdrop-4 -j DROP + inet6/filter/logdrop-4 -j DROP + inet/filter/limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 6 {"action":"pass","conn-limit":1,"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-5 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-5 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-5 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-5 + inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 + inet6/filter/limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 + inet/filter/logdrop-5 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-5 -m limit --limit 1/second -j LOG + inet/filter/logdrop-5 -j DROP + inet6/filter/logdrop-5 -j DROP + inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 7 {"conn-limit":{},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-6 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-6 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-6 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-6 + inet/filter/limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 + inet6/filter/limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 + inet/filter/logdrop-6 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-6 -m limit --limit 1/second -j LOG + inet/filter/logdrop-6 -j DROP + inet6/filter/logdrop-6 -j DROP + inet/filter/limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 8 {"action":"pass","conn-limit":{},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-7 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-7 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-7 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-7 + inet/filter/limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 + inet6/filter/limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 + inet/filter/logdrop-7 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-7 -m limit --limit 1/second -j LOG + inet/filter/logdrop-7 -j DROP + inet6/filter/logdrop-7 -j DROP + inet/filter/limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 9 {"conn-limit":{},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-8 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-8 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-8 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-8 + inet/filter/limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 + inet6/filter/limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 + inet/filter/logdrop-8 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-8 -m limit --limit 1/second -j LOG + inet/filter/logdrop-8 -j DROP + inet6/filter/logdrop-8 -j DROP + inet/filter/limit-8 -m limit --limit 1/second -j LOG + inet6/filter/limit-8 -m limit --limit 1/second -j LOG + inet/filter/limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 10 {"action":"pass","conn-limit":{},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-9 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-9 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-9 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-9 + inet/filter/limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 + inet6/filter/limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 + inet/filter/logdrop-9 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-9 -m limit --limit 1/second -j LOG + inet/filter/logdrop-9 -j DROP + inet6/filter/logdrop-9 -j DROP + inet/filter/limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 11 {"conn-limit":{},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-10 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-10 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-10 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-10 + inet/filter/limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 + inet6/filter/limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 + inet/filter/logdrop-10 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-10 -m limit --limit 1/second -j LOG + inet/filter/logdrop-10 -j DROP + inet6/filter/logdrop-10 -j DROP + inet/filter/limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 12 {"action":"pass","conn-limit":{},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-11 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-11 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-11 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-11 + inet/filter/limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 + inet6/filter/limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 + inet/filter/logdrop-11 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-11 -m limit --limit 1/second -j LOG + inet/filter/logdrop-11 -j DROP + inet6/filter/logdrop-11 -j DROP + inet/filter/limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 13 {"conn-limit":{"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-12 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-12 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-12 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-12 + inet/filter/limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 + inet6/filter/limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 + inet/filter/logdrop-12 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-12 -m limit --limit 1/second -j LOG + inet/filter/logdrop-12 -j DROP + inet6/filter/logdrop-12 -j DROP + inet/filter/limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 14 {"action":"pass","conn-limit":{"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-13 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-13 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-13 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-13 + inet/filter/limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 + inet6/filter/limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 + inet/filter/logdrop-13 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-13 -m limit --limit 1/second -j LOG + inet/filter/logdrop-13 -j DROP + inet6/filter/logdrop-13 -j DROP + inet/filter/limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 15 {"conn-limit":{"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-14 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-14 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-14 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-14 + inet/filter/limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 + inet6/filter/limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 + inet/filter/logdrop-14 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-14 -m limit --limit 1/second -j LOG + inet/filter/logdrop-14 -j DROP + inet6/filter/logdrop-14 -j DROP + inet/filter/limit-14 -m limit --limit 1/second -j LOG + inet6/filter/limit-14 -m limit --limit 1/second -j LOG + inet/filter/limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 16 {"action":"pass","conn-limit":{"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-15 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-15 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-15 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-15 + inet/filter/limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 + inet6/filter/limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 + inet/filter/logdrop-15 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-15 -m limit --limit 1/second -j LOG + inet/filter/logdrop-15 -j DROP + inet6/filter/logdrop-15 -j DROP + inet/filter/limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 17 {"conn-limit":{"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-16 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-16 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-16 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-16 + inet/filter/limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 + inet6/filter/limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 + inet/filter/logdrop-16 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-16 -m limit --limit 1/second -j LOG + inet/filter/logdrop-16 -j DROP + inet6/filter/logdrop-16 -j DROP + inet/filter/limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 18 {"action":"pass","conn-limit":{"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-17 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-17 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-17 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-17 + inet/filter/limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 + inet6/filter/limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 + inet/filter/logdrop-17 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-17 -m limit --limit 1/second -j LOG + inet/filter/logdrop-17 -j DROP + inet6/filter/logdrop-17 -j DROP + inet/filter/limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 19 {"conn-limit":{"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-18 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-18 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-18 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-18 + inet/filter/limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-18 + inet6/filter/limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-18 + inet/filter/logdrop-18 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-18 -m limit --limit 1/second -j LOG + inet/filter/logdrop-18 -j DROP + inet6/filter/logdrop-18 -j DROP + inet/filter/limit-18 -j ACCEPT + inet6/filter/limit-18 -j ACCEPT + +Filter 20 {"action":"pass","conn-limit":{"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-19 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-19 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-19 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-19 + inet/filter/limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-19 + inet6/filter/limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 + inet/filter/logdrop-19 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-19 -m limit --limit 1/second -j LOG + inet/filter/logdrop-19 -j DROP + inet6/filter/logdrop-19 -j DROP + +Filter 21 {"conn-limit":{"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-20 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-20 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-20 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-20 + inet/filter/limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20 + inet6/filter/limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-20 + inet/filter/logdrop-20 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-20 -m limit --limit 1/second -j LOG + inet/filter/logdrop-20 -j DROP + inet6/filter/logdrop-20 -j DROP + inet/filter/limit-20 -m limit --limit 1/second -j LOG + inet6/filter/limit-20 -m limit --limit 1/second -j LOG + inet/filter/limit-20 -j ACCEPT + inet6/filter/limit-20 -j ACCEPT + +Filter 22 {"action":"pass","conn-limit":{"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-21 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-21 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-21 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-21 + inet/filter/limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-21 + inet6/filter/limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 + inet/filter/logdrop-21 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-21 -m limit --limit 1/second -j LOG + inet/filter/logdrop-21 -j DROP + inet6/filter/logdrop-21 -j DROP + inet/filter/limit-21 -m limit --limit 1/second -j LOG + inet6/filter/limit-21 -m limit --limit 1/second -j LOG + +Filter 23 {"conn-limit":{"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-22 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-22 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-22 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-22 + inet/filter/limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-22 + inet6/filter/limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 + inet/filter/logdrop-22 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-22 -m limit --limit 1/second -j LOG + inet/filter/logdrop-22 -j DROP + inet6/filter/logdrop-22 -j DROP + inet/filter/limit-22 -j ACCEPT + inet6/filter/limit-22 -j ACCEPT + +Filter 24 {"action":"pass","conn-limit":{"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-23 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-23 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-23 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-23 + inet/filter/limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-23 + inet6/filter/limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 + inet/filter/logdrop-23 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-23 -m limit --limit 1/second -j LOG + inet/filter/logdrop-23 -j DROP + inet6/filter/logdrop-23 -j DROP + +Filter 25 {"conn-limit":{"addr":"dest","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-24 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-24 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-24 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-24 + inet/filter/limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-24 + inet6/filter/limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-24 + inet/filter/logdrop-24 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-24 -m limit --limit 1/second -j LOG + inet/filter/logdrop-24 -j DROP + inet6/filter/logdrop-24 -j DROP + inet/filter/limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 26 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-25 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-25 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-25 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-25 + inet/filter/limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 + inet6/filter/limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 + inet/filter/logdrop-25 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-25 -m limit --limit 1/second -j LOG + inet/filter/logdrop-25 -j DROP + inet6/filter/logdrop-25 -j DROP + inet/filter/limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 27 {"conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-26 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-26 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-26 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-26 + inet/filter/limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 + inet6/filter/limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 + inet/filter/logdrop-26 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-26 -m limit --limit 1/second -j LOG + inet/filter/logdrop-26 -j DROP + inet6/filter/logdrop-26 -j DROP + inet/filter/limit-26 -m limit --limit 1/second -j LOG + inet6/filter/limit-26 -m limit --limit 1/second -j LOG + inet/filter/limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 28 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-27 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-27 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-27 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-27 + inet/filter/limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 + inet6/filter/limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 + inet/filter/logdrop-27 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-27 -m limit --limit 1/second -j LOG + inet/filter/logdrop-27 -j DROP + inet6/filter/logdrop-27 -j DROP + inet/filter/limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 29 {"conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-28 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-28 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-28 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-28 + inet/filter/limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 + inet6/filter/limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 + inet/filter/logdrop-28 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-28 -m limit --limit 1/second -j LOG + inet/filter/logdrop-28 -j DROP + inet6/filter/logdrop-28 -j DROP + inet/filter/limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 30 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-29 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-29 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-29 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-29 + inet/filter/limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 + inet6/filter/limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 + inet/filter/logdrop-29 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-29 -m limit --limit 1/second -j LOG + inet/filter/logdrop-29 -j DROP + inet6/filter/logdrop-29 -j DROP + inet/filter/limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 31 {"conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-30 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-30 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-30 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-30 + inet/filter/limit-30 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-30 + inet6/filter/limit-30 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-30 + inet/filter/logdrop-30 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-30 -m limit --limit 1/second -j LOG + inet/filter/logdrop-30 -j DROP + inet6/filter/logdrop-30 -j DROP + inet/filter/limit-30 -j ACCEPT + inet6/filter/limit-30 -j ACCEPT + +Filter 32 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-31 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-31 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-31 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-31 + inet/filter/limit-31 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 + inet6/filter/limit-31 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 + inet/filter/logdrop-31 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-31 -m limit --limit 1/second -j LOG + inet/filter/logdrop-31 -j DROP + inet6/filter/logdrop-31 -j DROP + +Filter 33 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-32 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-32 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-32 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-32 + inet/filter/limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 + inet6/filter/limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 + inet/filter/logdrop-32 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-32 -m limit --limit 1/second -j LOG + inet/filter/logdrop-32 -j DROP + inet6/filter/logdrop-32 -j DROP + inet/filter/limit-32 -m limit --limit 1/second -j LOG + inet6/filter/limit-32 -m limit --limit 1/second -j LOG + inet/filter/limit-32 -j ACCEPT + inet6/filter/limit-32 -j ACCEPT + +Filter 34 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-33 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-33 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-33 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-33 + inet/filter/limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 + inet6/filter/limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 + inet/filter/logdrop-33 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-33 -m limit --limit 1/second -j LOG + inet/filter/logdrop-33 -j DROP + inet6/filter/logdrop-33 -j DROP + inet/filter/limit-33 -m limit --limit 1/second -j LOG + inet6/filter/limit-33 -m limit --limit 1/second -j LOG + +Filter 35 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-34 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-34 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-34 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-34 + inet/filter/limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 + inet6/filter/limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 + inet/filter/logdrop-34 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-34 -m limit --limit 1/second -j LOG + inet/filter/logdrop-34 -j DROP + inet6/filter/logdrop-34 -j DROP + inet/filter/limit-34 -j ACCEPT + inet6/filter/limit-34 -j ACCEPT + +Filter 36 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-35 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-35 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-35 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-35 + inet/filter/limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 + inet6/filter/limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 + inet/filter/logdrop-35 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-35 -m limit --limit 1/second -j LOG + inet/filter/logdrop-35 -j DROP + inet6/filter/logdrop-35 -j DROP + +Filter 37 {"conn-limit":{"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-36 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-36 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-36 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-36 + inet/filter/limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-36 + inet6/filter/limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-36 + inet/filter/logdrop-36 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-36 -m limit --limit 1/second -j LOG + inet/filter/logdrop-36 -j DROP + inet6/filter/logdrop-36 -j DROP + inet/filter/limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-36 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 38 {"action":"pass","conn-limit":{"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-37 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-37 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-37 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-37 + inet/filter/limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 + inet6/filter/limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 + inet/filter/logdrop-37 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-37 -m limit --limit 1/second -j LOG + inet/filter/logdrop-37 -j DROP + inet6/filter/logdrop-37 -j DROP + inet/filter/limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-37 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 39 {"conn-limit":{"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-38 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-38 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-38 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-38 + inet/filter/limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 + inet6/filter/limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 + inet/filter/logdrop-38 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-38 -m limit --limit 1/second -j LOG + inet/filter/logdrop-38 -j DROP + inet6/filter/logdrop-38 -j DROP + inet/filter/limit-38 -m limit --limit 1/second -j LOG + inet6/filter/limit-38 -m limit --limit 1/second -j LOG + inet/filter/limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-38 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 40 {"action":"pass","conn-limit":{"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-39 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-39 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-39 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-39 + inet/filter/limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 + inet6/filter/limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 + inet/filter/logdrop-39 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-39 -m limit --limit 1/second -j LOG + inet/filter/logdrop-39 -j DROP + inet6/filter/logdrop-39 -j DROP + inet/filter/limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-39 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 41 {"conn-limit":{"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-40 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-40 + inet/filter/limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 + inet6/filter/limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 + inet/filter/logdrop-40 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-40 -m limit --limit 1/second -j LOG + inet/filter/logdrop-40 -j DROP + inet6/filter/logdrop-40 -j DROP + inet/filter/limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-40 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 42 {"action":"pass","conn-limit":{"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-41 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-41 + inet/filter/limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 + inet6/filter/limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 + inet/filter/logdrop-41 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-41 -m limit --limit 1/second -j LOG + inet/filter/logdrop-41 -j DROP + inet6/filter/logdrop-41 -j DROP + inet/filter/limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-41 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 43 {"conn-limit":{"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-42 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-42 + inet/filter/limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-42 + inet6/filter/limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-42 + inet/filter/logdrop-42 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-42 -m limit --limit 1/second -j LOG + inet/filter/logdrop-42 -j DROP + inet6/filter/logdrop-42 -j DROP + inet/filter/limit-42 -j ACCEPT + inet6/filter/limit-42 -j ACCEPT + +Filter 44 {"action":"pass","conn-limit":{"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-43 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-43 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-43 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-43 + inet/filter/limit-43 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 + inet6/filter/limit-43 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 + inet/filter/logdrop-43 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-43 -m limit --limit 1/second -j LOG + inet/filter/logdrop-43 -j DROP + inet6/filter/logdrop-43 -j DROP + +Filter 45 {"conn-limit":{"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-44 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-44 + inet/filter/limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 + inet6/filter/limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 + inet/filter/logdrop-44 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-44 -m limit --limit 1/second -j LOG + inet/filter/logdrop-44 -j DROP + inet6/filter/logdrop-44 -j DROP + inet/filter/limit-44 -m limit --limit 1/second -j LOG + inet6/filter/limit-44 -m limit --limit 1/second -j LOG + inet/filter/limit-44 -j ACCEPT + inet6/filter/limit-44 -j ACCEPT + +Filter 46 {"action":"pass","conn-limit":{"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-45 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-45 + inet/filter/limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 + inet6/filter/limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 + inet/filter/logdrop-45 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-45 -m limit --limit 1/second -j LOG + inet/filter/logdrop-45 -j DROP + inet6/filter/logdrop-45 -j DROP + inet/filter/limit-45 -m limit --limit 1/second -j LOG + inet6/filter/limit-45 -m limit --limit 1/second -j LOG + +Filter 47 {"conn-limit":{"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-46 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-46 + inet/filter/limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 + inet6/filter/limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 + inet/filter/logdrop-46 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-46 -m limit --limit 1/second -j LOG + inet/filter/logdrop-46 -j DROP + inet6/filter/logdrop-46 -j DROP + inet/filter/limit-46 -j ACCEPT + inet6/filter/limit-46 -j ACCEPT + +Filter 48 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-47 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-47 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-47 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-47 + inet/filter/limit-47 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 + inet6/filter/limit-47 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 + inet/filter/logdrop-47 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-47 -m limit --limit 1/second -j LOG + inet/filter/logdrop-47 -j DROP + inet6/filter/logdrop-47 -j DROP + +Filter 49 {"conn-limit":{"addr":"dest","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-48 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-48 + inet/filter/limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-48 + inet6/filter/limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-48 + inet/filter/logdrop-48 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-48 -m limit --limit 1/second -j LOG + inet/filter/logdrop-48 -j DROP + inet6/filter/logdrop-48 -j DROP + inet/filter/limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-48 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 50 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-49 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-49 + inet/filter/limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 + inet6/filter/limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 + inet/filter/logdrop-49 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-49 -m limit --limit 1/second -j LOG + inet/filter/logdrop-49 -j DROP + inet6/filter/logdrop-49 -j DROP + inet/filter/limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-49 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 51 {"conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-50 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-50 + inet/filter/limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 + inet6/filter/limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 + inet/filter/logdrop-50 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-50 -m limit --limit 1/second -j LOG + inet/filter/logdrop-50 -j DROP + inet6/filter/logdrop-50 -j DROP + inet/filter/limit-50 -m limit --limit 1/second -j LOG + inet6/filter/limit-50 -m limit --limit 1/second -j LOG + inet/filter/limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-50 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 52 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-51 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-51 + inet/filter/limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 + inet6/filter/limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 + inet/filter/logdrop-51 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-51 -m limit --limit 1/second -j LOG + inet/filter/logdrop-51 -j DROP + inet6/filter/logdrop-51 -j DROP + inet/filter/limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-51 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 53 {"conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-52 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-52 + inet/filter/limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 + inet6/filter/limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 + inet/filter/logdrop-52 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-52 -m limit --limit 1/second -j LOG + inet/filter/logdrop-52 -j DROP + inet6/filter/logdrop-52 -j DROP + inet/filter/limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-52 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 54 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-53 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-53 + inet/filter/limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 + inet6/filter/limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 + inet/filter/logdrop-53 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-53 -m limit --limit 1/second -j LOG + inet/filter/logdrop-53 -j DROP + inet6/filter/logdrop-53 -j DROP + inet/filter/limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-53 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 55 {"conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-54 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-54 + inet/filter/limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-54 + inet6/filter/limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-54 + inet/filter/logdrop-54 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-54 -m limit --limit 1/second -j LOG + inet/filter/logdrop-54 -j DROP + inet6/filter/logdrop-54 -j DROP + inet/filter/limit-54 -j ACCEPT + inet6/filter/limit-54 -j ACCEPT + +Filter 56 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-55 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-55 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-55 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-55 + inet/filter/limit-55 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 + inet6/filter/limit-55 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 + inet/filter/logdrop-55 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-55 -m limit --limit 1/second -j LOG + inet/filter/logdrop-55 -j DROP + inet6/filter/logdrop-55 -j DROP + +Filter 57 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-56 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-56 + inet/filter/limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 + inet6/filter/limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 + inet/filter/logdrop-56 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-56 -m limit --limit 1/second -j LOG + inet/filter/logdrop-56 -j DROP + inet6/filter/logdrop-56 -j DROP + inet/filter/limit-56 -m limit --limit 1/second -j LOG + inet6/filter/limit-56 -m limit --limit 1/second -j LOG + inet/filter/limit-56 -j ACCEPT + inet6/filter/limit-56 -j ACCEPT + +Filter 58 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-57 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-57 + inet/filter/limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 + inet6/filter/limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 + inet/filter/logdrop-57 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-57 -m limit --limit 1/second -j LOG + inet/filter/logdrop-57 -j DROP + inet6/filter/logdrop-57 -j DROP + inet/filter/limit-57 -m limit --limit 1/second -j LOG + inet6/filter/limit-57 -m limit --limit 1/second -j LOG + +Filter 59 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-58 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-58 + inet/filter/limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 + inet6/filter/limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 + inet/filter/logdrop-58 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-58 -m limit --limit 1/second -j LOG + inet/filter/logdrop-58 -j DROP + inet6/filter/logdrop-58 -j DROP + inet/filter/limit-58 -j ACCEPT + inet6/filter/limit-58 -j ACCEPT + +Filter 60 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-59 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-59 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-59 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-59 + inet/filter/limit-59 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 + inet6/filter/limit-59 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 + inet/filter/logdrop-59 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-59 -m limit --limit 1/second -j LOG + inet/filter/logdrop-59 -j DROP + inet6/filter/logdrop-59 -j DROP + +Filter 61 {"conn-limit":{"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-60 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-60 + inet/filter/limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 62 {"action":"pass","conn-limit":{"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-61 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-61 + inet/filter/limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 63 {"conn-limit":{"log":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-62 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-62 + inet/filter/limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-62 -m limit --limit 1/second -j LOG + inet6/filter/limit-62 -m limit --limit 1/second -j LOG + inet/filter/limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 64 {"action":"pass","conn-limit":{"log":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-63 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-63 + inet/filter/limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 65 {"conn-limit":{"log":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-64 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-64 + inet/filter/limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 66 {"action":"pass","conn-limit":{"log":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-65 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-65 + inet/filter/limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 67 {"conn-limit":{"log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-66 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-66 + inet/filter/limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 68 {"action":"pass","conn-limit":{"log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-67 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-67 + inet/filter/limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 69 {"conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-68 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-68 + inet/filter/limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-68 -m limit --limit 1/second -j LOG + inet6/filter/limit-68 -m limit --limit 1/second -j LOG + inet/filter/limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 70 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-69 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-69 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-69 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-69 + inet/filter/limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 71 {"conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-70 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-70 + inet/filter/limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 72 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-71 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-71 + inet/filter/limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 73 {"conn-limit":{"log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-72 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-72 + inet/filter/limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-72 -j ACCEPT + inet6/filter/limit-72 -j ACCEPT + +Filter 74 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-73 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-73 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-73 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-73 + inet/filter/limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 75 {"conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-74 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-74 + inet/filter/limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-74 -m limit --limit 1/second -j LOG + inet6/filter/limit-74 -m limit --limit 1/second -j LOG + inet/filter/limit-74 -j ACCEPT + inet6/filter/limit-74 -j ACCEPT + +Filter 76 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-75 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-75 + inet/filter/limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-75 -m limit --limit 1/second -j LOG + inet6/filter/limit-75 -m limit --limit 1/second -j LOG + +Filter 77 {"conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-76 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-76 + inet/filter/limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-76 -j ACCEPT + inet6/filter/limit-76 -j ACCEPT + +Filter 78 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-77 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-77 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-77 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-77 + inet/filter/limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 79 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-78 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-78 + inet/filter/limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 80 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-79 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-79 + inet/filter/limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 81 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-80 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-80 + inet/filter/limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-80 -m limit --limit 1/second -j LOG + inet6/filter/limit-80 -m limit --limit 1/second -j LOG + inet/filter/limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 82 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-81 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-81 + inet/filter/limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 83 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-82 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-82 + inet/filter/limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 84 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-83 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-83 + inet/filter/limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 85 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-84 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-84 + inet/filter/limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-84 -j ACCEPT + inet6/filter/limit-84 -j ACCEPT + +Filter 86 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-85 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-85 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-85 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-85 + inet/filter/limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 87 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-86 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-86 + inet/filter/limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-86 -m limit --limit 1/second -j LOG + inet6/filter/limit-86 -m limit --limit 1/second -j LOG + inet/filter/limit-86 -j ACCEPT + inet6/filter/limit-86 -j ACCEPT + +Filter 88 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-87 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-87 + inet/filter/limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-87 -m limit --limit 1/second -j LOG + inet6/filter/limit-87 -m limit --limit 1/second -j LOG + +Filter 89 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-88 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-88 + inet/filter/limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-88 -j ACCEPT + inet6/filter/limit-88 -j ACCEPT + +Filter 90 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-89 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-89 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-89 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-89 + inet/filter/limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 91 {"conn-limit":{"log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-90 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-90 + inet/filter/limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-90 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-90 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 92 {"action":"pass","conn-limit":{"log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-91 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-91 + inet/filter/limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-91 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-91 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 93 {"conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-92 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-92 + inet/filter/limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-92 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-92 -m limit --limit 1/second -j LOG + inet6/filter/limit-92 -m limit --limit 1/second -j LOG + inet/filter/limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-92 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 94 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-93 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-93 + inet/filter/limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-93 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-93 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 95 {"conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-94 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-94 + inet/filter/limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-94 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-94 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 96 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-95 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-95 + inet/filter/limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-95 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-95 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 97 {"conn-limit":{"log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-96 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-96 + inet/filter/limit-96 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-96 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-96 -j ACCEPT + inet6/filter/limit-96 -j ACCEPT + +Filter 98 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-97 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-97 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-97 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-97 + inet/filter/limit-97 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-97 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 99 {"conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-98 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-98 + inet/filter/limit-98 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-98 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-98 -m limit --limit 1/second -j LOG + inet6/filter/limit-98 -m limit --limit 1/second -j LOG + inet/filter/limit-98 -j ACCEPT + inet6/filter/limit-98 -j ACCEPT + +Filter 100 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-99 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-99 + inet/filter/limit-99 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-99 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-99 -m limit --limit 1/second -j LOG + inet6/filter/limit-99 -m limit --limit 1/second -j LOG + +Filter 101 {"conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-100 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-100 + inet/filter/limit-100 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-100 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-100 -j ACCEPT + inet6/filter/limit-100 -j ACCEPT + +Filter 102 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-101 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-101 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-101 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-101 + inet/filter/limit-101 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-101 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 103 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-102 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-102 + inet/filter/limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 104 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-103 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-103 + inet/filter/limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-103 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 105 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-104 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-104 + inet/filter/limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-104 -m limit --limit 1/second -j LOG + inet6/filter/limit-104 -m limit --limit 1/second -j LOG + inet/filter/limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 106 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-105 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-105 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-105 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-105 + inet/filter/limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-105 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 107 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-106 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-106 + inet/filter/limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 108 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-107 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-107 + inet/filter/limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-107 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 109 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-108 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-108 + inet/filter/limit-108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-108 -j ACCEPT + inet6/filter/limit-108 -j ACCEPT + +Filter 110 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-109 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-109 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-109 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-109 + inet/filter/limit-109 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-109 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 111 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-110 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-110 + inet/filter/limit-110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-110 -m limit --limit 1/second -j LOG + inet6/filter/limit-110 -m limit --limit 1/second -j LOG + inet/filter/limit-110 -j ACCEPT + inet6/filter/limit-110 -j ACCEPT + +Filter 112 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-111 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-111 + inet/filter/limit-111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-111 -m limit --limit 1/second -j LOG + inet6/filter/limit-111 -m limit --limit 1/second -j LOG + +Filter 113 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-112 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-112 + inet/filter/limit-112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-112 -j ACCEPT + inet6/filter/limit-112 -j ACCEPT + +Filter 114 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-113 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-113 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-113 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-113 + inet/filter/limit-113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 115 {"conn-limit":{"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-114 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-114 + inet/filter/limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 116 {"action":"pass","conn-limit":{"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-115 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-115 + inet/filter/limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 117 {"conn-limit":{"log":"none"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-116 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-116 + inet/filter/limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-116 -m limit --limit 1/second -j LOG + inet6/filter/limit-116 -m limit --limit 1/second -j LOG + inet/filter/limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 118 {"action":"pass","conn-limit":{"log":"none"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-117 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-117 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-117 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-117 + inet/filter/limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 119 {"conn-limit":{"log":"none"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-118 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-118 + inet/filter/limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 120 {"action":"pass","conn-limit":{"log":"none"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-119 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-119 + inet/filter/limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 121 {"conn-limit":{"log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-120 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-120 + inet/filter/limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 122 {"action":"pass","conn-limit":{"log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-121 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-121 + inet/filter/limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 123 {"conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-122 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-122 + inet/filter/limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-122 -m limit --limit 1/second -j LOG + inet6/filter/limit-122 -m limit --limit 1/second -j LOG + inet/filter/limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 124 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-123 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-123 + inet/filter/limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 125 {"conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-124 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-124 + inet/filter/limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 126 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-125 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-125 + inet/filter/limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 127 {"conn-limit":{"log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-126 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-126 + inet/filter/limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-126 -j ACCEPT + inet6/filter/limit-126 -j ACCEPT + +Filter 128 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-127 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-127 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-127 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-127 + inet/filter/limit-127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 129 {"conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-128 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-128 + inet/filter/limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-128 -m limit --limit 1/second -j LOG + inet6/filter/limit-128 -m limit --limit 1/second -j LOG + inet/filter/limit-128 -j ACCEPT + inet6/filter/limit-128 -j ACCEPT + +Filter 130 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-129 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-129 + inet/filter/limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-129 -m limit --limit 1/second -j LOG + inet6/filter/limit-129 -m limit --limit 1/second -j LOG + +Filter 131 {"conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-130 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-130 + inet/filter/limit-130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-130 -j ACCEPT + inet6/filter/limit-130 -j ACCEPT + +Filter 132 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-131 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-131 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-131 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-131 + inet/filter/limit-131 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 133 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-132 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-132 + inet/filter/limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 134 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-133 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-133 + inet/filter/limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 135 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-134 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-134 + inet/filter/limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-134 -m limit --limit 1/second -j LOG + inet6/filter/limit-134 -m limit --limit 1/second -j LOG + inet/filter/limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 136 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-135 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-135 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-135 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-135 + inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 137 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-136 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-136 + inet/filter/limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 138 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-137 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-137 + inet/filter/limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 139 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-138 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-138 + inet/filter/limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-138 -j ACCEPT + inet6/filter/limit-138 -j ACCEPT + +Filter 140 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-139 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-139 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-139 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-139 + inet/filter/limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 141 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-140 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-140 + inet/filter/limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-140 -m limit --limit 1/second -j LOG + inet6/filter/limit-140 -m limit --limit 1/second -j LOG + inet/filter/limit-140 -j ACCEPT + inet6/filter/limit-140 -j ACCEPT + +Filter 142 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-141 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-141 + inet/filter/limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-141 -m limit --limit 1/second -j LOG + inet6/filter/limit-141 -m limit --limit 1/second -j LOG + +Filter 143 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-142 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-142 + inet/filter/limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-142 -j ACCEPT + inet6/filter/limit-142 -j ACCEPT + +Filter 144 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-143 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-143 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-143 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-143 + inet/filter/limit-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 145 {"conn-limit":{"log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-144 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-144 + inet/filter/limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-144 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-144 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 146 {"action":"pass","conn-limit":{"log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-145 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-145 + inet/filter/limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-145 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-145 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 147 {"conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-146 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-146 + inet/filter/limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-146 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-146 -m limit --limit 1/second -j LOG + inet6/filter/limit-146 -m limit --limit 1/second -j LOG + inet/filter/limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-146 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 148 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-147 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-147 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-147 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-147 + inet/filter/limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-147 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-147 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 149 {"conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-148 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-148 + inet/filter/limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-148 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-148 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 150 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-149 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-149 + inet/filter/limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-149 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-149 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 151 {"conn-limit":{"log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-150 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-150 + inet/filter/limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-150 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-150 -j ACCEPT + inet6/filter/limit-150 -j ACCEPT + +Filter 152 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-151 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-151 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-151 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-151 + inet/filter/limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-151 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 153 {"conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-152 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-152 + inet/filter/limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-152 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-152 -m limit --limit 1/second -j LOG + inet6/filter/limit-152 -m limit --limit 1/second -j LOG + inet/filter/limit-152 -j ACCEPT + inet6/filter/limit-152 -j ACCEPT + +Filter 154 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-153 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-153 + inet/filter/limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-153 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-153 -m limit --limit 1/second -j LOG + inet6/filter/limit-153 -m limit --limit 1/second -j LOG + +Filter 155 {"conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-154 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-154 + inet/filter/limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-154 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-154 -j ACCEPT + inet6/filter/limit-154 -j ACCEPT + +Filter 156 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-155 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-155 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-155 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-155 + inet/filter/limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-155 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 157 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-156 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-156 + inet/filter/limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-156 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-156 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 158 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-157 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-157 + inet/filter/limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-157 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-157 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 159 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-158 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-158 + inet/filter/limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-158 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-158 -m limit --limit 1/second -j LOG + inet6/filter/limit-158 -m limit --limit 1/second -j LOG + inet/filter/limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-158 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 160 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-159 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-159 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-159 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-159 + inet/filter/limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-159 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-159 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 161 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-160 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-160 + inet/filter/limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-160 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-160 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 162 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-161 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-161 + inet/filter/limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-161 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-161 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 163 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-162 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-162 + inet/filter/limit-162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-162 -j ACCEPT + inet6/filter/limit-162 -j ACCEPT + +Filter 164 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-163 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-163 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-163 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-163 + inet/filter/limit-163 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-163 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 165 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-164 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-164 + inet/filter/limit-164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-164 -m limit --limit 1/second -j LOG + inet6/filter/limit-164 -m limit --limit 1/second -j LOG + inet/filter/limit-164 -j ACCEPT + inet6/filter/limit-164 -j ACCEPT + +Filter 166 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-165 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-165 + inet/filter/limit-165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-165 -m limit --limit 1/second -j LOG + inet6/filter/limit-165 -m limit --limit 1/second -j LOG + +Filter 167 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-166 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-166 + inet/filter/limit-166 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-166 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-166 -j ACCEPT + inet6/filter/limit-166 -j ACCEPT + +Filter 168 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-167 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-167 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-167 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-167 + inet/filter/limit-167 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-167 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 169 {"conn-limit":{"interval":5},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-168 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-168 + inet/filter/limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-60 + inet6/filter/limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-60 + inet/filter/logdrop-60 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-60 -m limit --limit 1/second -j LOG + inet/filter/logdrop-60 -j DROP + inet6/filter/logdrop-60 -j DROP + inet/filter/limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 170 {"action":"pass","conn-limit":{"interval":5},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-169 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-169 + inet/filter/limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 + inet6/filter/limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 + inet/filter/logdrop-61 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-61 -m limit --limit 1/second -j LOG + inet/filter/logdrop-61 -j DROP + inet6/filter/logdrop-61 -j DROP + inet/filter/limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 171 {"conn-limit":{"interval":5},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-170 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-170 + inet/filter/limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 + inet6/filter/limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 + inet/filter/logdrop-62 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-62 -m limit --limit 1/second -j LOG + inet/filter/logdrop-62 -j DROP + inet6/filter/logdrop-62 -j DROP + inet/filter/limit-170 -m limit --limit 1/second -j LOG + inet6/filter/limit-170 -m limit --limit 1/second -j LOG + inet/filter/limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 172 {"action":"pass","conn-limit":{"interval":5},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-171 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-171 + inet/filter/limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 + inet6/filter/limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 + inet/filter/logdrop-63 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-63 -m limit --limit 1/second -j LOG + inet/filter/logdrop-63 -j DROP + inet6/filter/logdrop-63 -j DROP + inet/filter/limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 173 {"conn-limit":{"interval":5},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-172 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-172 + inet/filter/limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 + inet6/filter/limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 + inet/filter/logdrop-64 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-64 -m limit --limit 1/second -j LOG + inet/filter/logdrop-64 -j DROP + inet6/filter/logdrop-64 -j DROP + inet/filter/limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 174 {"action":"pass","conn-limit":{"interval":5},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-173 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-173 + inet/filter/limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 + inet6/filter/limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 + inet/filter/logdrop-65 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-65 -m limit --limit 1/second -j LOG + inet/filter/logdrop-65 -j DROP + inet6/filter/logdrop-65 -j DROP + inet/filter/limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 175 {"conn-limit":{"interval":5,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-174 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-174 + inet/filter/limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 + inet6/filter/limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 + inet/filter/logdrop-66 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-66 -m limit --limit 1/second -j LOG + inet/filter/logdrop-66 -j DROP + inet6/filter/logdrop-66 -j DROP + inet/filter/limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 176 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-175 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-175 + inet/filter/limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 + inet6/filter/limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 + inet/filter/logdrop-67 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-67 -m limit --limit 1/second -j LOG + inet/filter/logdrop-67 -j DROP + inet6/filter/logdrop-67 -j DROP + inet/filter/limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 177 {"conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-176 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-176 + inet/filter/limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 + inet6/filter/limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 + inet/filter/logdrop-68 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-68 -m limit --limit 1/second -j LOG + inet/filter/logdrop-68 -j DROP + inet6/filter/logdrop-68 -j DROP + inet/filter/limit-176 -m limit --limit 1/second -j LOG + inet6/filter/limit-176 -m limit --limit 1/second -j LOG + inet/filter/limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 178 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-177 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-177 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-177 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-177 + inet/filter/limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 + inet6/filter/limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 + inet/filter/logdrop-69 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-69 -m limit --limit 1/second -j LOG + inet/filter/logdrop-69 -j DROP + inet6/filter/logdrop-69 -j DROP + inet/filter/limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 179 {"conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-178 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-178 + inet/filter/limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 + inet6/filter/limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 + inet/filter/logdrop-70 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-70 -m limit --limit 1/second -j LOG + inet/filter/logdrop-70 -j DROP + inet6/filter/logdrop-70 -j DROP + inet/filter/limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 180 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-179 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-179 + inet/filter/limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 + inet6/filter/limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 + inet/filter/logdrop-71 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-71 -m limit --limit 1/second -j LOG + inet/filter/logdrop-71 -j DROP + inet6/filter/logdrop-71 -j DROP + inet/filter/limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 181 {"conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-180 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-180 + inet/filter/limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-72 + inet6/filter/limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-72 + inet/filter/logdrop-72 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-72 -m limit --limit 1/second -j LOG + inet/filter/logdrop-72 -j DROP + inet6/filter/logdrop-72 -j DROP + inet/filter/limit-180 -j ACCEPT + inet6/filter/limit-180 -j ACCEPT + +Filter 182 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-181 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-181 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-181 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-181 + inet/filter/limit-181 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 + inet6/filter/limit-181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 + inet/filter/logdrop-73 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-73 -m limit --limit 1/second -j LOG + inet/filter/logdrop-73 -j DROP + inet6/filter/logdrop-73 -j DROP + +Filter 183 {"conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-182 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-182 + inet/filter/limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 + inet6/filter/limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 + inet/filter/logdrop-74 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-74 -m limit --limit 1/second -j LOG + inet/filter/logdrop-74 -j DROP + inet6/filter/logdrop-74 -j DROP + inet/filter/limit-182 -m limit --limit 1/second -j LOG + inet6/filter/limit-182 -m limit --limit 1/second -j LOG + inet/filter/limit-182 -j ACCEPT + inet6/filter/limit-182 -j ACCEPT + +Filter 184 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-183 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-183 + inet/filter/limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 + inet6/filter/limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 + inet/filter/logdrop-75 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-75 -m limit --limit 1/second -j LOG + inet/filter/logdrop-75 -j DROP + inet6/filter/logdrop-75 -j DROP + inet/filter/limit-183 -m limit --limit 1/second -j LOG + inet6/filter/limit-183 -m limit --limit 1/second -j LOG + +Filter 185 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-184 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-184 + inet/filter/limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 + inet6/filter/limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 + inet/filter/logdrop-76 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-76 -m limit --limit 1/second -j LOG + inet/filter/logdrop-76 -j DROP + inet6/filter/logdrop-76 -j DROP + inet/filter/limit-184 -j ACCEPT + inet6/filter/limit-184 -j ACCEPT + +Filter 186 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-185 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-185 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-185 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-185 + inet/filter/limit-185 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 + inet6/filter/limit-185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 + inet/filter/logdrop-77 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-77 -m limit --limit 1/second -j LOG + inet/filter/logdrop-77 -j DROP + inet6/filter/logdrop-77 -j DROP + +Filter 187 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-186 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-186 + inet/filter/limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-78 + inet6/filter/limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-78 + inet/filter/logdrop-78 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-78 -m limit --limit 1/second -j LOG + inet/filter/logdrop-78 -j DROP + inet6/filter/logdrop-78 -j DROP + inet/filter/limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 188 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-187 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-187 + inet/filter/limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 + inet6/filter/limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 + inet/filter/logdrop-79 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-79 -m limit --limit 1/second -j LOG + inet/filter/logdrop-79 -j DROP + inet6/filter/logdrop-79 -j DROP + inet/filter/limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 189 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-188 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-188 + inet/filter/limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 + inet6/filter/limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 + inet/filter/logdrop-80 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-80 -m limit --limit 1/second -j LOG + inet/filter/logdrop-80 -j DROP + inet6/filter/logdrop-80 -j DROP + inet/filter/limit-188 -m limit --limit 1/second -j LOG + inet6/filter/limit-188 -m limit --limit 1/second -j LOG + inet/filter/limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 190 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-189 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-189 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-189 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-189 + inet/filter/limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 + inet6/filter/limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 + inet/filter/logdrop-81 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-81 -m limit --limit 1/second -j LOG + inet/filter/logdrop-81 -j DROP + inet6/filter/logdrop-81 -j DROP + inet/filter/limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 191 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-190 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-190 + inet/filter/limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 + inet6/filter/limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 + inet/filter/logdrop-82 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-82 -m limit --limit 1/second -j LOG + inet/filter/logdrop-82 -j DROP + inet6/filter/logdrop-82 -j DROP + inet/filter/limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 192 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-191 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-191 + inet/filter/limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 + inet6/filter/limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 + inet/filter/logdrop-83 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-83 -m limit --limit 1/second -j LOG + inet/filter/logdrop-83 -j DROP + inet6/filter/logdrop-83 -j DROP + inet/filter/limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 193 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-192 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-192 + inet/filter/limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-84 + inet6/filter/limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-84 + inet/filter/logdrop-84 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-84 -m limit --limit 1/second -j LOG + inet/filter/logdrop-84 -j DROP + inet6/filter/logdrop-84 -j DROP + inet/filter/limit-192 -j ACCEPT + inet6/filter/limit-192 -j ACCEPT + +Filter 194 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-193 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-193 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-193 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-193 + inet/filter/limit-193 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 + inet6/filter/limit-193 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 + inet/filter/logdrop-85 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-85 -m limit --limit 1/second -j LOG + inet/filter/logdrop-85 -j DROP + inet6/filter/logdrop-85 -j DROP + +Filter 195 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-194 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-194 + inet/filter/limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 + inet6/filter/limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 + inet/filter/logdrop-86 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-86 -m limit --limit 1/second -j LOG + inet/filter/logdrop-86 -j DROP + inet6/filter/logdrop-86 -j DROP + inet/filter/limit-194 -m limit --limit 1/second -j LOG + inet6/filter/limit-194 -m limit --limit 1/second -j LOG + inet/filter/limit-194 -j ACCEPT + inet6/filter/limit-194 -j ACCEPT + +Filter 196 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-195 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-195 + inet/filter/limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 + inet6/filter/limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 + inet/filter/logdrop-87 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-87 -m limit --limit 1/second -j LOG + inet/filter/logdrop-87 -j DROP + inet6/filter/logdrop-87 -j DROP + inet/filter/limit-195 -m limit --limit 1/second -j LOG + inet6/filter/limit-195 -m limit --limit 1/second -j LOG + +Filter 197 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-196 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-196 + inet/filter/limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 + inet6/filter/limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 + inet/filter/logdrop-88 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-88 -m limit --limit 1/second -j LOG + inet/filter/logdrop-88 -j DROP + inet6/filter/logdrop-88 -j DROP + inet/filter/limit-196 -j ACCEPT + inet6/filter/limit-196 -j ACCEPT + +Filter 198 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-197 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-197 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-197 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-197 + inet/filter/limit-197 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 + inet6/filter/limit-197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 + inet/filter/logdrop-89 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-89 -m limit --limit 1/second -j LOG + inet/filter/logdrop-89 -j DROP + inet6/filter/logdrop-89 -j DROP + +Filter 199 {"conn-limit":{"interval":5,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-198 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-198 + inet/filter/limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-90 + inet6/filter/limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-90 + inet/filter/logdrop-90 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-90 -m limit --limit 1/second -j LOG + inet/filter/logdrop-90 -j DROP + inet6/filter/logdrop-90 -j DROP + inet/filter/limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 200 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-199 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-199 + inet/filter/limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 + inet6/filter/limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 + inet/filter/logdrop-91 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-91 -m limit --limit 1/second -j LOG + inet/filter/logdrop-91 -j DROP + inet6/filter/logdrop-91 -j DROP + inet/filter/limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-199 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 201 {"conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-200 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-200 + inet/filter/limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 + inet6/filter/limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 + inet/filter/logdrop-92 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-92 -m limit --limit 1/second -j LOG + inet/filter/logdrop-92 -j DROP + inet6/filter/logdrop-92 -j DROP + inet/filter/limit-200 -m limit --limit 1/second -j LOG + inet6/filter/limit-200 -m limit --limit 1/second -j LOG + inet/filter/limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-200 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 202 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-201 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-201 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-201 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-201 + inet/filter/limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 + inet6/filter/limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 + inet/filter/logdrop-93 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-93 -m limit --limit 1/second -j LOG + inet/filter/logdrop-93 -j DROP + inet6/filter/logdrop-93 -j DROP + inet/filter/limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-201 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 203 {"conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-202 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-202 + inet/filter/limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 + inet6/filter/limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 + inet/filter/logdrop-94 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-94 -m limit --limit 1/second -j LOG + inet/filter/logdrop-94 -j DROP + inet6/filter/logdrop-94 -j DROP + inet/filter/limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-202 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 204 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-203 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-203 + inet/filter/limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 + inet6/filter/limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 + inet/filter/logdrop-95 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-95 -m limit --limit 1/second -j LOG + inet/filter/logdrop-95 -j DROP + inet6/filter/logdrop-95 -j DROP + inet/filter/limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-203 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 205 {"conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-204 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-204 + inet/filter/limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-96 + inet6/filter/limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-96 + inet/filter/logdrop-96 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-96 -m limit --limit 1/second -j LOG + inet/filter/logdrop-96 -j DROP + inet6/filter/logdrop-96 -j DROP + inet/filter/limit-204 -j ACCEPT + inet6/filter/limit-204 -j ACCEPT + +Filter 206 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-205 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-205 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-205 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-205 + inet/filter/limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 + inet6/filter/limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 + inet/filter/logdrop-97 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-97 -m limit --limit 1/second -j LOG + inet/filter/logdrop-97 -j DROP + inet6/filter/logdrop-97 -j DROP + +Filter 207 {"conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-206 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-206 + inet/filter/limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 + inet6/filter/limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 + inet/filter/logdrop-98 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-98 -m limit --limit 1/second -j LOG + inet/filter/logdrop-98 -j DROP + inet6/filter/logdrop-98 -j DROP + inet/filter/limit-206 -m limit --limit 1/second -j LOG + inet6/filter/limit-206 -m limit --limit 1/second -j LOG + inet/filter/limit-206 -j ACCEPT + inet6/filter/limit-206 -j ACCEPT + +Filter 208 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-207 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-207 + inet/filter/limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 + inet6/filter/limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 + inet/filter/logdrop-99 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-99 -m limit --limit 1/second -j LOG + inet/filter/logdrop-99 -j DROP + inet6/filter/logdrop-99 -j DROP + inet/filter/limit-207 -m limit --limit 1/second -j LOG + inet6/filter/limit-207 -m limit --limit 1/second -j LOG + +Filter 209 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-208 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-208 + inet/filter/limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 + inet6/filter/limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 + inet/filter/logdrop-100 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-100 -m limit --limit 1/second -j LOG + inet/filter/logdrop-100 -j DROP + inet6/filter/logdrop-100 -j DROP + inet/filter/limit-208 -j ACCEPT + inet6/filter/limit-208 -j ACCEPT + +Filter 210 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-209 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-209 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-209 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-209 + inet/filter/limit-209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 + inet6/filter/limit-209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 + inet/filter/logdrop-101 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-101 -m limit --limit 1/second -j LOG + inet/filter/logdrop-101 -j DROP + inet6/filter/logdrop-101 -j DROP + +Filter 211 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-210 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-210 + inet/filter/limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-102 + inet6/filter/limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-102 + inet/filter/logdrop-102 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-102 -m limit --limit 1/second -j LOG + inet/filter/logdrop-102 -j DROP + inet6/filter/logdrop-102 -j DROP + inet/filter/limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 212 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-211 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-211 + inet/filter/limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 + inet6/filter/limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 + inet/filter/logdrop-103 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-103 -m limit --limit 1/second -j LOG + inet/filter/logdrop-103 -j DROP + inet6/filter/logdrop-103 -j DROP + inet/filter/limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-211 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 213 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-212 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-212 + inet/filter/limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 + inet6/filter/limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 + inet/filter/logdrop-104 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-104 -m limit --limit 1/second -j LOG + inet/filter/logdrop-104 -j DROP + inet6/filter/logdrop-104 -j DROP + inet/filter/limit-212 -m limit --limit 1/second -j LOG + inet6/filter/limit-212 -m limit --limit 1/second -j LOG + inet/filter/limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 214 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-213 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-213 + inet/filter/limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 + inet6/filter/limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 + inet/filter/logdrop-105 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-105 -m limit --limit 1/second -j LOG + inet/filter/logdrop-105 -j DROP + inet6/filter/logdrop-105 -j DROP + inet/filter/limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-213 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 215 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-214 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-214 + inet/filter/limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 + inet6/filter/limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 + inet/filter/logdrop-106 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-106 -m limit --limit 1/second -j LOG + inet/filter/logdrop-106 -j DROP + inet6/filter/logdrop-106 -j DROP + inet/filter/limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 216 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-215 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-215 + inet/filter/limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 + inet6/filter/limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 + inet/filter/logdrop-107 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-107 -m limit --limit 1/second -j LOG + inet/filter/logdrop-107 -j DROP + inet6/filter/logdrop-107 -j DROP + inet/filter/limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-215 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 217 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-216 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-216 + inet/filter/limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-108 + inet6/filter/limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-108 + inet/filter/logdrop-108 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-108 -m limit --limit 1/second -j LOG + inet/filter/logdrop-108 -j DROP + inet6/filter/logdrop-108 -j DROP + inet/filter/limit-216 -j ACCEPT + inet6/filter/limit-216 -j ACCEPT + +Filter 218 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-217 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-217 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-217 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-217 + inet/filter/limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 + inet6/filter/limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 + inet/filter/logdrop-109 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-109 -m limit --limit 1/second -j LOG + inet/filter/logdrop-109 -j DROP + inet6/filter/logdrop-109 -j DROP + +Filter 219 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-218 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-218 + inet/filter/limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 + inet6/filter/limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 + inet/filter/logdrop-110 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-110 -m limit --limit 1/second -j LOG + inet/filter/logdrop-110 -j DROP + inet6/filter/logdrop-110 -j DROP + inet/filter/limit-218 -m limit --limit 1/second -j LOG + inet6/filter/limit-218 -m limit --limit 1/second -j LOG + inet/filter/limit-218 -j ACCEPT + inet6/filter/limit-218 -j ACCEPT + +Filter 220 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-219 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-219 + inet/filter/limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 + inet6/filter/limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 + inet/filter/logdrop-111 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-111 -m limit --limit 1/second -j LOG + inet/filter/logdrop-111 -j DROP + inet6/filter/logdrop-111 -j DROP + inet/filter/limit-219 -m limit --limit 1/second -j LOG + inet6/filter/limit-219 -m limit --limit 1/second -j LOG + +Filter 221 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-220 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-220 + inet/filter/limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 + inet6/filter/limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 + inet/filter/logdrop-112 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-112 -m limit --limit 1/second -j LOG + inet/filter/logdrop-112 -j DROP + inet6/filter/logdrop-112 -j DROP + inet/filter/limit-220 -j ACCEPT + inet6/filter/limit-220 -j ACCEPT + +Filter 222 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-221 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-221 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-221 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-221 + inet/filter/limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 + inet6/filter/limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 + inet/filter/logdrop-113 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-113 -m limit --limit 1/second -j LOG + inet/filter/logdrop-113 -j DROP + inet6/filter/logdrop-113 -j DROP + +Filter 223 {"conn-limit":{"interval":5,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-222 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-222 + inet/filter/limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 224 {"action":"pass","conn-limit":{"interval":5,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-223 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-223 + inet/filter/limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 225 {"conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-224 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-224 + inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-224 -m limit --limit 1/second -j LOG + inet6/filter/limit-224 -m limit --limit 1/second -j LOG + inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 226 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-225 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-225 + inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 227 {"conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-226 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-226 + inet/filter/limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 228 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-227 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-227 + inet/filter/limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 229 {"conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-228 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-228 + inet/filter/limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 230 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-229 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-229 + inet/filter/limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 231 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-230 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-230 + inet/filter/limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-230 -m limit --limit 1/second -j LOG + inet6/filter/limit-230 -m limit --limit 1/second -j LOG + inet/filter/limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 232 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-231 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-231 + inet/filter/limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 233 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-232 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-232 + inet/filter/limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 234 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-233 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-233 + inet/filter/limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 235 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-234 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-234 + inet/filter/limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-234 -j ACCEPT + inet6/filter/limit-234 -j ACCEPT + +Filter 236 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-235 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-235 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-235 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-235 + inet/filter/limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 237 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-236 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-236 + inet/filter/limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-236 -m limit --limit 1/second -j LOG + inet6/filter/limit-236 -m limit --limit 1/second -j LOG + inet/filter/limit-236 -j ACCEPT + inet6/filter/limit-236 -j ACCEPT + +Filter 238 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-237 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-237 + inet/filter/limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-237 -m limit --limit 1/second -j LOG + inet6/filter/limit-237 -m limit --limit 1/second -j LOG + +Filter 239 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-238 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-238 + inet/filter/limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-238 -j ACCEPT + inet6/filter/limit-238 -j ACCEPT + +Filter 240 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-239 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-239 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-239 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-239 + inet/filter/limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-239 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 241 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-240 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-240 + inet/filter/limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 242 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-241 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-241 + inet/filter/limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 243 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-242 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-242 + inet/filter/limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-242 -m limit --limit 1/second -j LOG + inet6/filter/limit-242 -m limit --limit 1/second -j LOG + inet/filter/limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 244 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-243 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-243 + inet/filter/limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 245 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-244 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-244 + inet/filter/limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 246 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-245 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-245 + inet/filter/limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 247 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-246 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-246 + inet/filter/limit-246 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-246 -j ACCEPT + inet6/filter/limit-246 -j ACCEPT + +Filter 248 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-247 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-247 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-247 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-247 + inet/filter/limit-247 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 249 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-248 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-248 + inet/filter/limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-248 -m limit --limit 1/second -j LOG + inet6/filter/limit-248 -m limit --limit 1/second -j LOG + inet/filter/limit-248 -j ACCEPT + inet6/filter/limit-248 -j ACCEPT + +Filter 250 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-249 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-249 + inet/filter/limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-249 -m limit --limit 1/second -j LOG + inet6/filter/limit-249 -m limit --limit 1/second -j LOG + +Filter 251 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-250 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-250 + inet/filter/limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-250 -j ACCEPT + inet6/filter/limit-250 -j ACCEPT + +Filter 252 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-251 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-251 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-251 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-251 + inet/filter/limit-251 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 253 {"conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-252 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-252 + inet/filter/limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-252 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-252 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 254 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-253 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-253 + inet/filter/limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-253 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-253 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 255 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-254 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-254 + inet/filter/limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-254 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-254 -m limit --limit 1/second -j LOG + inet6/filter/limit-254 -m limit --limit 1/second -j LOG + inet/filter/limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-254 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 256 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-255 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-255 + inet/filter/limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-255 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-255 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 257 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-256 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-256 + inet/filter/limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-256 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-256 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 258 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-257 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-257 + inet/filter/limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-257 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-257 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 259 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-258 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-258 + inet/filter/limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-258 -j ACCEPT + inet6/filter/limit-258 -j ACCEPT + +Filter 260 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-259 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-259 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-259 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-259 + inet/filter/limit-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 261 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-260 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-260 + inet/filter/limit-260 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-260 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-260 -m limit --limit 1/second -j LOG + inet6/filter/limit-260 -m limit --limit 1/second -j LOG + inet/filter/limit-260 -j ACCEPT + inet6/filter/limit-260 -j ACCEPT + +Filter 262 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-261 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-261 + inet/filter/limit-261 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-261 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-261 -m limit --limit 1/second -j LOG + inet6/filter/limit-261 -m limit --limit 1/second -j LOG + +Filter 263 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-262 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-262 + inet/filter/limit-262 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-262 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-262 -j ACCEPT + inet6/filter/limit-262 -j ACCEPT + +Filter 264 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-263 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-263 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-263 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-263 + inet/filter/limit-263 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-263 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 265 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-264 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-264 + inet/filter/limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 266 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-265 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-265 + inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-265 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 267 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-266 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-266 + inet/filter/limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-266 -m limit --limit 1/second -j LOG + inet6/filter/limit-266 -m limit --limit 1/second -j LOG + inet/filter/limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 268 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-267 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-267 + inet/filter/limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-267 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 269 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-268 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-268 + inet/filter/limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 270 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-269 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-269 + inet/filter/limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-269 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 271 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-270 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-270 + inet/filter/limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-270 -j ACCEPT + inet6/filter/limit-270 -j ACCEPT + +Filter 272 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-271 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-271 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-271 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-271 + inet/filter/limit-271 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-271 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 273 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-272 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-272 + inet/filter/limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-272 -m limit --limit 1/second -j LOG + inet6/filter/limit-272 -m limit --limit 1/second -j LOG + inet/filter/limit-272 -j ACCEPT + inet6/filter/limit-272 -j ACCEPT + +Filter 274 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-273 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-273 + inet/filter/limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-273 -m limit --limit 1/second -j LOG + inet6/filter/limit-273 -m limit --limit 1/second -j LOG + +Filter 275 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-274 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-274 + inet/filter/limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-274 -j ACCEPT + inet6/filter/limit-274 -j ACCEPT + +Filter 276 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-275 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-275 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-275 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-275 + inet/filter/limit-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 277 {"conn-limit":{"interval":5,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-276 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-276 + inet/filter/limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 278 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-277 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-277 + inet/filter/limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 279 {"conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-278 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-278 + inet/filter/limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-278 -m limit --limit 1/second -j LOG + inet6/filter/limit-278 -m limit --limit 1/second -j LOG + inet/filter/limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 280 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-279 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-279 + inet/filter/limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 281 {"conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-280 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-280 + inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 282 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-281 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-281 + inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 283 {"conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-282 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-282 + inet/filter/limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 284 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-283 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-283 + inet/filter/limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 285 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-284 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-284 + inet/filter/limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-284 -m limit --limit 1/second -j LOG + inet6/filter/limit-284 -m limit --limit 1/second -j LOG + inet/filter/limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 286 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-285 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-285 + inet/filter/limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 287 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-286 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-286 + inet/filter/limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 288 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-287 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-287 + inet/filter/limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 289 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-288 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-288 + inet/filter/limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-288 -j ACCEPT + inet6/filter/limit-288 -j ACCEPT + +Filter 290 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-289 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-289 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-289 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-289 + inet/filter/limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 291 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-290 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-290 + inet/filter/limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-290 -m limit --limit 1/second -j LOG + inet6/filter/limit-290 -m limit --limit 1/second -j LOG + inet/filter/limit-290 -j ACCEPT + inet6/filter/limit-290 -j ACCEPT + +Filter 292 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-291 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-291 + inet/filter/limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-291 -m limit --limit 1/second -j LOG + inet6/filter/limit-291 -m limit --limit 1/second -j LOG + +Filter 293 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-292 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-292 + inet/filter/limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-292 -j ACCEPT + inet6/filter/limit-292 -j ACCEPT + +Filter 294 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-293 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-293 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-293 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-293 + inet/filter/limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 295 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-294 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-294 + inet/filter/limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 296 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-295 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-295 + inet/filter/limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 297 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-296 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-296 + inet/filter/limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-296 -m limit --limit 1/second -j LOG + inet6/filter/limit-296 -m limit --limit 1/second -j LOG + inet/filter/limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 298 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-297 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-297 + inet/filter/limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 299 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-298 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-298 + inet/filter/limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 300 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-299 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-299 + inet/filter/limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 301 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-300 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-300 + inet/filter/limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-300 -j ACCEPT + inet6/filter/limit-300 -j ACCEPT + +Filter 302 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-301 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-301 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-301 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-301 + inet/filter/limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 303 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-302 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-302 + inet/filter/limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-302 -m limit --limit 1/second -j LOG + inet6/filter/limit-302 -m limit --limit 1/second -j LOG + inet/filter/limit-302 -j ACCEPT + inet6/filter/limit-302 -j ACCEPT + +Filter 304 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-303 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-303 + inet/filter/limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-303 -m limit --limit 1/second -j LOG + inet6/filter/limit-303 -m limit --limit 1/second -j LOG + +Filter 305 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-304 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-304 + inet/filter/limit-304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-304 -j ACCEPT + inet6/filter/limit-304 -j ACCEPT + +Filter 306 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-305 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-305 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-305 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-305 + inet/filter/limit-305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 307 {"conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-306 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-306 + inet/filter/limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 308 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-307 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-307 + inet/filter/limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-307 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 309 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-308 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-308 + inet/filter/limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-308 -m limit --limit 1/second -j LOG + inet6/filter/limit-308 -m limit --limit 1/second -j LOG + inet/filter/limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 310 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-309 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-309 + inet/filter/limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 311 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-310 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-310 + inet/filter/limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 312 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-311 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-311 + inet/filter/limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-311 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 313 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-312 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-312 + inet/filter/limit-312 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-312 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-312 -j ACCEPT + inet6/filter/limit-312 -j ACCEPT + +Filter 314 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-313 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-313 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-313 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-313 + inet/filter/limit-313 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-313 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 315 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-314 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-314 + inet/filter/limit-314 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-314 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-314 -m limit --limit 1/second -j LOG + inet6/filter/limit-314 -m limit --limit 1/second -j LOG + inet/filter/limit-314 -j ACCEPT + inet6/filter/limit-314 -j ACCEPT + +Filter 316 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-315 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-315 + inet/filter/limit-315 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-315 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-315 -m limit --limit 1/second -j LOG + inet6/filter/limit-315 -m limit --limit 1/second -j LOG + +Filter 317 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-316 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-316 + inet/filter/limit-316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-316 -j ACCEPT + inet6/filter/limit-316 -j ACCEPT + +Filter 318 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-317 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-317 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-317 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-317 + inet/filter/limit-317 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-317 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 319 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-318 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-318 + inet/filter/limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-318 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-318 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 320 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-319 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-319 + inet/filter/limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-319 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-319 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 321 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-320 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-320 + inet/filter/limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-320 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-320 -m limit --limit 1/second -j LOG + inet6/filter/limit-320 -m limit --limit 1/second -j LOG + inet/filter/limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-320 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 322 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-321 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-321 + inet/filter/limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-321 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-321 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 323 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-322 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-322 + inet/filter/limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-322 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-322 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 324 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-323 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-323 + inet/filter/limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-323 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-323 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 325 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-324 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-324 + inet/filter/limit-324 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-324 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-324 -j ACCEPT + inet6/filter/limit-324 -j ACCEPT + +Filter 326 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-325 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-325 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-325 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-325 + inet/filter/limit-325 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-325 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 327 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-326 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-326 + inet/filter/limit-326 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-326 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-326 -m limit --limit 1/second -j LOG + inet6/filter/limit-326 -m limit --limit 1/second -j LOG + inet/filter/limit-326 -j ACCEPT + inet6/filter/limit-326 -j ACCEPT + +Filter 328 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-327 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-327 + inet/filter/limit-327 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-327 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-327 -m limit --limit 1/second -j LOG + inet6/filter/limit-327 -m limit --limit 1/second -j LOG + +Filter 329 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-328 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-328 + inet/filter/limit-328 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-328 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-328 -j ACCEPT + inet6/filter/limit-328 -j ACCEPT + +Filter 330 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-329 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-329 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-329 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-329 + inet/filter/limit-329 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-329 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 331 {"conn-limit":150,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-330 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-330 + inet/filter/limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-330 -j ACCEPT + inet6/filter/limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-330 -j ACCEPT + inet/filter/limit-330 -m limit --limit 1/second -j LOG + inet6/filter/limit-330 -m limit --limit 1/second -j LOG + inet/filter/limit-330 -j DROP + inet6/filter/limit-330 -j DROP + +Filter 332 {"action":"pass","conn-limit":150,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-331 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-331 + inet/filter/limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-331 -j RETURN + inet6/filter/limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j RETURN + inet/filter/limit-331 -m limit --limit 1/second -j LOG + inet6/filter/limit-331 -m limit --limit 1/second -j LOG + inet/filter/limit-331 -j DROP + inet6/filter/limit-331 -j DROP + +Filter 333 {"conn-limit":150,"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-332 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-332 + inet/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-0 + inet6/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-0 + inet/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-0 -j ACCEPT + inet6/filter/logaccept-0 -j ACCEPT + inet/filter/limit-332 -m limit --limit 1/second -j LOG + inet6/filter/limit-332 -m limit --limit 1/second -j LOG + inet/filter/limit-332 -j DROP + inet6/filter/limit-332 -j DROP + +Filter 334 {"conn-limit":150,"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-333 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-333 + inet/filter/limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-333 -j ACCEPT + inet6/filter/limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j ACCEPT + inet/filter/limit-333 -m limit --limit 1/second -j LOG + inet6/filter/limit-333 -m limit --limit 1/second -j LOG + inet/filter/limit-333 -j DROP + inet6/filter/limit-333 -j DROP + +Filter 335 {"conn-limit":{"count":150},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-334 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-334 + inet/filter/limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-334 -j ACCEPT + inet6/filter/limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-334 -j ACCEPT + inet/filter/limit-334 -m limit --limit 1/second -j LOG + inet6/filter/limit-334 -m limit --limit 1/second -j LOG + inet/filter/limit-334 -j DROP + inet6/filter/limit-334 -j DROP + +Filter 336 {"action":"pass","conn-limit":{"count":150},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-335 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-335 + inet/filter/limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-335 -j RETURN + inet6/filter/limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j RETURN + inet/filter/limit-335 -m limit --limit 1/second -j LOG + inet6/filter/limit-335 -m limit --limit 1/second -j LOG + inet/filter/limit-335 -j DROP + inet6/filter/limit-335 -j DROP + +Filter 337 {"conn-limit":{"count":150},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-336 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-336 + inet/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-1 + inet6/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-1 + inet/filter/logaccept-1 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-1 -m limit --limit 1/second -j LOG + inet/filter/logaccept-1 -j ACCEPT + inet6/filter/logaccept-1 -j ACCEPT + inet/filter/limit-336 -m limit --limit 1/second -j LOG + inet6/filter/limit-336 -m limit --limit 1/second -j LOG + inet/filter/limit-336 -j DROP + inet6/filter/limit-336 -j DROP + +Filter 338 {"conn-limit":{"count":150},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-337 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-337 + inet/filter/limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-337 -j ACCEPT + inet6/filter/limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-337 -j ACCEPT + inet/filter/limit-337 -m limit --limit 1/second -j LOG + inet6/filter/limit-337 -m limit --limit 1/second -j LOG + inet/filter/limit-337 -j DROP + inet6/filter/limit-337 -j DROP + +Filter 339 {"conn-limit":{"count":150,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-338 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-338 + inet/filter/limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-338 -j ACCEPT + inet6/filter/limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-338 -j ACCEPT + inet/filter/limit-338 -j DROP + inet6/filter/limit-338 -j DROP + +Filter 340 {"action":"pass","conn-limit":{"count":150,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-339 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-339 + inet/filter/limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-339 -j RETURN + inet6/filter/limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-339 -j RETURN + inet/filter/limit-339 -j DROP + inet6/filter/limit-339 -j DROP + +Filter 341 {"conn-limit":{"count":150,"log":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-340 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-340 + inet/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-2 + inet6/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-2 + inet/filter/logaccept-2 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-2 -m limit --limit 1/second -j LOG + inet/filter/logaccept-2 -j ACCEPT + inet6/filter/logaccept-2 -j ACCEPT + inet/filter/limit-340 -j DROP + inet6/filter/limit-340 -j DROP + +Filter 342 {"conn-limit":{"count":150,"log":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-341 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-341 + inet/filter/limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-341 -j ACCEPT + inet6/filter/limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-341 -j ACCEPT + inet/filter/limit-341 -j DROP + inet6/filter/limit-341 -j DROP + +Filter 343 {"conn-limit":{"count":150,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-342 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-342 + inet/filter/limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-342 -j ACCEPT + inet6/filter/limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-342 -j ACCEPT + inet/filter/limit-342 -j DROP + inet6/filter/limit-342 -j DROP + +Filter 344 {"action":"pass","conn-limit":{"count":150,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-343 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-343 + inet/filter/limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-343 -j RETURN + inet6/filter/limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-343 -j RETURN + inet/filter/limit-343 -j DROP + inet6/filter/limit-343 -j DROP + +Filter 345 {"conn-limit":{"count":150,"log":"none"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-344 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-344 + inet/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-3 + inet6/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-3 + inet/filter/logaccept-3 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-3 -m limit --limit 1/second -j LOG + inet/filter/logaccept-3 -j ACCEPT + inet6/filter/logaccept-3 -j ACCEPT + inet/filter/limit-344 -j DROP + inet6/filter/limit-344 -j DROP + +Filter 346 {"conn-limit":{"count":150,"log":"none"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-345 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-345 + inet/filter/limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-345 -j ACCEPT + inet6/filter/limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-345 -j ACCEPT + inet/filter/limit-345 -j DROP + inet6/filter/limit-345 -j DROP + +Filter 347 {"conn-limit":{"count":150,"interval":5},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-346 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-346 + inet/filter/limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-346 -j ACCEPT + inet6/filter/limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-346 -j ACCEPT + inet/filter/limit-346 -m limit --limit 1/second -j LOG + inet6/filter/limit-346 -m limit --limit 1/second -j LOG + inet/filter/limit-346 -j DROP + inet6/filter/limit-346 -j DROP + +Filter 348 {"action":"pass","conn-limit":{"count":150,"interval":5},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-347 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-347 + inet/filter/limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-347 -j RETURN + inet6/filter/limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-347 -j RETURN + inet/filter/limit-347 -m limit --limit 1/second -j LOG + inet6/filter/limit-347 -m limit --limit 1/second -j LOG + inet/filter/limit-347 -j DROP + inet6/filter/limit-347 -j DROP + +Filter 349 {"conn-limit":{"count":150,"interval":5},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-348 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-348 + inet/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-4 + inet6/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-4 + inet/filter/logaccept-4 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-4 -m limit --limit 1/second -j LOG + inet/filter/logaccept-4 -j ACCEPT + inet6/filter/logaccept-4 -j ACCEPT + inet/filter/limit-348 -m limit --limit 1/second -j LOG + inet6/filter/limit-348 -m limit --limit 1/second -j LOG + inet/filter/limit-348 -j DROP + inet6/filter/limit-348 -j DROP + +Filter 350 {"conn-limit":{"count":150,"interval":5},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-349 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-349 + inet/filter/limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-349 -j ACCEPT + inet6/filter/limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-349 -j ACCEPT + inet/filter/limit-349 -m limit --limit 1/second -j LOG + inet6/filter/limit-349 -m limit --limit 1/second -j LOG + inet/filter/limit-349 -j DROP + inet6/filter/limit-349 -j DROP + +Filter 351 {"conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-350 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-350 + inet/filter/limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-350 -j ACCEPT + inet6/filter/limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-350 -j ACCEPT + inet/filter/limit-350 -j DROP + inet6/filter/limit-350 -j DROP + +Filter 352 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-351 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-351 + inet/filter/limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-351 -j RETURN + inet6/filter/limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-351 -j RETURN + inet/filter/limit-351 -j DROP + inet6/filter/limit-351 -j DROP + +Filter 353 {"conn-limit":{"count":150,"interval":5,"log":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-352 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-352 + inet/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-5 + inet6/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-5 + inet/filter/logaccept-5 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-5 -m limit --limit 1/second -j LOG + inet/filter/logaccept-5 -j ACCEPT + inet6/filter/logaccept-5 -j ACCEPT + inet/filter/limit-352 -j DROP + inet6/filter/limit-352 -j DROP + +Filter 354 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-353 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-353 + inet/filter/limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-353 -j ACCEPT + inet6/filter/limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-353 -j ACCEPT + inet/filter/limit-353 -j DROP + inet6/filter/limit-353 -j DROP + +Filter 355 {"conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-354 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-354 + inet/filter/limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-354 -j ACCEPT + inet6/filter/limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-354 -j ACCEPT + inet/filter/limit-354 -j DROP + inet6/filter/limit-354 -j DROP + +Filter 356 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-355 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-355 + inet/filter/limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-355 -j RETURN + inet6/filter/limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-355 -j RETURN + inet/filter/limit-355 -j DROP + inet6/filter/limit-355 -j DROP + +Filter 357 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-356 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-356 + inet/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-6 + inet6/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-6 + inet/filter/logaccept-6 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-6 -m limit --limit 1/second -j LOG + inet/filter/logaccept-6 -j ACCEPT + inet6/filter/logaccept-6 -j ACCEPT + inet/filter/limit-356 -j DROP + inet6/filter/limit-356 -j DROP + +Filter 358 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-357 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-357 + inet/filter/limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-357 -j ACCEPT + inet6/filter/limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-357 -j ACCEPT + inet/filter/limit-357 -j DROP + inet6/filter/limit-357 -j DROP + +Filter 359 {"conn-limit":1,"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-358 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-358 + inet/filter/limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-114 + inet6/filter/limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-114 + inet/filter/logdrop-114 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-114 -m limit --limit 1/second -j LOG + inet/filter/logdrop-114 -j DROP + inet6/filter/logdrop-114 -j DROP + inet/filter/limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 360 {"action":"pass","conn-limit":1,"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-359 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-359 + inet/filter/limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 + inet6/filter/limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 + inet/filter/logdrop-115 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-115 -m limit --limit 1/second -j LOG + inet/filter/logdrop-115 -j DROP + inet6/filter/logdrop-115 -j DROP + inet/filter/limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 361 {"conn-limit":1,"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-360 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-360 + inet/filter/limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 + inet6/filter/limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 + inet/filter/logdrop-116 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-116 -m limit --limit 1/second -j LOG + inet/filter/logdrop-116 -j DROP + inet6/filter/logdrop-116 -j DROP + inet/filter/limit-360 -m limit --limit 1/second -j LOG + inet6/filter/limit-360 -m limit --limit 1/second -j LOG + inet/filter/limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 362 {"action":"pass","conn-limit":1,"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-361 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-361 + inet/filter/limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 + inet6/filter/limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 + inet/filter/logdrop-117 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-117 -m limit --limit 1/second -j LOG + inet/filter/logdrop-117 -j DROP + inet6/filter/logdrop-117 -j DROP + inet/filter/limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 363 {"conn-limit":1,"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-362 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-362 + inet/filter/limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 + inet6/filter/limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 + inet/filter/logdrop-118 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-118 -m limit --limit 1/second -j LOG + inet/filter/logdrop-118 -j DROP + inet6/filter/logdrop-118 -j DROP + inet/filter/limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 364 {"action":"pass","conn-limit":1,"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-363 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-363 + inet/filter/limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 + inet6/filter/limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 + inet/filter/logdrop-119 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-119 -m limit --limit 1/second -j LOG + inet/filter/logdrop-119 -j DROP + inet6/filter/logdrop-119 -j DROP + inet/filter/limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 365 {"conn-limit":{},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-364 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-364 + inet/filter/limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 + inet6/filter/limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 + inet/filter/logdrop-120 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-120 -m limit --limit 1/second -j LOG + inet/filter/logdrop-120 -j DROP + inet6/filter/logdrop-120 -j DROP + inet/filter/limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 366 {"action":"pass","conn-limit":{},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-365 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-365 + inet/filter/limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 + inet6/filter/limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 + inet/filter/logdrop-121 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-121 -m limit --limit 1/second -j LOG + inet/filter/logdrop-121 -j DROP + inet6/filter/logdrop-121 -j DROP + inet/filter/limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 367 {"conn-limit":{},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-366 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-366 + inet/filter/limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 + inet6/filter/limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 + inet/filter/logdrop-122 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-122 -m limit --limit 1/second -j LOG + inet/filter/logdrop-122 -j DROP + inet6/filter/logdrop-122 -j DROP + inet/filter/limit-366 -m limit --limit 1/second -j LOG + inet6/filter/limit-366 -m limit --limit 1/second -j LOG + inet/filter/limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 368 {"action":"pass","conn-limit":{},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-367 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-367 + inet/filter/limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 + inet6/filter/limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 + inet/filter/logdrop-123 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-123 -m limit --limit 1/second -j LOG + inet/filter/logdrop-123 -j DROP + inet6/filter/logdrop-123 -j DROP + inet/filter/limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 369 {"conn-limit":{},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-368 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-368 + inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 + inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 + inet/filter/logdrop-124 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-124 -m limit --limit 1/second -j LOG + inet/filter/logdrop-124 -j DROP + inet6/filter/logdrop-124 -j DROP + inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 370 {"action":"pass","conn-limit":{},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-369 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-369 + inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 + inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 + inet/filter/logdrop-125 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-125 -m limit --limit 1/second -j LOG + inet/filter/logdrop-125 -j DROP + inet6/filter/logdrop-125 -j DROP + inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 371 {"conn-limit":{"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-370 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-370 + inet/filter/limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 + inet6/filter/limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 + inet/filter/logdrop-126 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-126 -m limit --limit 1/second -j LOG + inet/filter/logdrop-126 -j DROP + inet6/filter/logdrop-126 -j DROP + inet/filter/limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 372 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-371 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-371 + inet/filter/limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 + inet6/filter/limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 + inet/filter/logdrop-127 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-127 -m limit --limit 1/second -j LOG + inet/filter/logdrop-127 -j DROP + inet6/filter/logdrop-127 -j DROP + inet/filter/limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 373 {"conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-372 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-372 + inet/filter/limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 + inet6/filter/limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 + inet/filter/logdrop-128 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-128 -m limit --limit 1/second -j LOG + inet/filter/logdrop-128 -j DROP + inet6/filter/logdrop-128 -j DROP + inet/filter/limit-372 -m limit --limit 1/second -j LOG + inet6/filter/limit-372 -m limit --limit 1/second -j LOG + inet/filter/limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 374 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-373 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-373 + inet/filter/limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 + inet6/filter/limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 + inet/filter/logdrop-129 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-129 -m limit --limit 1/second -j LOG + inet/filter/logdrop-129 -j DROP + inet6/filter/logdrop-129 -j DROP + inet/filter/limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 375 {"conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-374 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-374 + inet/filter/limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 + inet6/filter/limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 + inet/filter/logdrop-130 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-130 -m limit --limit 1/second -j LOG + inet/filter/logdrop-130 -j DROP + inet6/filter/logdrop-130 -j DROP + inet/filter/limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 376 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-375 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-375 + inet/filter/limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 + inet6/filter/limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 + inet/filter/logdrop-131 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-131 -m limit --limit 1/second -j LOG + inet/filter/logdrop-131 -j DROP + inet6/filter/logdrop-131 -j DROP + inet/filter/limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 377 {"conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-376 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-376 + inet/filter/limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-132 + inet6/filter/limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-132 + inet/filter/logdrop-132 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-132 -m limit --limit 1/second -j LOG + inet/filter/logdrop-132 -j DROP + inet6/filter/logdrop-132 -j DROP + inet/filter/limit-376 -j ACCEPT + inet6/filter/limit-376 -j ACCEPT + +Filter 378 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 + inet/filter/logdrop-133 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-133 -m limit --limit 1/second -j LOG + inet/filter/logdrop-133 -j DROP + inet6/filter/logdrop-133 -j DROP + +Filter 379 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-378 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-378 + inet/filter/limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 + inet6/filter/limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 + inet/filter/logdrop-134 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-134 -m limit --limit 1/second -j LOG + inet/filter/logdrop-134 -j DROP + inet6/filter/logdrop-134 -j DROP + inet/filter/limit-378 -m limit --limit 1/second -j LOG + inet6/filter/limit-378 -m limit --limit 1/second -j LOG + inet/filter/limit-378 -j ACCEPT + inet6/filter/limit-378 -j ACCEPT + +Filter 380 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-379 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-379 + inet/filter/limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 + inet6/filter/limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 + inet/filter/logdrop-135 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-135 -m limit --limit 1/second -j LOG + inet/filter/logdrop-135 -j DROP + inet6/filter/logdrop-135 -j DROP + inet/filter/limit-379 -m limit --limit 1/second -j LOG + inet6/filter/limit-379 -m limit --limit 1/second -j LOG + +Filter 381 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-380 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-380 + inet/filter/limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 + inet6/filter/limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 + inet/filter/logdrop-136 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-136 -m limit --limit 1/second -j LOG + inet/filter/logdrop-136 -j DROP + inet6/filter/logdrop-136 -j DROP + inet/filter/limit-380 -j ACCEPT + inet6/filter/limit-380 -j ACCEPT + +Filter 382 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 + inet/filter/logdrop-137 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-137 -m limit --limit 1/second -j LOG + inet/filter/logdrop-137 -j DROP + inet6/filter/logdrop-137 -j DROP + +Filter 383 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-382 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-382 + inet/filter/limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-138 + inet6/filter/limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-138 + inet/filter/logdrop-138 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-138 -m limit --limit 1/second -j LOG + inet/filter/logdrop-138 -j DROP + inet6/filter/logdrop-138 -j DROP + inet/filter/limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 384 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-383 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-383 + inet/filter/limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 + inet6/filter/limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 + inet/filter/logdrop-139 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-139 -m limit --limit 1/second -j LOG + inet/filter/logdrop-139 -j DROP + inet6/filter/logdrop-139 -j DROP + inet/filter/limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 385 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-384 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-384 + inet/filter/limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 + inet6/filter/limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 + inet/filter/logdrop-140 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-140 -m limit --limit 1/second -j LOG + inet/filter/logdrop-140 -j DROP + inet6/filter/logdrop-140 -j DROP + inet/filter/limit-384 -m limit --limit 1/second -j LOG + inet6/filter/limit-384 -m limit --limit 1/second -j LOG + inet/filter/limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 386 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-385 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-385 + inet/filter/limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 + inet6/filter/limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 + inet/filter/logdrop-141 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-141 -m limit --limit 1/second -j LOG + inet/filter/logdrop-141 -j DROP + inet6/filter/logdrop-141 -j DROP + inet/filter/limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 387 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-386 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-386 + inet/filter/limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 + inet6/filter/limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 + inet/filter/logdrop-142 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-142 -m limit --limit 1/second -j LOG + inet/filter/logdrop-142 -j DROP + inet6/filter/logdrop-142 -j DROP + inet/filter/limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 388 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-387 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-387 + inet/filter/limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 + inet6/filter/limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 + inet/filter/logdrop-143 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-143 -m limit --limit 1/second -j LOG + inet/filter/logdrop-143 -j DROP + inet6/filter/logdrop-143 -j DROP + inet/filter/limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 389 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-388 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-388 + inet/filter/limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-144 + inet6/filter/limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-144 + inet/filter/logdrop-144 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-144 -m limit --limit 1/second -j LOG + inet/filter/logdrop-144 -j DROP + inet6/filter/logdrop-144 -j DROP + inet/filter/limit-388 -j ACCEPT + inet6/filter/limit-388 -j ACCEPT + +Filter 390 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 + inet/filter/logdrop-145 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-145 -m limit --limit 1/second -j LOG + inet/filter/logdrop-145 -j DROP + inet6/filter/logdrop-145 -j DROP + +Filter 391 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-390 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-390 + inet/filter/limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 + inet6/filter/limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 + inet/filter/logdrop-146 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-146 -m limit --limit 1/second -j LOG + inet/filter/logdrop-146 -j DROP + inet6/filter/logdrop-146 -j DROP + inet/filter/limit-390 -m limit --limit 1/second -j LOG + inet6/filter/limit-390 -m limit --limit 1/second -j LOG + inet/filter/limit-390 -j ACCEPT + inet6/filter/limit-390 -j ACCEPT + +Filter 392 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-391 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-391 + inet/filter/limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 + inet6/filter/limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 + inet/filter/logdrop-147 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-147 -m limit --limit 1/second -j LOG + inet/filter/logdrop-147 -j DROP + inet6/filter/logdrop-147 -j DROP + inet/filter/limit-391 -m limit --limit 1/second -j LOG + inet6/filter/limit-391 -m limit --limit 1/second -j LOG + +Filter 393 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-392 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-392 + inet/filter/limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 + inet6/filter/limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 + inet/filter/logdrop-148 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-148 -m limit --limit 1/second -j LOG + inet/filter/logdrop-148 -j DROP + inet6/filter/logdrop-148 -j DROP + inet/filter/limit-392 -j ACCEPT + inet6/filter/limit-392 -j ACCEPT + +Filter 394 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 + inet/filter/logdrop-149 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-149 -m limit --limit 1/second -j LOG + inet/filter/logdrop-149 -j DROP + inet6/filter/logdrop-149 -j DROP + +Filter 395 {"conn-limit":{"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-394 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-394 + inet/filter/limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-150 + inet6/filter/limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-150 + inet/filter/logdrop-150 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-150 -m limit --limit 1/second -j LOG + inet/filter/logdrop-150 -j DROP + inet6/filter/logdrop-150 -j DROP + inet/filter/limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-394 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 396 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-395 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-395 + inet/filter/limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 + inet6/filter/limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 + inet/filter/logdrop-151 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-151 -m limit --limit 1/second -j LOG + inet/filter/logdrop-151 -j DROP + inet6/filter/logdrop-151 -j DROP + inet/filter/limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-395 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 397 {"conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-396 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-396 + inet/filter/limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 + inet6/filter/limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 + inet/filter/logdrop-152 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-152 -m limit --limit 1/second -j LOG + inet/filter/logdrop-152 -j DROP + inet6/filter/logdrop-152 -j DROP + inet/filter/limit-396 -m limit --limit 1/second -j LOG + inet6/filter/limit-396 -m limit --limit 1/second -j LOG + inet/filter/limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 398 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-397 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-397 + inet/filter/limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 + inet6/filter/limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 + inet/filter/logdrop-153 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-153 -m limit --limit 1/second -j LOG + inet/filter/logdrop-153 -j DROP + inet6/filter/logdrop-153 -j DROP + inet/filter/limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 399 {"conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-398 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-398 + inet/filter/limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 + inet6/filter/limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 + inet/filter/logdrop-154 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-154 -m limit --limit 1/second -j LOG + inet/filter/logdrop-154 -j DROP + inet6/filter/logdrop-154 -j DROP + inet/filter/limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 400 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-399 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-399 + inet/filter/limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 + inet6/filter/limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 + inet/filter/logdrop-155 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-155 -m limit --limit 1/second -j LOG + inet/filter/logdrop-155 -j DROP + inet6/filter/logdrop-155 -j DROP + inet/filter/limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-399 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 401 {"conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-400 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-400 + inet/filter/limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-156 + inet6/filter/limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-156 + inet/filter/logdrop-156 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-156 -m limit --limit 1/second -j LOG + inet/filter/logdrop-156 -j DROP + inet6/filter/logdrop-156 -j DROP + inet/filter/limit-400 -j ACCEPT + inet6/filter/limit-400 -j ACCEPT + +Filter 402 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 + inet/filter/logdrop-157 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-157 -m limit --limit 1/second -j LOG + inet/filter/logdrop-157 -j DROP + inet6/filter/logdrop-157 -j DROP + +Filter 403 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-402 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-402 + inet/filter/limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 + inet6/filter/limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 + inet/filter/logdrop-158 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-158 -m limit --limit 1/second -j LOG + inet/filter/logdrop-158 -j DROP + inet6/filter/logdrop-158 -j DROP + inet/filter/limit-402 -m limit --limit 1/second -j LOG + inet6/filter/limit-402 -m limit --limit 1/second -j LOG + inet/filter/limit-402 -j ACCEPT + inet6/filter/limit-402 -j ACCEPT + +Filter 404 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-403 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-403 + inet/filter/limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 + inet6/filter/limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 + inet/filter/logdrop-159 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-159 -m limit --limit 1/second -j LOG + inet/filter/logdrop-159 -j DROP + inet6/filter/logdrop-159 -j DROP + inet/filter/limit-403 -m limit --limit 1/second -j LOG + inet6/filter/limit-403 -m limit --limit 1/second -j LOG + +Filter 405 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-404 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-404 + inet/filter/limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 + inet6/filter/limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 + inet/filter/logdrop-160 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-160 -m limit --limit 1/second -j LOG + inet/filter/logdrop-160 -j DROP + inet6/filter/logdrop-160 -j DROP + inet/filter/limit-404 -j ACCEPT + inet6/filter/limit-404 -j ACCEPT + +Filter 406 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 + inet/filter/logdrop-161 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-161 -m limit --limit 1/second -j LOG + inet/filter/logdrop-161 -j DROP + inet6/filter/logdrop-161 -j DROP + +Filter 407 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-406 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-406 + inet/filter/limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-162 + inet6/filter/limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-162 + inet/filter/logdrop-162 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-162 -m limit --limit 1/second -j LOG + inet/filter/logdrop-162 -j DROP + inet6/filter/logdrop-162 -j DROP + inet/filter/limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-406 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 408 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-407 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-407 + inet/filter/limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 + inet6/filter/limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 + inet/filter/logdrop-163 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-163 -m limit --limit 1/second -j LOG + inet/filter/logdrop-163 -j DROP + inet6/filter/logdrop-163 -j DROP + inet/filter/limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-407 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 409 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-408 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-408 + inet/filter/limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 + inet6/filter/limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 + inet/filter/logdrop-164 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-164 -m limit --limit 1/second -j LOG + inet/filter/logdrop-164 -j DROP + inet6/filter/logdrop-164 -j DROP + inet/filter/limit-408 -m limit --limit 1/second -j LOG + inet6/filter/limit-408 -m limit --limit 1/second -j LOG + inet/filter/limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-408 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 410 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-409 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-409 + inet/filter/limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 + inet6/filter/limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 + inet/filter/logdrop-165 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-165 -m limit --limit 1/second -j LOG + inet/filter/logdrop-165 -j DROP + inet6/filter/logdrop-165 -j DROP + inet/filter/limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 411 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-410 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-410 + inet/filter/limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 + inet6/filter/limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 + inet/filter/logdrop-166 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-166 -m limit --limit 1/second -j LOG + inet/filter/logdrop-166 -j DROP + inet6/filter/logdrop-166 -j DROP + inet/filter/limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-410 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 412 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-411 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-411 + inet/filter/limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 + inet6/filter/limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 + inet/filter/logdrop-167 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-167 -m limit --limit 1/second -j LOG + inet/filter/logdrop-167 -j DROP + inet6/filter/logdrop-167 -j DROP + inet/filter/limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-411 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 413 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-412 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-412 + inet/filter/limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-168 + inet6/filter/limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-168 + inet/filter/logdrop-168 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-168 -m limit --limit 1/second -j LOG + inet/filter/logdrop-168 -j DROP + inet6/filter/logdrop-168 -j DROP + inet/filter/limit-412 -j ACCEPT + inet6/filter/limit-412 -j ACCEPT + +Filter 414 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 + inet/filter/logdrop-169 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-169 -m limit --limit 1/second -j LOG + inet/filter/logdrop-169 -j DROP + inet6/filter/logdrop-169 -j DROP + +Filter 415 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-414 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-414 + inet/filter/limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 + inet6/filter/limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 + inet/filter/logdrop-170 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-170 -m limit --limit 1/second -j LOG + inet/filter/logdrop-170 -j DROP + inet6/filter/logdrop-170 -j DROP + inet/filter/limit-414 -m limit --limit 1/second -j LOG + inet6/filter/limit-414 -m limit --limit 1/second -j LOG + inet/filter/limit-414 -j ACCEPT + inet6/filter/limit-414 -j ACCEPT + +Filter 416 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-415 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-415 + inet/filter/limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 + inet6/filter/limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 + inet/filter/logdrop-171 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-171 -m limit --limit 1/second -j LOG + inet/filter/logdrop-171 -j DROP + inet6/filter/logdrop-171 -j DROP + inet/filter/limit-415 -m limit --limit 1/second -j LOG + inet6/filter/limit-415 -m limit --limit 1/second -j LOG + +Filter 417 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-416 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-416 + inet/filter/limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 + inet6/filter/limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 + inet/filter/logdrop-172 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-172 -m limit --limit 1/second -j LOG + inet/filter/logdrop-172 -j DROP + inet6/filter/logdrop-172 -j DROP + inet/filter/limit-416 -j ACCEPT + inet6/filter/limit-416 -j ACCEPT + +Filter 418 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 + inet/filter/logdrop-173 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-173 -m limit --limit 1/second -j LOG + inet/filter/logdrop-173 -j DROP + inet6/filter/logdrop-173 -j DROP + +Filter 419 {"conn-limit":{"log":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-418 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-418 + inet/filter/limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 420 {"action":"pass","conn-limit":{"log":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-419 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-419 + inet/filter/limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 421 {"conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-420 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-420 + inet/filter/limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-420 -m limit --limit 1/second -j LOG + inet6/filter/limit-420 -m limit --limit 1/second -j LOG + inet/filter/limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 422 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-421 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-421 + inet/filter/limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 423 {"conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-422 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-422 + inet/filter/limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 424 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-423 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-423 + inet/filter/limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 425 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-424 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-424 + inet/filter/limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 426 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-425 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-425 + inet/filter/limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 427 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-426 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-426 + inet/filter/limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-426 -m limit --limit 1/second -j LOG + inet6/filter/limit-426 -m limit --limit 1/second -j LOG + inet/filter/limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 428 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-427 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-427 + inet/filter/limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 429 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-428 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-428 + inet/filter/limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 430 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-429 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-429 + inet/filter/limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 431 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-430 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-430 + inet/filter/limit-430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-430 -j ACCEPT + inet6/filter/limit-430 -j ACCEPT + +Filter 432 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 433 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-432 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-432 + inet/filter/limit-432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-432 -m limit --limit 1/second -j LOG + inet6/filter/limit-432 -m limit --limit 1/second -j LOG + inet/filter/limit-432 -j ACCEPT + inet6/filter/limit-432 -j ACCEPT + +Filter 434 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-433 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-433 + inet/filter/limit-433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-433 -m limit --limit 1/second -j LOG + inet6/filter/limit-433 -m limit --limit 1/second -j LOG + +Filter 435 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-434 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-434 + inet/filter/limit-434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-434 -j ACCEPT + inet6/filter/limit-434 -j ACCEPT + +Filter 436 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 437 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-436 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-436 + inet/filter/limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 438 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-437 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-437 + inet/filter/limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 439 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-438 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-438 + inet/filter/limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-438 -m limit --limit 1/second -j LOG + inet6/filter/limit-438 -m limit --limit 1/second -j LOG + inet/filter/limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 440 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-439 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-439 + inet/filter/limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 441 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-440 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-440 + inet/filter/limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 442 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-441 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-441 + inet/filter/limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 443 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-442 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-442 + inet/filter/limit-442 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-442 -j ACCEPT + inet6/filter/limit-442 -j ACCEPT + +Filter 444 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 445 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-444 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-444 + inet/filter/limit-444 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-444 -m limit --limit 1/second -j LOG + inet6/filter/limit-444 -m limit --limit 1/second -j LOG + inet/filter/limit-444 -j ACCEPT + inet6/filter/limit-444 -j ACCEPT + +Filter 446 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-445 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-445 + inet/filter/limit-445 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-445 -m limit --limit 1/second -j LOG + inet6/filter/limit-445 -m limit --limit 1/second -j LOG + +Filter 447 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-446 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-446 + inet/filter/limit-446 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-446 -j ACCEPT + inet6/filter/limit-446 -j ACCEPT + +Filter 448 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 449 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-448 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-448 + inet/filter/limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-448 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-448 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 450 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-449 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-449 + inet/filter/limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-449 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-449 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 451 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-450 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-450 + inet/filter/limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-450 -m limit --limit 1/second -j LOG + inet6/filter/limit-450 -m limit --limit 1/second -j LOG + inet/filter/limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-450 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 452 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-451 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-451 + inet/filter/limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-451 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-451 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 453 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-452 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-452 + inet/filter/limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-452 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-452 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 454 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-453 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-453 + inet/filter/limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-453 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-453 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 455 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-454 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-454 + inet/filter/limit-454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-454 -j ACCEPT + inet6/filter/limit-454 -j ACCEPT + +Filter 456 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 457 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-456 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-456 + inet/filter/limit-456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-456 -m limit --limit 1/second -j LOG + inet6/filter/limit-456 -m limit --limit 1/second -j LOG + inet/filter/limit-456 -j ACCEPT + inet6/filter/limit-456 -j ACCEPT + +Filter 458 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-457 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-457 + inet/filter/limit-457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-457 -m limit --limit 1/second -j LOG + inet6/filter/limit-457 -m limit --limit 1/second -j LOG + +Filter 459 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-458 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-458 + inet/filter/limit-458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-458 -j ACCEPT + inet6/filter/limit-458 -j ACCEPT + +Filter 460 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 461 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-460 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-460 + inet/filter/limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 462 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-461 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-461 + inet/filter/limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-461 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 463 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-462 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-462 + inet/filter/limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-462 -m limit --limit 1/second -j LOG + inet6/filter/limit-462 -m limit --limit 1/second -j LOG + inet/filter/limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-462 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 464 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-463 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-463 + inet/filter/limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-463 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 465 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-464 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-464 + inet/filter/limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-464 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 466 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-465 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-465 + inet/filter/limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-465 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 467 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-466 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-466 + inet/filter/limit-466 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-466 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-466 -j ACCEPT + inet6/filter/limit-466 -j ACCEPT + +Filter 468 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 469 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-468 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-468 + inet/filter/limit-468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-468 -m limit --limit 1/second -j LOG + inet6/filter/limit-468 -m limit --limit 1/second -j LOG + inet/filter/limit-468 -j ACCEPT + inet6/filter/limit-468 -j ACCEPT + +Filter 470 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-469 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-469 + inet/filter/limit-469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-469 -m limit --limit 1/second -j LOG + inet6/filter/limit-469 -m limit --limit 1/second -j LOG + +Filter 471 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-470 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-470 + inet/filter/limit-470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-470 -j ACCEPT + inet6/filter/limit-470 -j ACCEPT + +Filter 472 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 473 {"conn-limit":{"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-472 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-472 + inet/filter/limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 474 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-473 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-473 + inet/filter/limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 475 {"conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-474 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-474 + inet/filter/limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-474 -m limit --limit 1/second -j LOG + inet6/filter/limit-474 -m limit --limit 1/second -j LOG + inet/filter/limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 476 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-475 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-475 + inet/filter/limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 477 {"conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-476 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-476 + inet/filter/limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 478 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-477 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-477 + inet/filter/limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 479 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-478 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-478 + inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 480 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-479 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-479 + inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 481 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-480 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-480 + inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-480 -m limit --limit 1/second -j LOG + inet6/filter/limit-480 -m limit --limit 1/second -j LOG + inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 482 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-481 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-481 + inet/filter/limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 483 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-482 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-482 + inet/filter/limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 484 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-483 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-483 + inet/filter/limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 485 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-484 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-484 + inet/filter/limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-484 -j ACCEPT + inet6/filter/limit-484 -j ACCEPT + +Filter 486 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 487 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-486 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-486 + inet/filter/limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-486 -m limit --limit 1/second -j LOG + inet6/filter/limit-486 -m limit --limit 1/second -j LOG + inet/filter/limit-486 -j ACCEPT + inet6/filter/limit-486 -j ACCEPT + +Filter 488 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-487 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-487 + inet/filter/limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-487 -m limit --limit 1/second -j LOG + inet6/filter/limit-487 -m limit --limit 1/second -j LOG + +Filter 489 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-488 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-488 + inet/filter/limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-488 -j ACCEPT + inet6/filter/limit-488 -j ACCEPT + +Filter 490 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 491 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-490 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-490 + inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 492 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-491 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-491 + inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 493 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-492 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-492 + inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-492 -m limit --limit 1/second -j LOG + inet6/filter/limit-492 -m limit --limit 1/second -j LOG + inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 494 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-493 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-493 + inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 495 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-494 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-494 + inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 496 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-495 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-495 + inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 497 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-496 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-496 + inet/filter/limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-496 -j ACCEPT + inet6/filter/limit-496 -j ACCEPT + +Filter 498 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 499 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-498 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-498 + inet/filter/limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-498 -m limit --limit 1/second -j LOG + inet6/filter/limit-498 -m limit --limit 1/second -j LOG + inet/filter/limit-498 -j ACCEPT + inet6/filter/limit-498 -j ACCEPT + +Filter 500 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-499 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-499 + inet/filter/limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-499 -m limit --limit 1/second -j LOG + inet6/filter/limit-499 -m limit --limit 1/second -j LOG + +Filter 501 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-500 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-500 + inet/filter/limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-500 -j ACCEPT + inet6/filter/limit-500 -j ACCEPT + +Filter 502 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 503 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-502 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-502 + inet/filter/limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-502 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-502 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 504 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-503 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-503 + inet/filter/limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-503 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-503 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 505 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-504 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-504 + inet/filter/limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-504 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-504 -m limit --limit 1/second -j LOG + inet6/filter/limit-504 -m limit --limit 1/second -j LOG + inet/filter/limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-504 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 506 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-505 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-505 + inet/filter/limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-505 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-505 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 507 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-506 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-506 + inet/filter/limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-506 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-506 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 508 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-507 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-507 + inet/filter/limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-507 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-507 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 509 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-508 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-508 + inet/filter/limit-508 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-508 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-508 -j ACCEPT + inet6/filter/limit-508 -j ACCEPT + +Filter 510 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 511 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-510 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-510 + inet/filter/limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-510 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-510 -m limit --limit 1/second -j LOG + inet6/filter/limit-510 -m limit --limit 1/second -j LOG + inet/filter/limit-510 -j ACCEPT + inet6/filter/limit-510 -j ACCEPT + +Filter 512 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-511 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-511 + inet/filter/limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-511 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-511 -m limit --limit 1/second -j LOG + inet6/filter/limit-511 -m limit --limit 1/second -j LOG + +Filter 513 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-512 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-512 + inet/filter/limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-512 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-512 -j ACCEPT + inet6/filter/limit-512 -j ACCEPT + +Filter 514 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 515 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-514 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-514 + inet/filter/limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-514 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 516 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-515 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-515 + inet/filter/limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-515 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 517 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-516 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-516 + inet/filter/limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-516 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-516 -m limit --limit 1/second -j LOG + inet6/filter/limit-516 -m limit --limit 1/second -j LOG + inet/filter/limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-516 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 518 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-517 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-517 + inet/filter/limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-517 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-517 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 519 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-518 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-518 + inet/filter/limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-518 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-518 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 520 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-519 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-519 + inet/filter/limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-519 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-519 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 521 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-520 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-520 + inet/filter/limit-520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-520 -j ACCEPT + inet6/filter/limit-520 -j ACCEPT + +Filter 522 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 523 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-522 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-522 + inet/filter/limit-522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-522 -m limit --limit 1/second -j LOG + inet6/filter/limit-522 -m limit --limit 1/second -j LOG + inet/filter/limit-522 -j ACCEPT + inet6/filter/limit-522 -j ACCEPT + +Filter 524 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-523 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-523 + inet/filter/limit-523 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-523 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-523 -m limit --limit 1/second -j LOG + inet6/filter/limit-523 -m limit --limit 1/second -j LOG + +Filter 525 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-524 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-524 + inet/filter/limit-524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-524 -j ACCEPT + inet6/filter/limit-524 -j ACCEPT + +Filter 526 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 527 {"conn-limit":{"interval":5},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-526 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-526 + inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-174 + inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-174 + inet/filter/logdrop-174 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-174 -m limit --limit 1/second -j LOG + inet/filter/logdrop-174 -j DROP + inet6/filter/logdrop-174 -j DROP + inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 528 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-527 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-527 + inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 + inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 + inet/filter/logdrop-175 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-175 -m limit --limit 1/second -j LOG + inet/filter/logdrop-175 -j DROP + inet6/filter/logdrop-175 -j DROP + inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 529 {"conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-528 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-528 + inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 + inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 + inet/filter/logdrop-176 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-176 -m limit --limit 1/second -j LOG + inet/filter/logdrop-176 -j DROP + inet6/filter/logdrop-176 -j DROP + inet/filter/limit-528 -m limit --limit 1/second -j LOG + inet6/filter/limit-528 -m limit --limit 1/second -j LOG + inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 530 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-529 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-529 + inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 + inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 + inet/filter/logdrop-177 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-177 -m limit --limit 1/second -j LOG + inet/filter/logdrop-177 -j DROP + inet6/filter/logdrop-177 -j DROP + inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 531 {"conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-530 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-530 + inet/filter/limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 + inet6/filter/limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 + inet/filter/logdrop-178 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-178 -m limit --limit 1/second -j LOG + inet/filter/logdrop-178 -j DROP + inet6/filter/logdrop-178 -j DROP + inet/filter/limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 532 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-531 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-531 + inet/filter/limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 + inet6/filter/limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 + inet/filter/logdrop-179 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-179 -m limit --limit 1/second -j LOG + inet/filter/logdrop-179 -j DROP + inet6/filter/logdrop-179 -j DROP + inet/filter/limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 533 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-532 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-532 + inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 + inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 + inet/filter/logdrop-180 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-180 -m limit --limit 1/second -j LOG + inet/filter/logdrop-180 -j DROP + inet6/filter/logdrop-180 -j DROP + inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 534 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-533 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-533 + inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 + inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 + inet/filter/logdrop-181 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-181 -m limit --limit 1/second -j LOG + inet/filter/logdrop-181 -j DROP + inet6/filter/logdrop-181 -j DROP + inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 535 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-534 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-534 + inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 + inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 + inet/filter/logdrop-182 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-182 -m limit --limit 1/second -j LOG + inet/filter/logdrop-182 -j DROP + inet6/filter/logdrop-182 -j DROP + inet/filter/limit-534 -m limit --limit 1/second -j LOG + inet6/filter/limit-534 -m limit --limit 1/second -j LOG + inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 536 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-535 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-535 + inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 + inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 + inet/filter/logdrop-183 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-183 -m limit --limit 1/second -j LOG + inet/filter/logdrop-183 -j DROP + inet6/filter/logdrop-183 -j DROP + inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 537 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-536 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-536 + inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 + inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 + inet/filter/logdrop-184 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-184 -m limit --limit 1/second -j LOG + inet/filter/logdrop-184 -j DROP + inet6/filter/logdrop-184 -j DROP + inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 538 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-537 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-537 + inet/filter/limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 + inet6/filter/limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 + inet/filter/logdrop-185 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-185 -m limit --limit 1/second -j LOG + inet/filter/logdrop-185 -j DROP + inet6/filter/logdrop-185 -j DROP + inet/filter/limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 539 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-538 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-538 + inet/filter/limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-186 + inet6/filter/limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-186 + inet/filter/logdrop-186 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-186 -m limit --limit 1/second -j LOG + inet/filter/logdrop-186 -j DROP + inet6/filter/logdrop-186 -j DROP + inet/filter/limit-538 -j ACCEPT + inet6/filter/limit-538 -j ACCEPT + +Filter 540 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 + inet/filter/logdrop-187 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-187 -m limit --limit 1/second -j LOG + inet/filter/logdrop-187 -j DROP + inet6/filter/logdrop-187 -j DROP + +Filter 541 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-540 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-540 + inet/filter/limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 + inet6/filter/limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 + inet/filter/logdrop-188 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-188 -m limit --limit 1/second -j LOG + inet/filter/logdrop-188 -j DROP + inet6/filter/logdrop-188 -j DROP + inet/filter/limit-540 -m limit --limit 1/second -j LOG + inet6/filter/limit-540 -m limit --limit 1/second -j LOG + inet/filter/limit-540 -j ACCEPT + inet6/filter/limit-540 -j ACCEPT + +Filter 542 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-541 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-541 + inet/filter/limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 + inet6/filter/limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 + inet/filter/logdrop-189 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-189 -m limit --limit 1/second -j LOG + inet/filter/logdrop-189 -j DROP + inet6/filter/logdrop-189 -j DROP + inet/filter/limit-541 -m limit --limit 1/second -j LOG + inet6/filter/limit-541 -m limit --limit 1/second -j LOG + +Filter 543 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-542 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-542 + inet/filter/limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 + inet6/filter/limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 + inet/filter/logdrop-190 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-190 -m limit --limit 1/second -j LOG + inet/filter/logdrop-190 -j DROP + inet6/filter/logdrop-190 -j DROP + inet/filter/limit-542 -j ACCEPT + inet6/filter/limit-542 -j ACCEPT + +Filter 544 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 + inet/filter/logdrop-191 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-191 -m limit --limit 1/second -j LOG + inet/filter/logdrop-191 -j DROP + inet6/filter/logdrop-191 -j DROP + +Filter 545 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-544 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-544 + inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-192 + inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-192 + inet/filter/logdrop-192 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-192 -m limit --limit 1/second -j LOG + inet/filter/logdrop-192 -j DROP + inet6/filter/logdrop-192 -j DROP + inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 546 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-545 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-545 + inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 + inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 + inet/filter/logdrop-193 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-193 -m limit --limit 1/second -j LOG + inet/filter/logdrop-193 -j DROP + inet6/filter/logdrop-193 -j DROP + inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 547 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-546 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-546 + inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 + inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 + inet/filter/logdrop-194 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-194 -m limit --limit 1/second -j LOG + inet/filter/logdrop-194 -j DROP + inet6/filter/logdrop-194 -j DROP + inet/filter/limit-546 -m limit --limit 1/second -j LOG + inet6/filter/limit-546 -m limit --limit 1/second -j LOG + inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 548 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-547 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-547 + inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 + inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 + inet/filter/logdrop-195 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-195 -m limit --limit 1/second -j LOG + inet/filter/logdrop-195 -j DROP + inet6/filter/logdrop-195 -j DROP + inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 549 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-548 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-548 + inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 + inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 + inet/filter/logdrop-196 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-196 -m limit --limit 1/second -j LOG + inet/filter/logdrop-196 -j DROP + inet6/filter/logdrop-196 -j DROP + inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 550 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-549 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-549 + inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 + inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 + inet/filter/logdrop-197 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-197 -m limit --limit 1/second -j LOG + inet/filter/logdrop-197 -j DROP + inet6/filter/logdrop-197 -j DROP + inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 551 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-550 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-550 + inet/filter/limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-198 + inet6/filter/limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-198 + inet/filter/logdrop-198 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-198 -m limit --limit 1/second -j LOG + inet/filter/logdrop-198 -j DROP + inet6/filter/logdrop-198 -j DROP + inet/filter/limit-550 -j ACCEPT + inet6/filter/limit-550 -j ACCEPT + +Filter 552 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 + inet/filter/logdrop-199 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-199 -m limit --limit 1/second -j LOG + inet/filter/logdrop-199 -j DROP + inet6/filter/logdrop-199 -j DROP + +Filter 553 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-552 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-552 + inet/filter/limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 + inet6/filter/limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 + inet/filter/logdrop-200 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-200 -m limit --limit 1/second -j LOG + inet/filter/logdrop-200 -j DROP + inet6/filter/logdrop-200 -j DROP + inet/filter/limit-552 -m limit --limit 1/second -j LOG + inet6/filter/limit-552 -m limit --limit 1/second -j LOG + inet/filter/limit-552 -j ACCEPT + inet6/filter/limit-552 -j ACCEPT + +Filter 554 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-553 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-553 + inet/filter/limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 + inet6/filter/limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 + inet/filter/logdrop-201 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-201 -m limit --limit 1/second -j LOG + inet/filter/logdrop-201 -j DROP + inet6/filter/logdrop-201 -j DROP + inet/filter/limit-553 -m limit --limit 1/second -j LOG + inet6/filter/limit-553 -m limit --limit 1/second -j LOG + +Filter 555 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-554 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-554 + inet/filter/limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 + inet6/filter/limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 + inet/filter/logdrop-202 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-202 -m limit --limit 1/second -j LOG + inet/filter/logdrop-202 -j DROP + inet6/filter/logdrop-202 -j DROP + inet/filter/limit-554 -j ACCEPT + inet6/filter/limit-554 -j ACCEPT + +Filter 556 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 + inet/filter/logdrop-203 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-203 -m limit --limit 1/second -j LOG + inet/filter/logdrop-203 -j DROP + inet6/filter/logdrop-203 -j DROP + +Filter 557 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-556 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-556 + inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-204 + inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-204 + inet/filter/logdrop-204 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-204 -m limit --limit 1/second -j LOG + inet/filter/logdrop-204 -j DROP + inet6/filter/logdrop-204 -j DROP + inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 558 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-557 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-557 + inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 + inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 + inet/filter/logdrop-205 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-205 -m limit --limit 1/second -j LOG + inet/filter/logdrop-205 -j DROP + inet6/filter/logdrop-205 -j DROP + inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 559 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-558 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-558 + inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 + inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 + inet/filter/logdrop-206 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-206 -m limit --limit 1/second -j LOG + inet/filter/logdrop-206 -j DROP + inet6/filter/logdrop-206 -j DROP + inet/filter/limit-558 -m limit --limit 1/second -j LOG + inet6/filter/limit-558 -m limit --limit 1/second -j LOG + inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 560 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-559 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-559 + inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 + inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 + inet/filter/logdrop-207 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-207 -m limit --limit 1/second -j LOG + inet/filter/logdrop-207 -j DROP + inet6/filter/logdrop-207 -j DROP + inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 561 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-560 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-560 + inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 + inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 + inet/filter/logdrop-208 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-208 -m limit --limit 1/second -j LOG + inet/filter/logdrop-208 -j DROP + inet6/filter/logdrop-208 -j DROP + inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 562 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-561 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-561 + inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 + inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 + inet/filter/logdrop-209 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-209 -m limit --limit 1/second -j LOG + inet/filter/logdrop-209 -j DROP + inet6/filter/logdrop-209 -j DROP + inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 563 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-562 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-562 + inet/filter/limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-210 + inet6/filter/limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-210 + inet/filter/logdrop-210 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-210 -m limit --limit 1/second -j LOG + inet/filter/logdrop-210 -j DROP + inet6/filter/logdrop-210 -j DROP + inet/filter/limit-562 -j ACCEPT + inet6/filter/limit-562 -j ACCEPT + +Filter 564 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 + inet/filter/logdrop-211 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-211 -m limit --limit 1/second -j LOG + inet/filter/logdrop-211 -j DROP + inet6/filter/logdrop-211 -j DROP + +Filter 565 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-564 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-564 + inet/filter/limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 + inet6/filter/limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 + inet/filter/logdrop-212 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-212 -m limit --limit 1/second -j LOG + inet/filter/logdrop-212 -j DROP + inet6/filter/logdrop-212 -j DROP + inet/filter/limit-564 -m limit --limit 1/second -j LOG + inet6/filter/limit-564 -m limit --limit 1/second -j LOG + inet/filter/limit-564 -j ACCEPT + inet6/filter/limit-564 -j ACCEPT + +Filter 566 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-565 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-565 + inet/filter/limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 + inet6/filter/limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 + inet/filter/logdrop-213 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-213 -m limit --limit 1/second -j LOG + inet/filter/logdrop-213 -j DROP + inet6/filter/logdrop-213 -j DROP + inet/filter/limit-565 -m limit --limit 1/second -j LOG + inet6/filter/limit-565 -m limit --limit 1/second -j LOG + +Filter 567 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-566 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-566 + inet/filter/limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 + inet6/filter/limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 + inet/filter/logdrop-214 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-214 -m limit --limit 1/second -j LOG + inet/filter/logdrop-214 -j DROP + inet6/filter/logdrop-214 -j DROP + inet/filter/limit-566 -j ACCEPT + inet6/filter/limit-566 -j ACCEPT + +Filter 568 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 + inet/filter/logdrop-215 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-215 -m limit --limit 1/second -j LOG + inet/filter/logdrop-215 -j DROP + inet6/filter/logdrop-215 -j DROP + +Filter 569 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-568 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-568 + inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-216 + inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-216 + inet/filter/logdrop-216 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-216 -m limit --limit 1/second -j LOG + inet/filter/logdrop-216 -j DROP + inet6/filter/logdrop-216 -j DROP + inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 570 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-569 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-569 + inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 + inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 + inet/filter/logdrop-217 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-217 -m limit --limit 1/second -j LOG + inet/filter/logdrop-217 -j DROP + inet6/filter/logdrop-217 -j DROP + inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 571 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-570 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-570 + inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 + inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 + inet/filter/logdrop-218 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-218 -m limit --limit 1/second -j LOG + inet/filter/logdrop-218 -j DROP + inet6/filter/logdrop-218 -j DROP + inet/filter/limit-570 -m limit --limit 1/second -j LOG + inet6/filter/limit-570 -m limit --limit 1/second -j LOG + inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 572 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-571 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-571 + inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 + inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 + inet/filter/logdrop-219 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-219 -m limit --limit 1/second -j LOG + inet/filter/logdrop-219 -j DROP + inet6/filter/logdrop-219 -j DROP + inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 573 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-572 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-572 + inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 + inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 + inet/filter/logdrop-220 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-220 -m limit --limit 1/second -j LOG + inet/filter/logdrop-220 -j DROP + inet6/filter/logdrop-220 -j DROP + inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 574 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-573 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-573 + inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 + inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 + inet/filter/logdrop-221 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-221 -m limit --limit 1/second -j LOG + inet/filter/logdrop-221 -j DROP + inet6/filter/logdrop-221 -j DROP + inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 575 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-574 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-574 + inet/filter/limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-222 + inet6/filter/limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-222 + inet/filter/logdrop-222 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-222 -m limit --limit 1/second -j LOG + inet/filter/logdrop-222 -j DROP + inet6/filter/logdrop-222 -j DROP + inet/filter/limit-574 -j ACCEPT + inet6/filter/limit-574 -j ACCEPT + +Filter 576 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 + inet/filter/logdrop-223 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-223 -m limit --limit 1/second -j LOG + inet/filter/logdrop-223 -j DROP + inet6/filter/logdrop-223 -j DROP + +Filter 577 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-576 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-576 + inet/filter/limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 + inet6/filter/limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 + inet/filter/logdrop-224 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-224 -m limit --limit 1/second -j LOG + inet/filter/logdrop-224 -j DROP + inet6/filter/logdrop-224 -j DROP + inet/filter/limit-576 -m limit --limit 1/second -j LOG + inet6/filter/limit-576 -m limit --limit 1/second -j LOG + inet/filter/limit-576 -j ACCEPT + inet6/filter/limit-576 -j ACCEPT + +Filter 578 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-577 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-577 + inet/filter/limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 + inet6/filter/limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 + inet/filter/logdrop-225 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-225 -m limit --limit 1/second -j LOG + inet/filter/logdrop-225 -j DROP + inet6/filter/logdrop-225 -j DROP + inet/filter/limit-577 -m limit --limit 1/second -j LOG + inet6/filter/limit-577 -m limit --limit 1/second -j LOG + +Filter 579 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-578 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-578 + inet/filter/limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 + inet6/filter/limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 + inet/filter/logdrop-226 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-226 -m limit --limit 1/second -j LOG + inet/filter/logdrop-226 -j DROP + inet6/filter/logdrop-226 -j DROP + inet/filter/limit-578 -j ACCEPT + inet6/filter/limit-578 -j ACCEPT + +Filter 580 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 + inet/filter/logdrop-227 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-227 -m limit --limit 1/second -j LOG + inet/filter/logdrop-227 -j DROP + inet6/filter/logdrop-227 -j DROP + +Filter 581 {"conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-580 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-580 + inet/filter/limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 582 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-581 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-581 + inet/filter/limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 583 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-582 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-582 + inet/filter/limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-582 -m limit --limit 1/second -j LOG + inet6/filter/limit-582 -m limit --limit 1/second -j LOG + inet/filter/limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 584 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-583 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-583 + inet/filter/limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 585 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-584 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-584 + inet/filter/limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 586 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-585 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-585 + inet/filter/limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 587 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-586 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-586 + inet/filter/limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 588 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-587 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-587 + inet/filter/limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 589 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-588 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-588 + inet/filter/limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-588 -m limit --limit 1/second -j LOG + inet6/filter/limit-588 -m limit --limit 1/second -j LOG + inet/filter/limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 590 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-589 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-589 + inet/filter/limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 591 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-590 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-590 + inet/filter/limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 592 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-591 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-591 + inet/filter/limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 593 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-592 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-592 + inet/filter/limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-592 -j ACCEPT + inet6/filter/limit-592 -j ACCEPT + +Filter 594 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 595 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-594 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-594 + inet/filter/limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-594 -m limit --limit 1/second -j LOG + inet6/filter/limit-594 -m limit --limit 1/second -j LOG + inet/filter/limit-594 -j ACCEPT + inet6/filter/limit-594 -j ACCEPT + +Filter 596 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-595 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-595 + inet/filter/limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-595 -m limit --limit 1/second -j LOG + inet6/filter/limit-595 -m limit --limit 1/second -j LOG + +Filter 597 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-596 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-596 + inet/filter/limit-596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-596 -j ACCEPT + inet6/filter/limit-596 -j ACCEPT + +Filter 598 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 599 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-598 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-598 + inet/filter/limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 600 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-599 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-599 + inet/filter/limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 601 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-600 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-600 + inet/filter/limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-600 -m limit --limit 1/second -j LOG + inet6/filter/limit-600 -m limit --limit 1/second -j LOG + inet/filter/limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 602 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-601 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-601 + inet/filter/limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 603 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-602 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-602 + inet/filter/limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 604 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-603 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-603 + inet/filter/limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 605 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-604 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-604 + inet/filter/limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-604 -j ACCEPT + inet6/filter/limit-604 -j ACCEPT + +Filter 606 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 607 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-606 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-606 + inet/filter/limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-606 -m limit --limit 1/second -j LOG + inet6/filter/limit-606 -m limit --limit 1/second -j LOG + inet/filter/limit-606 -j ACCEPT + inet6/filter/limit-606 -j ACCEPT + +Filter 608 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-607 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-607 + inet/filter/limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-607 -m limit --limit 1/second -j LOG + inet6/filter/limit-607 -m limit --limit 1/second -j LOG + +Filter 609 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-608 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-608 + inet/filter/limit-608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-608 -j ACCEPT + inet6/filter/limit-608 -j ACCEPT + +Filter 610 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 611 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-610 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-610 + inet/filter/limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-610 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-610 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 612 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-611 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-611 + inet/filter/limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-611 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-611 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 613 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-612 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-612 + inet/filter/limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-612 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-612 -m limit --limit 1/second -j LOG + inet6/filter/limit-612 -m limit --limit 1/second -j LOG + inet/filter/limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-612 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 614 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-613 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-613 + inet/filter/limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-613 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-613 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 615 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-614 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-614 + inet/filter/limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-614 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-614 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 616 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-615 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-615 + inet/filter/limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-615 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-615 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 617 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-616 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-616 + inet/filter/limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-616 -j ACCEPT + inet6/filter/limit-616 -j ACCEPT + +Filter 618 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 619 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-618 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-618 + inet/filter/limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-618 -m limit --limit 1/second -j LOG + inet6/filter/limit-618 -m limit --limit 1/second -j LOG + inet/filter/limit-618 -j ACCEPT + inet6/filter/limit-618 -j ACCEPT + +Filter 620 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-619 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-619 + inet/filter/limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-619 -m limit --limit 1/second -j LOG + inet6/filter/limit-619 -m limit --limit 1/second -j LOG + +Filter 621 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-620 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-620 + inet/filter/limit-620 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-620 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-620 -j ACCEPT + inet6/filter/limit-620 -j ACCEPT + +Filter 622 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 623 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-622 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-622 + inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 624 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-623 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-623 + inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 625 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-624 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-624 + inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-624 -m limit --limit 1/second -j LOG + inet6/filter/limit-624 -m limit --limit 1/second -j LOG + inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 626 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-625 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-625 + inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 627 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-626 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-626 + inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 628 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-627 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-627 + inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 629 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-628 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-628 + inet/filter/limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-628 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-628 -j ACCEPT + inet6/filter/limit-628 -j ACCEPT + +Filter 630 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 631 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-630 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-630 + inet/filter/limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-630 -m limit --limit 1/second -j LOG + inet6/filter/limit-630 -m limit --limit 1/second -j LOG + inet/filter/limit-630 -j ACCEPT + inet6/filter/limit-630 -j ACCEPT + +Filter 632 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-631 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-631 + inet/filter/limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-631 -m limit --limit 1/second -j LOG + inet6/filter/limit-631 -m limit --limit 1/second -j LOG + +Filter 633 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-632 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-632 + inet/filter/limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-632 -j ACCEPT + inet6/filter/limit-632 -j ACCEPT + +Filter 634 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 635 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-634 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-634 + inet/filter/limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 636 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-635 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-635 + inet/filter/limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 637 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-636 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-636 + inet/filter/limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-636 -m limit --limit 1/second -j LOG + inet6/filter/limit-636 -m limit --limit 1/second -j LOG + inet/filter/limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 638 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-637 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-637 + inet/filter/limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 639 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-638 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-638 + inet/filter/limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 640 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-639 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-639 + inet/filter/limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 641 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-640 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-640 + inet/filter/limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 642 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-641 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-641 + inet/filter/limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 643 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-642 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-642 + inet/filter/limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-642 -m limit --limit 1/second -j LOG + inet6/filter/limit-642 -m limit --limit 1/second -j LOG + inet/filter/limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 644 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-643 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-643 + inet/filter/limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 645 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-644 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-644 + inet/filter/limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 646 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-645 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-645 + inet/filter/limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 647 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-646 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-646 + inet/filter/limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-646 -j ACCEPT + inet6/filter/limit-646 -j ACCEPT + +Filter 648 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 649 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-648 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-648 + inet/filter/limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-648 -m limit --limit 1/second -j LOG + inet6/filter/limit-648 -m limit --limit 1/second -j LOG + inet/filter/limit-648 -j ACCEPT + inet6/filter/limit-648 -j ACCEPT + +Filter 650 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-649 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-649 + inet/filter/limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-649 -m limit --limit 1/second -j LOG + inet6/filter/limit-649 -m limit --limit 1/second -j LOG + +Filter 651 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-650 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-650 + inet/filter/limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-650 -j ACCEPT + inet6/filter/limit-650 -j ACCEPT + +Filter 652 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 653 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-652 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-652 + inet/filter/limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 654 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-653 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-653 + inet/filter/limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 655 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-654 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-654 + inet/filter/limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-654 -m limit --limit 1/second -j LOG + inet6/filter/limit-654 -m limit --limit 1/second -j LOG + inet/filter/limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 656 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-655 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-655 + inet/filter/limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 657 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-656 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-656 + inet/filter/limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 658 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-657 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-657 + inet/filter/limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 659 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-658 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-658 + inet/filter/limit-658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-658 -j ACCEPT + inet6/filter/limit-658 -j ACCEPT + +Filter 660 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 661 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-660 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-660 + inet/filter/limit-660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-660 -m limit --limit 1/second -j LOG + inet6/filter/limit-660 -m limit --limit 1/second -j LOG + inet/filter/limit-660 -j ACCEPT + inet6/filter/limit-660 -j ACCEPT + +Filter 662 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-661 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-661 + inet/filter/limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-661 -m limit --limit 1/second -j LOG + inet6/filter/limit-661 -m limit --limit 1/second -j LOG + +Filter 663 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-662 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-662 + inet/filter/limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-662 -j ACCEPT + inet6/filter/limit-662 -j ACCEPT + +Filter 664 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 665 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-664 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-664 + inet/filter/limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-664 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-664 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 666 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-665 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-665 + inet/filter/limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-665 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-665 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 667 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-666 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-666 + inet/filter/limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-666 -m limit --limit 1/second -j LOG + inet6/filter/limit-666 -m limit --limit 1/second -j LOG + inet/filter/limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-666 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 668 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-667 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-667 + inet/filter/limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-667 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 669 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-668 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-668 + inet/filter/limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-668 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 670 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-669 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-669 + inet/filter/limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-669 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 671 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-670 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-670 + inet/filter/limit-670 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-670 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-670 -j ACCEPT + inet6/filter/limit-670 -j ACCEPT + +Filter 672 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 673 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-672 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-672 + inet/filter/limit-672 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-672 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-672 -m limit --limit 1/second -j LOG + inet6/filter/limit-672 -m limit --limit 1/second -j LOG + inet/filter/limit-672 -j ACCEPT + inet6/filter/limit-672 -j ACCEPT + +Filter 674 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-673 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-673 + inet/filter/limit-673 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-673 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-673 -m limit --limit 1/second -j LOG + inet6/filter/limit-673 -m limit --limit 1/second -j LOG + +Filter 675 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-674 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-674 + inet/filter/limit-674 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-674 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-674 -j ACCEPT + inet6/filter/limit-674 -j ACCEPT + +Filter 676 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 677 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-676 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-676 + inet/filter/limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-676 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-676 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 678 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-677 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-677 + inet/filter/limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-677 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-677 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 679 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-678 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-678 + inet/filter/limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-678 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-678 -m limit --limit 1/second -j LOG + inet6/filter/limit-678 -m limit --limit 1/second -j LOG + inet/filter/limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-678 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 680 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-679 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-679 + inet/filter/limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-679 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-679 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 681 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-680 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-680 + inet/filter/limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-680 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-680 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 682 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-681 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-681 + inet/filter/limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-681 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-681 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 683 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-682 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-682 + inet/filter/limit-682 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-682 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-682 -j ACCEPT + inet6/filter/limit-682 -j ACCEPT + +Filter 684 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 685 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-684 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-684 + inet/filter/limit-684 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-684 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-684 -m limit --limit 1/second -j LOG + inet6/filter/limit-684 -m limit --limit 1/second -j LOG + inet/filter/limit-684 -j ACCEPT + inet6/filter/limit-684 -j ACCEPT + +Filter 686 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-685 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-685 + inet/filter/limit-685 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-685 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-685 -m limit --limit 1/second -j LOG + inet6/filter/limit-685 -m limit --limit 1/second -j LOG + +Filter 687 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-686 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-686 + inet/filter/limit-686 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-686 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-686 -j ACCEPT + inet6/filter/limit-686 -j ACCEPT + +Filter 688 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 689 {"conn-limit":150,"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-688 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-688 + inet/filter/limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-688 -j ACCEPT + inet6/filter/limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-688 -j ACCEPT + inet/filter/limit-688 -m limit --limit 1/second -j LOG + inet6/filter/limit-688 -m limit --limit 1/second -j LOG + inet/filter/limit-688 -j DROP + inet6/filter/limit-688 -j DROP + +Filter 690 {"action":"pass","conn-limit":150,"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-689 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-689 + inet/filter/limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-689 -j RETURN + inet6/filter/limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-689 -j RETURN + inet/filter/limit-689 -m limit --limit 1/second -j LOG + inet6/filter/limit-689 -m limit --limit 1/second -j LOG + inet/filter/limit-689 -j DROP + inet6/filter/limit-689 -j DROP + +Filter 691 {"conn-limit":150,"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-690 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-690 + inet/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j logaccept-7 + inet6/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j logaccept-7 + inet/filter/logaccept-7 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-7 -m limit --limit 1/second -j LOG + inet/filter/logaccept-7 -j ACCEPT + inet6/filter/logaccept-7 -j ACCEPT + inet/filter/limit-690 -m limit --limit 1/second -j LOG + inet6/filter/limit-690 -m limit --limit 1/second -j LOG + inet/filter/limit-690 -j DROP + inet6/filter/limit-690 -j DROP + +Filter 692 {"conn-limit":150,"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-691 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-691 + inet/filter/limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-691 -j ACCEPT + inet6/filter/limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-691 -j ACCEPT + inet/filter/limit-691 -m limit --limit 1/second -j LOG + inet6/filter/limit-691 -m limit --limit 1/second -j LOG + inet/filter/limit-691 -j DROP + inet6/filter/limit-691 -j DROP + +Filter 693 {"conn-limit":{"count":150},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-692 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-692 + inet/filter/limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-692 -j ACCEPT + inet6/filter/limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-692 -j ACCEPT + inet/filter/limit-692 -m limit --limit 1/second -j LOG + inet6/filter/limit-692 -m limit --limit 1/second -j LOG + inet/filter/limit-692 -j DROP + inet6/filter/limit-692 -j DROP + +Filter 694 {"action":"pass","conn-limit":{"count":150},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-693 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-693 + inet/filter/limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-693 -j RETURN + inet6/filter/limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-693 -j RETURN + inet/filter/limit-693 -m limit --limit 1/second -j LOG + inet6/filter/limit-693 -m limit --limit 1/second -j LOG + inet/filter/limit-693 -j DROP + inet6/filter/limit-693 -j DROP + +Filter 695 {"conn-limit":{"count":150},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-694 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-694 + inet/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j logaccept-8 + inet6/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j logaccept-8 + inet/filter/logaccept-8 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-8 -m limit --limit 1/second -j LOG + inet/filter/logaccept-8 -j ACCEPT + inet6/filter/logaccept-8 -j ACCEPT + inet/filter/limit-694 -m limit --limit 1/second -j LOG + inet6/filter/limit-694 -m limit --limit 1/second -j LOG + inet/filter/limit-694 -j DROP + inet6/filter/limit-694 -j DROP + +Filter 696 {"conn-limit":{"count":150},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-695 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-695 + inet/filter/limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-695 -j ACCEPT + inet6/filter/limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-695 -j ACCEPT + inet/filter/limit-695 -m limit --limit 1/second -j LOG + inet6/filter/limit-695 -m limit --limit 1/second -j LOG + inet/filter/limit-695 -j DROP + inet6/filter/limit-695 -j DROP + +Filter 697 {"conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-696 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-696 + inet/filter/limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-696 -j ACCEPT + inet6/filter/limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-696 -j ACCEPT + inet/filter/limit-696 -j DROP + inet6/filter/limit-696 -j DROP + +Filter 698 {"action":"pass","conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-697 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-697 + inet/filter/limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-697 -j RETURN + inet6/filter/limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-697 -j RETURN + inet/filter/limit-697 -j DROP + inet6/filter/limit-697 -j DROP + +Filter 699 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-698 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-698 + inet/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j logaccept-9 + inet6/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j logaccept-9 + inet/filter/logaccept-9 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-9 -m limit --limit 1/second -j LOG + inet/filter/logaccept-9 -j ACCEPT + inet6/filter/logaccept-9 -j ACCEPT + inet/filter/limit-698 -j DROP + inet6/filter/limit-698 -j DROP + +Filter 700 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-699 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-699 + inet/filter/limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-699 -j ACCEPT + inet6/filter/limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-699 -j ACCEPT + inet/filter/limit-699 -j DROP + inet6/filter/limit-699 -j DROP + +Filter 701 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-700 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-700 + inet/filter/limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-700 -j ACCEPT + inet6/filter/limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-700 -j ACCEPT + inet/filter/limit-700 -j DROP + inet6/filter/limit-700 -j DROP + +Filter 702 {"action":"pass","conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-701 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-701 + inet/filter/limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-701 -j RETURN + inet6/filter/limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-701 -j RETURN + inet/filter/limit-701 -j DROP + inet6/filter/limit-701 -j DROP + +Filter 703 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-702 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-702 + inet/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j logaccept-10 + inet6/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j logaccept-10 + inet/filter/logaccept-10 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-10 -m limit --limit 1/second -j LOG + inet/filter/logaccept-10 -j ACCEPT + inet6/filter/logaccept-10 -j ACCEPT + inet/filter/limit-702 -j DROP + inet6/filter/limit-702 -j DROP + +Filter 704 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-703 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-703 + inet/filter/limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-703 -j ACCEPT + inet6/filter/limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-703 -j ACCEPT + inet/filter/limit-703 -j DROP + inet6/filter/limit-703 -j DROP + +Filter 705 {"conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-704 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-704 + inet/filter/limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-704 -j ACCEPT + inet6/filter/limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-704 -j ACCEPT + inet/filter/limit-704 -m limit --limit 1/second -j LOG + inet6/filter/limit-704 -m limit --limit 1/second -j LOG + inet/filter/limit-704 -j DROP + inet6/filter/limit-704 -j DROP + +Filter 706 {"action":"pass","conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-705 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-705 + inet/filter/limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-705 -j RETURN + inet6/filter/limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-705 -j RETURN + inet/filter/limit-705 -m limit --limit 1/second -j LOG + inet6/filter/limit-705 -m limit --limit 1/second -j LOG + inet/filter/limit-705 -j DROP + inet6/filter/limit-705 -j DROP + +Filter 707 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-706 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-706 + inet/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j logaccept-11 + inet6/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j logaccept-11 + inet/filter/logaccept-11 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-11 -m limit --limit 1/second -j LOG + inet/filter/logaccept-11 -j ACCEPT + inet6/filter/logaccept-11 -j ACCEPT + inet/filter/limit-706 -m limit --limit 1/second -j LOG + inet6/filter/limit-706 -m limit --limit 1/second -j LOG + inet/filter/limit-706 -j DROP + inet6/filter/limit-706 -j DROP + +Filter 708 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-707 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-707 + inet/filter/limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-707 -j ACCEPT + inet6/filter/limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-707 -j ACCEPT + inet/filter/limit-707 -m limit --limit 1/second -j LOG + inet6/filter/limit-707 -m limit --limit 1/second -j LOG + inet/filter/limit-707 -j DROP + inet6/filter/limit-707 -j DROP + +Filter 709 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-708 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-708 + inet/filter/limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-708 -j ACCEPT + inet6/filter/limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-708 -j ACCEPT + inet/filter/limit-708 -j DROP + inet6/filter/limit-708 -j DROP + +Filter 710 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-709 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-709 + inet/filter/limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-709 -j RETURN + inet6/filter/limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-709 -j RETURN + inet/filter/limit-709 -j DROP + inet6/filter/limit-709 -j DROP + +Filter 711 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-710 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-710 + inet/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j logaccept-12 + inet6/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j logaccept-12 + inet/filter/logaccept-12 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-12 -m limit --limit 1/second -j LOG + inet/filter/logaccept-12 -j ACCEPT + inet6/filter/logaccept-12 -j ACCEPT + inet/filter/limit-710 -j DROP + inet6/filter/limit-710 -j DROP + +Filter 712 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-711 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-711 + inet/filter/limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-711 -j ACCEPT + inet6/filter/limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-711 -j ACCEPT + inet/filter/limit-711 -j DROP + inet6/filter/limit-711 -j DROP + +Filter 713 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-712 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-712 + inet/filter/limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-712 -j ACCEPT + inet6/filter/limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-712 -j ACCEPT + inet/filter/limit-712 -j DROP + inet6/filter/limit-712 -j DROP + +Filter 714 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-713 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-713 + inet/filter/limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-713 -j RETURN + inet6/filter/limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-713 -j RETURN + inet/filter/limit-713 -j DROP + inet6/filter/limit-713 -j DROP + +Filter 715 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-714 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-714 + inet/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j logaccept-13 + inet6/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j logaccept-13 + inet/filter/logaccept-13 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-13 -m limit --limit 1/second -j LOG + inet/filter/logaccept-13 -j ACCEPT + inet6/filter/logaccept-13 -j ACCEPT + inet/filter/limit-714 -j DROP + inet6/filter/limit-714 -j DROP + +Filter 716 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-715 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-715 + inet/filter/limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-715 -j ACCEPT + inet6/filter/limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-715 -j ACCEPT + inet/filter/limit-715 -j DROP + inet6/filter/limit-715 -j DROP + +Filter 717 {"flow-limit":1} +(filter-limit) + inet/filter/FORWARD -j limit-716 + inet6/filter/FORWARD -j limit-716 + inet/filter/INPUT -j limit-716 + inet6/filter/INPUT -j limit-716 + inet/filter/OUTPUT -j limit-716 + inet6/filter/OUTPUT -j limit-716 + inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-228 + inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-228 + inet/filter/logdrop-228 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-228 -m limit --limit 1/second -j LOG + inet/filter/logdrop-228 -j DROP + inet6/filter/logdrop-228 -j DROP + inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 718 {"action":"pass","flow-limit":1} +(filter-limit) + inet/filter/FORWARD -j limit-717 + inet6/filter/FORWARD -j limit-717 + inet/filter/INPUT -j limit-717 + inet6/filter/INPUT -j limit-717 + inet/filter/OUTPUT -j limit-717 + inet6/filter/OUTPUT -j limit-717 + inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 + inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 + inet/filter/logdrop-229 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-229 -m limit --limit 1/second -j LOG + inet/filter/logdrop-229 -j DROP + inet6/filter/logdrop-229 -j DROP + inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 719 {"flow-limit":1,"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-718 + inet6/filter/FORWARD -j limit-718 + inet/filter/INPUT -j limit-718 + inet6/filter/INPUT -j limit-718 + inet/filter/OUTPUT -j limit-718 + inet6/filter/OUTPUT -j limit-718 + inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 + inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 + inet/filter/logdrop-230 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-230 -m limit --limit 1/second -j LOG + inet/filter/logdrop-230 -j DROP + inet6/filter/logdrop-230 -j DROP + inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-0 + inet6/filter/FORWARD -j logaccept-final-0 + inet/filter/INPUT -j logaccept-final-0 + inet6/filter/INPUT -j logaccept-final-0 + inet/filter/OUTPUT -j logaccept-final-0 + inet6/filter/OUTPUT -j logaccept-final-0 + inet/filter/logaccept-final-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-0 -j ACCEPT + inet6/filter/logaccept-final-0 -j ACCEPT + +Filter 720 {"action":"pass","flow-limit":1,"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-719 + inet6/filter/FORWARD -j limit-719 + inet/filter/INPUT -j limit-719 + inet6/filter/INPUT -j limit-719 + inet/filter/OUTPUT -j limit-719 + inet6/filter/OUTPUT -j limit-719 + inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 + inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 + inet/filter/logdrop-231 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-231 -m limit --limit 1/second -j LOG + inet/filter/logdrop-231 -j DROP + inet6/filter/logdrop-231 -j DROP + inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 721 {"flow-limit":1,"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-720 + inet6/filter/FORWARD -j limit-720 + inet/filter/INPUT -j limit-720 + inet6/filter/INPUT -j limit-720 + inet/filter/OUTPUT -j limit-720 + inet6/filter/OUTPUT -j limit-720 + inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 + inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 + inet/filter/logdrop-232 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-232 -m limit --limit 1/second -j LOG + inet/filter/logdrop-232 -j DROP + inet6/filter/logdrop-232 -j DROP + inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 722 {"action":"pass","flow-limit":1,"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-721 + inet6/filter/FORWARD -j limit-721 + inet/filter/INPUT -j limit-721 + inet6/filter/INPUT -j limit-721 + inet/filter/OUTPUT -j limit-721 + inet6/filter/OUTPUT -j limit-721 + inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 + inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 + inet/filter/logdrop-233 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-233 -m limit --limit 1/second -j LOG + inet/filter/logdrop-233 -j DROP + inet6/filter/logdrop-233 -j DROP + inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 723 {"flow-limit":{}} +(filter-limit) + inet/filter/FORWARD -j limit-722 + inet6/filter/FORWARD -j limit-722 + inet/filter/INPUT -j limit-722 + inet6/filter/INPUT -j limit-722 + inet/filter/OUTPUT -j limit-722 + inet6/filter/OUTPUT -j limit-722 + inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 + inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 + inet/filter/logdrop-234 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-234 -m limit --limit 1/second -j LOG + inet/filter/logdrop-234 -j DROP + inet6/filter/logdrop-234 -j DROP + inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 724 {"action":"pass","flow-limit":{}} +(filter-limit) + inet/filter/FORWARD -j limit-723 + inet6/filter/FORWARD -j limit-723 + inet/filter/INPUT -j limit-723 + inet6/filter/INPUT -j limit-723 + inet/filter/OUTPUT -j limit-723 + inet6/filter/OUTPUT -j limit-723 + inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 + inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 + inet/filter/logdrop-235 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-235 -m limit --limit 1/second -j LOG + inet/filter/logdrop-235 -j DROP + inet6/filter/logdrop-235 -j DROP + inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 725 {"flow-limit":{},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-724 + inet6/filter/FORWARD -j limit-724 + inet/filter/INPUT -j limit-724 + inet6/filter/INPUT -j limit-724 + inet/filter/OUTPUT -j limit-724 + inet6/filter/OUTPUT -j limit-724 + inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 + inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 + inet/filter/logdrop-236 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-236 -m limit --limit 1/second -j LOG + inet/filter/logdrop-236 -j DROP + inet6/filter/logdrop-236 -j DROP + inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-1 + inet6/filter/FORWARD -j logaccept-final-1 + inet/filter/INPUT -j logaccept-final-1 + inet6/filter/INPUT -j logaccept-final-1 + inet/filter/OUTPUT -j logaccept-final-1 + inet6/filter/OUTPUT -j logaccept-final-1 + inet/filter/logaccept-final-1 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-1 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-1 -j ACCEPT + inet6/filter/logaccept-final-1 -j ACCEPT + +Filter 726 {"action":"pass","flow-limit":{},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-725 + inet6/filter/FORWARD -j limit-725 + inet/filter/INPUT -j limit-725 + inet6/filter/INPUT -j limit-725 + inet/filter/OUTPUT -j limit-725 + inet6/filter/OUTPUT -j limit-725 + inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 + inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 + inet/filter/logdrop-237 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-237 -m limit --limit 1/second -j LOG + inet/filter/logdrop-237 -j DROP + inet6/filter/logdrop-237 -j DROP + inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 727 {"flow-limit":{},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-726 + inet6/filter/FORWARD -j limit-726 + inet/filter/INPUT -j limit-726 + inet6/filter/INPUT -j limit-726 + inet/filter/OUTPUT -j limit-726 + inet6/filter/OUTPUT -j limit-726 + inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 + inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 + inet/filter/logdrop-238 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-238 -m limit --limit 1/second -j LOG + inet/filter/logdrop-238 -j DROP + inet6/filter/logdrop-238 -j DROP + inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 728 {"action":"pass","flow-limit":{},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-727 + inet6/filter/FORWARD -j limit-727 + inet/filter/INPUT -j limit-727 + inet6/filter/INPUT -j limit-727 + inet/filter/OUTPUT -j limit-727 + inet6/filter/OUTPUT -j limit-727 + inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 + inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 + inet/filter/logdrop-239 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-239 -m limit --limit 1/second -j LOG + inet/filter/logdrop-239 -j DROP + inet6/filter/logdrop-239 -j DROP + inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 729 {"flow-limit":{"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-728 + inet6/filter/FORWARD -j limit-728 + inet/filter/INPUT -j limit-728 + inet6/filter/INPUT -j limit-728 + inet/filter/OUTPUT -j limit-728 + inet6/filter/OUTPUT -j limit-728 + inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 + inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 + inet/filter/logdrop-240 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-240 -m limit --limit 1/second -j LOG + inet/filter/logdrop-240 -j DROP + inet6/filter/logdrop-240 -j DROP + inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 730 {"action":"pass","flow-limit":{"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-729 + inet6/filter/FORWARD -j limit-729 + inet/filter/INPUT -j limit-729 + inet6/filter/INPUT -j limit-729 + inet/filter/OUTPUT -j limit-729 + inet6/filter/OUTPUT -j limit-729 + inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 + inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 + inet/filter/logdrop-241 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-241 -m limit --limit 1/second -j LOG + inet/filter/logdrop-241 -j DROP + inet6/filter/logdrop-241 -j DROP + inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 731 {"flow-limit":{"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-730 + inet6/filter/FORWARD -j limit-730 + inet/filter/INPUT -j limit-730 + inet6/filter/INPUT -j limit-730 + inet/filter/OUTPUT -j limit-730 + inet6/filter/OUTPUT -j limit-730 + inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 + inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 + inet/filter/logdrop-242 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-242 -m limit --limit 1/second -j LOG + inet/filter/logdrop-242 -j DROP + inet6/filter/logdrop-242 -j DROP + inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-2 + inet6/filter/FORWARD -j logaccept-final-2 + inet/filter/INPUT -j logaccept-final-2 + inet6/filter/INPUT -j logaccept-final-2 + inet/filter/OUTPUT -j logaccept-final-2 + inet6/filter/OUTPUT -j logaccept-final-2 + inet/filter/logaccept-final-2 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-2 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-2 -j ACCEPT + inet6/filter/logaccept-final-2 -j ACCEPT + +Filter 732 {"action":"pass","flow-limit":{"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-731 + inet6/filter/FORWARD -j limit-731 + inet/filter/INPUT -j limit-731 + inet6/filter/INPUT -j limit-731 + inet/filter/OUTPUT -j limit-731 + inet6/filter/OUTPUT -j limit-731 + inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 + inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 + inet/filter/logdrop-243 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-243 -m limit --limit 1/second -j LOG + inet/filter/logdrop-243 -j DROP + inet6/filter/logdrop-243 -j DROP + inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 733 {"flow-limit":{"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-732 + inet6/filter/FORWARD -j limit-732 + inet/filter/INPUT -j limit-732 + inet6/filter/INPUT -j limit-732 + inet/filter/OUTPUT -j limit-732 + inet6/filter/OUTPUT -j limit-732 + inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 + inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 + inet/filter/logdrop-244 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-244 -m limit --limit 1/second -j LOG + inet/filter/logdrop-244 -j DROP + inet6/filter/logdrop-244 -j DROP + inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 734 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-733 + inet6/filter/FORWARD -j limit-733 + inet/filter/INPUT -j limit-733 + inet6/filter/INPUT -j limit-733 + inet/filter/OUTPUT -j limit-733 + inet6/filter/OUTPUT -j limit-733 + inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 + inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 + inet/filter/logdrop-245 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-245 -m limit --limit 1/second -j LOG + inet/filter/logdrop-245 -j DROP + inet6/filter/logdrop-245 -j DROP + inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 735 {"flow-limit":{"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-734 + inet6/filter/FORWARD -j limit-734 + inet/filter/INPUT -j limit-734 + inet6/filter/INPUT -j limit-734 + inet/filter/OUTPUT -j limit-734 + inet6/filter/OUTPUT -j limit-734 + inet/filter/limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-246 + inet6/filter/limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-246 + inet/filter/logdrop-246 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-246 -m limit --limit 1/second -j LOG + inet/filter/logdrop-246 -j DROP + inet6/filter/logdrop-246 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 736 {"action":"pass","flow-limit":{"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-735 + inet6/filter/FORWARD -j limit-735 + inet/filter/INPUT -j limit-735 + inet6/filter/INPUT -j limit-735 + inet/filter/OUTPUT -j limit-735 + inet6/filter/OUTPUT -j limit-735 + inet/filter/limit-735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 + inet6/filter/limit-735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 + inet/filter/logdrop-247 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-247 -m limit --limit 1/second -j LOG + inet/filter/logdrop-247 -j DROP + inet6/filter/logdrop-247 -j DROP + +Filter 737 {"flow-limit":{"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-736 + inet6/filter/FORWARD -j limit-736 + inet/filter/INPUT -j limit-736 + inet6/filter/INPUT -j limit-736 + inet/filter/OUTPUT -j limit-736 + inet6/filter/OUTPUT -j limit-736 + inet/filter/limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 + inet6/filter/limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 + inet/filter/logdrop-248 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-248 -m limit --limit 1/second -j LOG + inet/filter/logdrop-248 -j DROP + inet6/filter/logdrop-248 -j DROP + inet/filter/FORWARD -j logaccept-final-3 + inet6/filter/FORWARD -j logaccept-final-3 + inet/filter/INPUT -j logaccept-final-3 + inet6/filter/INPUT -j logaccept-final-3 + inet/filter/OUTPUT -j logaccept-final-3 + inet6/filter/OUTPUT -j logaccept-final-3 + inet/filter/logaccept-final-3 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-3 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-3 -j ACCEPT + inet6/filter/logaccept-final-3 -j ACCEPT + +Filter 738 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-737 + inet6/filter/FORWARD -j limit-737 + inet/filter/INPUT -j limit-737 + inet6/filter/INPUT -j limit-737 + inet/filter/OUTPUT -j limit-737 + inet6/filter/OUTPUT -j limit-737 + inet/filter/limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 + inet6/filter/limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 + inet/filter/logdrop-249 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-249 -m limit --limit 1/second -j LOG + inet/filter/logdrop-249 -j DROP + inet6/filter/logdrop-249 -j DROP + inet/filter/limit-737 -m limit --limit 1/second -j LOG + inet6/filter/limit-737 -m limit --limit 1/second -j LOG + +Filter 739 {"flow-limit":{"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-738 + inet6/filter/FORWARD -j limit-738 + inet/filter/INPUT -j limit-738 + inet6/filter/INPUT -j limit-738 + inet/filter/OUTPUT -j limit-738 + inet6/filter/OUTPUT -j limit-738 + inet/filter/limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 + inet6/filter/limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 + inet/filter/logdrop-250 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-250 -m limit --limit 1/second -j LOG + inet/filter/logdrop-250 -j DROP + inet6/filter/logdrop-250 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 740 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-739 + inet6/filter/FORWARD -j limit-739 + inet/filter/INPUT -j limit-739 + inet6/filter/INPUT -j limit-739 + inet/filter/OUTPUT -j limit-739 + inet6/filter/OUTPUT -j limit-739 + inet/filter/limit-739 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 + inet6/filter/limit-739 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 + inet/filter/logdrop-251 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-251 -m limit --limit 1/second -j LOG + inet/filter/logdrop-251 -j DROP + inet6/filter/logdrop-251 -j DROP + +Filter 741 {"flow-limit":{"addr":"dest","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-740 + inet6/filter/FORWARD -j limit-740 + inet/filter/INPUT -j limit-740 + inet6/filter/INPUT -j limit-740 + inet/filter/OUTPUT -j limit-740 + inet6/filter/OUTPUT -j limit-740 + inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-252 + inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-252 + inet/filter/logdrop-252 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-252 -m limit --limit 1/second -j LOG + inet/filter/logdrop-252 -j DROP + inet6/filter/logdrop-252 -j DROP + inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 742 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-741 + inet6/filter/FORWARD -j limit-741 + inet/filter/INPUT -j limit-741 + inet6/filter/INPUT -j limit-741 + inet/filter/OUTPUT -j limit-741 + inet6/filter/OUTPUT -j limit-741 + inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 + inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 + inet/filter/logdrop-253 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-253 -m limit --limit 1/second -j LOG + inet/filter/logdrop-253 -j DROP + inet6/filter/logdrop-253 -j DROP + inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 743 {"flow-limit":{"addr":"dest","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-742 + inet6/filter/FORWARD -j limit-742 + inet/filter/INPUT -j limit-742 + inet6/filter/INPUT -j limit-742 + inet/filter/OUTPUT -j limit-742 + inet6/filter/OUTPUT -j limit-742 + inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 + inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 + inet/filter/logdrop-254 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-254 -m limit --limit 1/second -j LOG + inet/filter/logdrop-254 -j DROP + inet6/filter/logdrop-254 -j DROP + inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-4 + inet6/filter/FORWARD -j logaccept-final-4 + inet/filter/INPUT -j logaccept-final-4 + inet6/filter/INPUT -j logaccept-final-4 + inet/filter/OUTPUT -j logaccept-final-4 + inet6/filter/OUTPUT -j logaccept-final-4 + inet/filter/logaccept-final-4 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-4 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-4 -j ACCEPT + inet6/filter/logaccept-final-4 -j ACCEPT + +Filter 744 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-743 + inet6/filter/FORWARD -j limit-743 + inet/filter/INPUT -j limit-743 + inet6/filter/INPUT -j limit-743 + inet/filter/OUTPUT -j limit-743 + inet6/filter/OUTPUT -j limit-743 + inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 + inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 + inet/filter/logdrop-255 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-255 -m limit --limit 1/second -j LOG + inet/filter/logdrop-255 -j DROP + inet6/filter/logdrop-255 -j DROP + inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 745 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-744 + inet6/filter/FORWARD -j limit-744 + inet/filter/INPUT -j limit-744 + inet6/filter/INPUT -j limit-744 + inet/filter/OUTPUT -j limit-744 + inet6/filter/OUTPUT -j limit-744 + inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 + inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 + inet/filter/logdrop-256 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-256 -m limit --limit 1/second -j LOG + inet/filter/logdrop-256 -j DROP + inet6/filter/logdrop-256 -j DROP + inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 746 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-745 + inet6/filter/FORWARD -j limit-745 + inet/filter/INPUT -j limit-745 + inet6/filter/INPUT -j limit-745 + inet/filter/OUTPUT -j limit-745 + inet6/filter/OUTPUT -j limit-745 + inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 + inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 + inet/filter/logdrop-257 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-257 -m limit --limit 1/second -j LOG + inet/filter/logdrop-257 -j DROP + inet6/filter/logdrop-257 -j DROP + inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 747 {"flow-limit":{"addr":"dest","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-746 + inet6/filter/FORWARD -j limit-746 + inet/filter/INPUT -j limit-746 + inet6/filter/INPUT -j limit-746 + inet/filter/OUTPUT -j limit-746 + inet6/filter/OUTPUT -j limit-746 + inet/filter/limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-258 + inet6/filter/limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-258 + inet/filter/logdrop-258 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-258 -m limit --limit 1/second -j LOG + inet/filter/logdrop-258 -j DROP + inet6/filter/logdrop-258 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 748 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-747 + inet6/filter/FORWARD -j limit-747 + inet/filter/INPUT -j limit-747 + inet6/filter/INPUT -j limit-747 + inet/filter/OUTPUT -j limit-747 + inet6/filter/OUTPUT -j limit-747 + inet/filter/limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 + inet6/filter/limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 + inet/filter/logdrop-259 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-259 -m limit --limit 1/second -j LOG + inet/filter/logdrop-259 -j DROP + inet6/filter/logdrop-259 -j DROP + +Filter 749 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-748 + inet6/filter/FORWARD -j limit-748 + inet/filter/INPUT -j limit-748 + inet6/filter/INPUT -j limit-748 + inet/filter/OUTPUT -j limit-748 + inet6/filter/OUTPUT -j limit-748 + inet/filter/limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 + inet6/filter/limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 + inet/filter/logdrop-260 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-260 -m limit --limit 1/second -j LOG + inet/filter/logdrop-260 -j DROP + inet6/filter/logdrop-260 -j DROP + inet/filter/FORWARD -j logaccept-final-5 + inet6/filter/FORWARD -j logaccept-final-5 + inet/filter/INPUT -j logaccept-final-5 + inet6/filter/INPUT -j logaccept-final-5 + inet/filter/OUTPUT -j logaccept-final-5 + inet6/filter/OUTPUT -j logaccept-final-5 + inet/filter/logaccept-final-5 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-5 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-5 -j ACCEPT + inet6/filter/logaccept-final-5 -j ACCEPT + +Filter 750 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-749 + inet6/filter/FORWARD -j limit-749 + inet/filter/INPUT -j limit-749 + inet6/filter/INPUT -j limit-749 + inet/filter/OUTPUT -j limit-749 + inet6/filter/OUTPUT -j limit-749 + inet/filter/limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 + inet6/filter/limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 + inet/filter/logdrop-261 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-261 -m limit --limit 1/second -j LOG + inet/filter/logdrop-261 -j DROP + inet6/filter/logdrop-261 -j DROP + inet/filter/limit-749 -m limit --limit 1/second -j LOG + inet6/filter/limit-749 -m limit --limit 1/second -j LOG + +Filter 751 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-750 + inet6/filter/FORWARD -j limit-750 + inet/filter/INPUT -j limit-750 + inet6/filter/INPUT -j limit-750 + inet/filter/OUTPUT -j limit-750 + inet6/filter/OUTPUT -j limit-750 + inet/filter/limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 + inet6/filter/limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 + inet/filter/logdrop-262 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-262 -m limit --limit 1/second -j LOG + inet/filter/logdrop-262 -j DROP + inet6/filter/logdrop-262 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 752 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-751 + inet6/filter/FORWARD -j limit-751 + inet/filter/INPUT -j limit-751 + inet6/filter/INPUT -j limit-751 + inet/filter/OUTPUT -j limit-751 + inet6/filter/OUTPUT -j limit-751 + inet/filter/limit-751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 + inet6/filter/limit-751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 + inet/filter/logdrop-263 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-263 -m limit --limit 1/second -j LOG + inet/filter/logdrop-263 -j DROP + inet6/filter/logdrop-263 -j DROP + +Filter 753 {"flow-limit":{"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-752 + inet6/filter/FORWARD -j limit-752 + inet/filter/INPUT -j limit-752 + inet6/filter/INPUT -j limit-752 + inet/filter/OUTPUT -j limit-752 + inet6/filter/OUTPUT -j limit-752 + inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-264 + inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-264 + inet/filter/logdrop-264 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-264 -m limit --limit 1/second -j LOG + inet/filter/logdrop-264 -j DROP + inet6/filter/logdrop-264 -j DROP + inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 754 {"action":"pass","flow-limit":{"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-753 + inet6/filter/FORWARD -j limit-753 + inet/filter/INPUT -j limit-753 + inet6/filter/INPUT -j limit-753 + inet/filter/OUTPUT -j limit-753 + inet6/filter/OUTPUT -j limit-753 + inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 + inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 + inet/filter/logdrop-265 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-265 -m limit --limit 1/second -j LOG + inet/filter/logdrop-265 -j DROP + inet6/filter/logdrop-265 -j DROP + inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 755 {"flow-limit":{"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-754 + inet6/filter/FORWARD -j limit-754 + inet/filter/INPUT -j limit-754 + inet6/filter/INPUT -j limit-754 + inet/filter/OUTPUT -j limit-754 + inet6/filter/OUTPUT -j limit-754 + inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 + inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 + inet/filter/logdrop-266 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-266 -m limit --limit 1/second -j LOG + inet/filter/logdrop-266 -j DROP + inet6/filter/logdrop-266 -j DROP + inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-6 + inet6/filter/FORWARD -j logaccept-final-6 + inet/filter/INPUT -j logaccept-final-6 + inet6/filter/INPUT -j logaccept-final-6 + inet/filter/OUTPUT -j logaccept-final-6 + inet6/filter/OUTPUT -j logaccept-final-6 + inet/filter/logaccept-final-6 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-6 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-6 -j ACCEPT + inet6/filter/logaccept-final-6 -j ACCEPT + +Filter 756 {"action":"pass","flow-limit":{"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-755 + inet6/filter/FORWARD -j limit-755 + inet/filter/INPUT -j limit-755 + inet6/filter/INPUT -j limit-755 + inet/filter/OUTPUT -j limit-755 + inet6/filter/OUTPUT -j limit-755 + inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 + inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 + inet/filter/logdrop-267 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-267 -m limit --limit 1/second -j LOG + inet/filter/logdrop-267 -j DROP + inet6/filter/logdrop-267 -j DROP + inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 757 {"flow-limit":{"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-756 + inet6/filter/FORWARD -j limit-756 + inet/filter/INPUT -j limit-756 + inet6/filter/INPUT -j limit-756 + inet/filter/OUTPUT -j limit-756 + inet6/filter/OUTPUT -j limit-756 + inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 + inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 + inet/filter/logdrop-268 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-268 -m limit --limit 1/second -j LOG + inet/filter/logdrop-268 -j DROP + inet6/filter/logdrop-268 -j DROP + inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 758 {"action":"pass","flow-limit":{"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-757 + inet6/filter/FORWARD -j limit-757 + inet/filter/INPUT -j limit-757 + inet6/filter/INPUT -j limit-757 + inet/filter/OUTPUT -j limit-757 + inet6/filter/OUTPUT -j limit-757 + inet/filter/limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 + inet6/filter/limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 + inet/filter/logdrop-269 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-269 -m limit --limit 1/second -j LOG + inet/filter/logdrop-269 -j DROP + inet6/filter/logdrop-269 -j DROP + inet/filter/limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-757 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 759 {"flow-limit":{"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-758 + inet6/filter/FORWARD -j limit-758 + inet/filter/INPUT -j limit-758 + inet6/filter/INPUT -j limit-758 + inet/filter/OUTPUT -j limit-758 + inet6/filter/OUTPUT -j limit-758 + inet/filter/limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-270 + inet6/filter/limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-270 + inet/filter/logdrop-270 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-270 -m limit --limit 1/second -j LOG + inet/filter/logdrop-270 -j DROP + inet6/filter/logdrop-270 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 760 {"action":"pass","flow-limit":{"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-759 + inet6/filter/FORWARD -j limit-759 + inet/filter/INPUT -j limit-759 + inet6/filter/INPUT -j limit-759 + inet/filter/OUTPUT -j limit-759 + inet6/filter/OUTPUT -j limit-759 + inet/filter/limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 + inet6/filter/limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 + inet/filter/logdrop-271 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-271 -m limit --limit 1/second -j LOG + inet/filter/logdrop-271 -j DROP + inet6/filter/logdrop-271 -j DROP + +Filter 761 {"flow-limit":{"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-760 + inet6/filter/FORWARD -j limit-760 + inet/filter/INPUT -j limit-760 + inet6/filter/INPUT -j limit-760 + inet/filter/OUTPUT -j limit-760 + inet6/filter/OUTPUT -j limit-760 + inet/filter/limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 + inet6/filter/limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 + inet/filter/logdrop-272 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-272 -m limit --limit 1/second -j LOG + inet/filter/logdrop-272 -j DROP + inet6/filter/logdrop-272 -j DROP + inet/filter/FORWARD -j logaccept-final-7 + inet6/filter/FORWARD -j logaccept-final-7 + inet/filter/INPUT -j logaccept-final-7 + inet6/filter/INPUT -j logaccept-final-7 + inet/filter/OUTPUT -j logaccept-final-7 + inet6/filter/OUTPUT -j logaccept-final-7 + inet/filter/logaccept-final-7 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-7 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-7 -j ACCEPT + inet6/filter/logaccept-final-7 -j ACCEPT + +Filter 762 {"action":"pass","flow-limit":{"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-761 + inet6/filter/FORWARD -j limit-761 + inet/filter/INPUT -j limit-761 + inet6/filter/INPUT -j limit-761 + inet/filter/OUTPUT -j limit-761 + inet6/filter/OUTPUT -j limit-761 + inet/filter/limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 + inet6/filter/limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 + inet/filter/logdrop-273 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-273 -m limit --limit 1/second -j LOG + inet/filter/logdrop-273 -j DROP + inet6/filter/logdrop-273 -j DROP + inet/filter/limit-761 -m limit --limit 1/second -j LOG + inet6/filter/limit-761 -m limit --limit 1/second -j LOG + +Filter 763 {"flow-limit":{"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-762 + inet6/filter/FORWARD -j limit-762 + inet/filter/INPUT -j limit-762 + inet6/filter/INPUT -j limit-762 + inet/filter/OUTPUT -j limit-762 + inet6/filter/OUTPUT -j limit-762 + inet/filter/limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 + inet6/filter/limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 + inet/filter/logdrop-274 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-274 -m limit --limit 1/second -j LOG + inet/filter/logdrop-274 -j DROP + inet6/filter/logdrop-274 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 764 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-763 + inet6/filter/FORWARD -j limit-763 + inet/filter/INPUT -j limit-763 + inet6/filter/INPUT -j limit-763 + inet/filter/OUTPUT -j limit-763 + inet6/filter/OUTPUT -j limit-763 + inet/filter/limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 + inet6/filter/limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 + inet/filter/logdrop-275 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-275 -m limit --limit 1/second -j LOG + inet/filter/logdrop-275 -j DROP + inet6/filter/logdrop-275 -j DROP + +Filter 765 {"flow-limit":{"addr":"dest","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-764 + inet6/filter/FORWARD -j limit-764 + inet/filter/INPUT -j limit-764 + inet6/filter/INPUT -j limit-764 + inet/filter/OUTPUT -j limit-764 + inet6/filter/OUTPUT -j limit-764 + inet/filter/limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-276 + inet6/filter/limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-276 + inet/filter/logdrop-276 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-276 -m limit --limit 1/second -j LOG + inet/filter/logdrop-276 -j DROP + inet6/filter/logdrop-276 -j DROP + inet/filter/limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-764 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 766 {"action":"pass","flow-limit":{"addr":"dest","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-765 + inet6/filter/FORWARD -j limit-765 + inet/filter/INPUT -j limit-765 + inet6/filter/INPUT -j limit-765 + inet/filter/OUTPUT -j limit-765 + inet6/filter/OUTPUT -j limit-765 + inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 + inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 + inet/filter/logdrop-277 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-277 -m limit --limit 1/second -j LOG + inet/filter/logdrop-277 -j DROP + inet6/filter/logdrop-277 -j DROP + inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 767 {"flow-limit":{"addr":"dest","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-766 + inet6/filter/FORWARD -j limit-766 + inet/filter/INPUT -j limit-766 + inet6/filter/INPUT -j limit-766 + inet/filter/OUTPUT -j limit-766 + inet6/filter/OUTPUT -j limit-766 + inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 + inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 + inet/filter/logdrop-278 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-278 -m limit --limit 1/second -j LOG + inet/filter/logdrop-278 -j DROP + inet6/filter/logdrop-278 -j DROP + inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-8 + inet6/filter/FORWARD -j logaccept-final-8 + inet/filter/INPUT -j logaccept-final-8 + inet6/filter/INPUT -j logaccept-final-8 + inet/filter/OUTPUT -j logaccept-final-8 + inet6/filter/OUTPUT -j logaccept-final-8 + inet/filter/logaccept-final-8 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-8 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-8 -j ACCEPT + inet6/filter/logaccept-final-8 -j ACCEPT + +Filter 768 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-767 + inet6/filter/FORWARD -j limit-767 + inet/filter/INPUT -j limit-767 + inet6/filter/INPUT -j limit-767 + inet/filter/OUTPUT -j limit-767 + inet6/filter/OUTPUT -j limit-767 + inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 + inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 + inet/filter/logdrop-279 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-279 -m limit --limit 1/second -j LOG + inet/filter/logdrop-279 -j DROP + inet6/filter/logdrop-279 -j DROP + inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 769 {"flow-limit":{"addr":"dest","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-768 + inet6/filter/FORWARD -j limit-768 + inet/filter/INPUT -j limit-768 + inet6/filter/INPUT -j limit-768 + inet/filter/OUTPUT -j limit-768 + inet6/filter/OUTPUT -j limit-768 + inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 + inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 + inet/filter/logdrop-280 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-280 -m limit --limit 1/second -j LOG + inet/filter/logdrop-280 -j DROP + inet6/filter/logdrop-280 -j DROP + inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 770 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-769 + inet6/filter/FORWARD -j limit-769 + inet/filter/INPUT -j limit-769 + inet6/filter/INPUT -j limit-769 + inet/filter/OUTPUT -j limit-769 + inet6/filter/OUTPUT -j limit-769 + inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 + inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 + inet/filter/logdrop-281 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-281 -m limit --limit 1/second -j LOG + inet/filter/logdrop-281 -j DROP + inet6/filter/logdrop-281 -j DROP + inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 771 {"flow-limit":{"addr":"dest","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-770 + inet6/filter/FORWARD -j limit-770 + inet/filter/INPUT -j limit-770 + inet6/filter/INPUT -j limit-770 + inet/filter/OUTPUT -j limit-770 + inet6/filter/OUTPUT -j limit-770 + inet/filter/limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-282 + inet6/filter/limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-282 + inet/filter/logdrop-282 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-282 -m limit --limit 1/second -j LOG + inet/filter/logdrop-282 -j DROP + inet6/filter/logdrop-282 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 772 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-771 + inet6/filter/FORWARD -j limit-771 + inet/filter/INPUT -j limit-771 + inet6/filter/INPUT -j limit-771 + inet/filter/OUTPUT -j limit-771 + inet6/filter/OUTPUT -j limit-771 + inet/filter/limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 + inet6/filter/limit-771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 + inet/filter/logdrop-283 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-283 -m limit --limit 1/second -j LOG + inet/filter/logdrop-283 -j DROP + inet6/filter/logdrop-283 -j DROP + +Filter 773 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-772 + inet6/filter/FORWARD -j limit-772 + inet/filter/INPUT -j limit-772 + inet6/filter/INPUT -j limit-772 + inet/filter/OUTPUT -j limit-772 + inet6/filter/OUTPUT -j limit-772 + inet/filter/limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 + inet6/filter/limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 + inet/filter/logdrop-284 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-284 -m limit --limit 1/second -j LOG + inet/filter/logdrop-284 -j DROP + inet6/filter/logdrop-284 -j DROP + inet/filter/FORWARD -j logaccept-final-9 + inet6/filter/FORWARD -j logaccept-final-9 + inet/filter/INPUT -j logaccept-final-9 + inet6/filter/INPUT -j logaccept-final-9 + inet/filter/OUTPUT -j logaccept-final-9 + inet6/filter/OUTPUT -j logaccept-final-9 + inet/filter/logaccept-final-9 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-9 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-9 -j ACCEPT + inet6/filter/logaccept-final-9 -j ACCEPT + +Filter 774 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-773 + inet6/filter/FORWARD -j limit-773 + inet/filter/INPUT -j limit-773 + inet6/filter/INPUT -j limit-773 + inet/filter/OUTPUT -j limit-773 + inet6/filter/OUTPUT -j limit-773 + inet/filter/limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 + inet6/filter/limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 + inet/filter/logdrop-285 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-285 -m limit --limit 1/second -j LOG + inet/filter/logdrop-285 -j DROP + inet6/filter/logdrop-285 -j DROP + inet/filter/limit-773 -m limit --limit 1/second -j LOG + inet6/filter/limit-773 -m limit --limit 1/second -j LOG + +Filter 775 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-774 + inet6/filter/FORWARD -j limit-774 + inet/filter/INPUT -j limit-774 + inet6/filter/INPUT -j limit-774 + inet/filter/OUTPUT -j limit-774 + inet6/filter/OUTPUT -j limit-774 + inet/filter/limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 + inet6/filter/limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 + inet/filter/logdrop-286 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-286 -m limit --limit 1/second -j LOG + inet/filter/logdrop-286 -j DROP + inet6/filter/logdrop-286 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 776 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-775 + inet6/filter/FORWARD -j limit-775 + inet/filter/INPUT -j limit-775 + inet6/filter/INPUT -j limit-775 + inet/filter/OUTPUT -j limit-775 + inet6/filter/OUTPUT -j limit-775 + inet/filter/limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 + inet6/filter/limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 + inet/filter/logdrop-287 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-287 -m limit --limit 1/second -j LOG + inet/filter/logdrop-287 -j DROP + inet6/filter/logdrop-287 -j DROP + +Filter 777 {"flow-limit":{"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-776 + inet6/filter/FORWARD -j limit-776 + inet/filter/INPUT -j limit-776 + inet6/filter/INPUT -j limit-776 + inet/filter/OUTPUT -j limit-776 + inet6/filter/OUTPUT -j limit-776 + inet/filter/limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 778 {"action":"pass","flow-limit":{"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-777 + inet6/filter/FORWARD -j limit-777 + inet/filter/INPUT -j limit-777 + inet6/filter/INPUT -j limit-777 + inet/filter/OUTPUT -j limit-777 + inet6/filter/OUTPUT -j limit-777 + inet/filter/limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 779 {"flow-limit":{"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-778 + inet6/filter/FORWARD -j limit-778 + inet/filter/INPUT -j limit-778 + inet6/filter/INPUT -j limit-778 + inet/filter/OUTPUT -j limit-778 + inet6/filter/OUTPUT -j limit-778 + inet/filter/limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-10 + inet6/filter/FORWARD -j logaccept-final-10 + inet/filter/INPUT -j logaccept-final-10 + inet6/filter/INPUT -j logaccept-final-10 + inet/filter/OUTPUT -j logaccept-final-10 + inet6/filter/OUTPUT -j logaccept-final-10 + inet/filter/logaccept-final-10 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-10 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-10 -j ACCEPT + inet6/filter/logaccept-final-10 -j ACCEPT + +Filter 780 {"action":"pass","flow-limit":{"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-779 + inet6/filter/FORWARD -j limit-779 + inet/filter/INPUT -j limit-779 + inet6/filter/INPUT -j limit-779 + inet/filter/OUTPUT -j limit-779 + inet6/filter/OUTPUT -j limit-779 + inet/filter/limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 781 {"flow-limit":{"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-780 + inet6/filter/FORWARD -j limit-780 + inet/filter/INPUT -j limit-780 + inet6/filter/INPUT -j limit-780 + inet/filter/OUTPUT -j limit-780 + inet6/filter/OUTPUT -j limit-780 + inet/filter/limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 782 {"action":"pass","flow-limit":{"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-781 + inet6/filter/FORWARD -j limit-781 + inet/filter/INPUT -j limit-781 + inet6/filter/INPUT -j limit-781 + inet/filter/OUTPUT -j limit-781 + inet6/filter/OUTPUT -j limit-781 + inet/filter/limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 783 {"flow-limit":{"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-782 + inet6/filter/FORWARD -j limit-782 + inet/filter/INPUT -j limit-782 + inet6/filter/INPUT -j limit-782 + inet/filter/OUTPUT -j limit-782 + inet6/filter/OUTPUT -j limit-782 + inet/filter/limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 784 {"action":"pass","flow-limit":{"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-783 + inet6/filter/FORWARD -j limit-783 + inet/filter/INPUT -j limit-783 + inet6/filter/INPUT -j limit-783 + inet/filter/OUTPUT -j limit-783 + inet6/filter/OUTPUT -j limit-783 + inet/filter/limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 785 {"flow-limit":{"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-784 + inet6/filter/FORWARD -j limit-784 + inet/filter/INPUT -j limit-784 + inet6/filter/INPUT -j limit-784 + inet/filter/OUTPUT -j limit-784 + inet6/filter/OUTPUT -j limit-784 + inet/filter/limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-11 + inet6/filter/FORWARD -j logaccept-final-11 + inet/filter/INPUT -j logaccept-final-11 + inet6/filter/INPUT -j logaccept-final-11 + inet/filter/OUTPUT -j logaccept-final-11 + inet6/filter/OUTPUT -j logaccept-final-11 + inet/filter/logaccept-final-11 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-11 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-11 -j ACCEPT + inet6/filter/logaccept-final-11 -j ACCEPT + +Filter 786 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-785 + inet6/filter/FORWARD -j limit-785 + inet/filter/INPUT -j limit-785 + inet6/filter/INPUT -j limit-785 + inet/filter/OUTPUT -j limit-785 + inet6/filter/OUTPUT -j limit-785 + inet/filter/limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 787 {"flow-limit":{"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-786 + inet6/filter/FORWARD -j limit-786 + inet/filter/INPUT -j limit-786 + inet6/filter/INPUT -j limit-786 + inet/filter/OUTPUT -j limit-786 + inet6/filter/OUTPUT -j limit-786 + inet/filter/limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 788 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-787 + inet6/filter/FORWARD -j limit-787 + inet/filter/INPUT -j limit-787 + inet6/filter/INPUT -j limit-787 + inet/filter/OUTPUT -j limit-787 + inet6/filter/OUTPUT -j limit-787 + inet/filter/limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 789 {"flow-limit":{"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-788 + inet6/filter/FORWARD -j limit-788 + inet/filter/INPUT -j limit-788 + inet6/filter/INPUT -j limit-788 + inet/filter/OUTPUT -j limit-788 + inet6/filter/OUTPUT -j limit-788 + inet/filter/limit-788 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 790 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-789 + inet6/filter/FORWARD -j limit-789 + inet/filter/INPUT -j limit-789 + inet6/filter/INPUT -j limit-789 + inet/filter/OUTPUT -j limit-789 + inet6/filter/OUTPUT -j limit-789 + inet/filter/limit-789 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 791 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-790 + inet6/filter/FORWARD -j limit-790 + inet/filter/INPUT -j limit-790 + inet6/filter/INPUT -j limit-790 + inet/filter/OUTPUT -j limit-790 + inet6/filter/OUTPUT -j limit-790 + inet/filter/limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-12 + inet6/filter/FORWARD -j logaccept-final-12 + inet/filter/INPUT -j logaccept-final-12 + inet6/filter/INPUT -j logaccept-final-12 + inet/filter/OUTPUT -j logaccept-final-12 + inet6/filter/OUTPUT -j logaccept-final-12 + inet/filter/logaccept-final-12 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-12 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-12 -j ACCEPT + inet6/filter/logaccept-final-12 -j ACCEPT + +Filter 792 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-791 + inet6/filter/FORWARD -j limit-791 + inet/filter/INPUT -j limit-791 + inet6/filter/INPUT -j limit-791 + inet/filter/OUTPUT -j limit-791 + inet6/filter/OUTPUT -j limit-791 + inet/filter/limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-791 -m limit --limit 1/second -j LOG + inet6/filter/limit-791 -m limit --limit 1/second -j LOG + +Filter 793 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-792 + inet6/filter/FORWARD -j limit-792 + inet/filter/INPUT -j limit-792 + inet6/filter/INPUT -j limit-792 + inet/filter/OUTPUT -j limit-792 + inet6/filter/OUTPUT -j limit-792 + inet/filter/limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 794 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-793 + inet6/filter/FORWARD -j limit-793 + inet/filter/INPUT -j limit-793 + inet6/filter/INPUT -j limit-793 + inet/filter/OUTPUT -j limit-793 + inet6/filter/OUTPUT -j limit-793 + inet/filter/limit-793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 795 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-794 + inet6/filter/FORWARD -j limit-794 + inet/filter/INPUT -j limit-794 + inet6/filter/INPUT -j limit-794 + inet/filter/OUTPUT -j limit-794 + inet6/filter/OUTPUT -j limit-794 + inet/filter/limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 796 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-795 + inet6/filter/FORWARD -j limit-795 + inet/filter/INPUT -j limit-795 + inet6/filter/INPUT -j limit-795 + inet/filter/OUTPUT -j limit-795 + inet6/filter/OUTPUT -j limit-795 + inet/filter/limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 797 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-796 + inet6/filter/FORWARD -j limit-796 + inet/filter/INPUT -j limit-796 + inet6/filter/INPUT -j limit-796 + inet/filter/OUTPUT -j limit-796 + inet6/filter/OUTPUT -j limit-796 + inet/filter/limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-13 + inet6/filter/FORWARD -j logaccept-final-13 + inet/filter/INPUT -j logaccept-final-13 + inet6/filter/INPUT -j logaccept-final-13 + inet/filter/OUTPUT -j logaccept-final-13 + inet6/filter/OUTPUT -j logaccept-final-13 + inet/filter/logaccept-final-13 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-13 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-13 -j ACCEPT + inet6/filter/logaccept-final-13 -j ACCEPT + +Filter 798 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-797 + inet6/filter/FORWARD -j limit-797 + inet/filter/INPUT -j limit-797 + inet6/filter/INPUT -j limit-797 + inet/filter/OUTPUT -j limit-797 + inet6/filter/OUTPUT -j limit-797 + inet/filter/limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 799 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-798 + inet6/filter/FORWARD -j limit-798 + inet/filter/INPUT -j limit-798 + inet6/filter/INPUT -j limit-798 + inet/filter/OUTPUT -j limit-798 + inet6/filter/OUTPUT -j limit-798 + inet/filter/limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 800 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-799 + inet6/filter/FORWARD -j limit-799 + inet/filter/INPUT -j limit-799 + inet6/filter/INPUT -j limit-799 + inet/filter/OUTPUT -j limit-799 + inet6/filter/OUTPUT -j limit-799 + inet/filter/limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 801 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-800 + inet6/filter/FORWARD -j limit-800 + inet/filter/INPUT -j limit-800 + inet6/filter/INPUT -j limit-800 + inet/filter/OUTPUT -j limit-800 + inet6/filter/OUTPUT -j limit-800 + inet/filter/limit-800 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 802 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-801 + inet6/filter/FORWARD -j limit-801 + inet/filter/INPUT -j limit-801 + inet6/filter/INPUT -j limit-801 + inet/filter/OUTPUT -j limit-801 + inet6/filter/OUTPUT -j limit-801 + inet/filter/limit-801 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-801 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 803 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-802 + inet6/filter/FORWARD -j limit-802 + inet/filter/INPUT -j limit-802 + inet6/filter/INPUT -j limit-802 + inet/filter/OUTPUT -j limit-802 + inet6/filter/OUTPUT -j limit-802 + inet/filter/limit-802 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-14 + inet6/filter/FORWARD -j logaccept-final-14 + inet/filter/INPUT -j logaccept-final-14 + inet6/filter/INPUT -j logaccept-final-14 + inet/filter/OUTPUT -j logaccept-final-14 + inet6/filter/OUTPUT -j logaccept-final-14 + inet/filter/logaccept-final-14 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-14 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-14 -j ACCEPT + inet6/filter/logaccept-final-14 -j ACCEPT + +Filter 804 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-803 + inet6/filter/FORWARD -j limit-803 + inet/filter/INPUT -j limit-803 + inet6/filter/INPUT -j limit-803 + inet/filter/OUTPUT -j limit-803 + inet6/filter/OUTPUT -j limit-803 + inet/filter/limit-803 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-803 -m limit --limit 1/second -j LOG + inet6/filter/limit-803 -m limit --limit 1/second -j LOG + +Filter 805 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-804 + inet6/filter/FORWARD -j limit-804 + inet/filter/INPUT -j limit-804 + inet6/filter/INPUT -j limit-804 + inet/filter/OUTPUT -j limit-804 + inet6/filter/OUTPUT -j limit-804 + inet/filter/limit-804 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 806 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-805 + inet6/filter/FORWARD -j limit-805 + inet/filter/INPUT -j limit-805 + inet6/filter/INPUT -j limit-805 + inet/filter/OUTPUT -j limit-805 + inet6/filter/OUTPUT -j limit-805 + inet/filter/limit-805 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 807 {"flow-limit":{"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-806 + inet6/filter/FORWARD -j limit-806 + inet/filter/INPUT -j limit-806 + inet6/filter/INPUT -j limit-806 + inet/filter/OUTPUT -j limit-806 + inet6/filter/OUTPUT -j limit-806 + inet/filter/limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-806 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 808 {"action":"pass","flow-limit":{"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-807 + inet6/filter/FORWARD -j limit-807 + inet/filter/INPUT -j limit-807 + inet6/filter/INPUT -j limit-807 + inet/filter/OUTPUT -j limit-807 + inet6/filter/OUTPUT -j limit-807 + inet/filter/limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-807 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 809 {"flow-limit":{"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-808 + inet6/filter/FORWARD -j limit-808 + inet/filter/INPUT -j limit-808 + inet6/filter/INPUT -j limit-808 + inet/filter/OUTPUT -j limit-808 + inet6/filter/OUTPUT -j limit-808 + inet/filter/limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-808 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-808 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-15 + inet6/filter/FORWARD -j logaccept-final-15 + inet/filter/INPUT -j logaccept-final-15 + inet6/filter/INPUT -j logaccept-final-15 + inet/filter/OUTPUT -j logaccept-final-15 + inet6/filter/OUTPUT -j logaccept-final-15 + inet/filter/logaccept-final-15 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-15 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-15 -j ACCEPT + inet6/filter/logaccept-final-15 -j ACCEPT + +Filter 810 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-809 + inet6/filter/FORWARD -j limit-809 + inet/filter/INPUT -j limit-809 + inet6/filter/INPUT -j limit-809 + inet/filter/OUTPUT -j limit-809 + inet6/filter/OUTPUT -j limit-809 + inet/filter/limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-809 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-809 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 811 {"flow-limit":{"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-810 + inet6/filter/FORWARD -j limit-810 + inet/filter/INPUT -j limit-810 + inet6/filter/INPUT -j limit-810 + inet/filter/OUTPUT -j limit-810 + inet6/filter/OUTPUT -j limit-810 + inet/filter/limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-810 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-810 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 812 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-811 + inet6/filter/FORWARD -j limit-811 + inet/filter/INPUT -j limit-811 + inet6/filter/INPUT -j limit-811 + inet/filter/OUTPUT -j limit-811 + inet6/filter/OUTPUT -j limit-811 + inet/filter/limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-811 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-811 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 813 {"flow-limit":{"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-812 + inet6/filter/FORWARD -j limit-812 + inet/filter/INPUT -j limit-812 + inet6/filter/INPUT -j limit-812 + inet/filter/OUTPUT -j limit-812 + inet6/filter/OUTPUT -j limit-812 + inet/filter/limit-812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 814 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-813 + inet6/filter/FORWARD -j limit-813 + inet/filter/INPUT -j limit-813 + inet6/filter/INPUT -j limit-813 + inet/filter/OUTPUT -j limit-813 + inet6/filter/OUTPUT -j limit-813 + inet/filter/limit-813 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-813 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 815 {"flow-limit":{"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-814 + inet6/filter/FORWARD -j limit-814 + inet/filter/INPUT -j limit-814 + inet6/filter/INPUT -j limit-814 + inet/filter/OUTPUT -j limit-814 + inet6/filter/OUTPUT -j limit-814 + inet/filter/limit-814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-16 + inet6/filter/FORWARD -j logaccept-final-16 + inet/filter/INPUT -j logaccept-final-16 + inet6/filter/INPUT -j logaccept-final-16 + inet/filter/OUTPUT -j logaccept-final-16 + inet6/filter/OUTPUT -j logaccept-final-16 + inet/filter/logaccept-final-16 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-16 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-16 -j ACCEPT + inet6/filter/logaccept-final-16 -j ACCEPT + +Filter 816 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-815 + inet6/filter/FORWARD -j limit-815 + inet/filter/INPUT -j limit-815 + inet6/filter/INPUT -j limit-815 + inet/filter/OUTPUT -j limit-815 + inet6/filter/OUTPUT -j limit-815 + inet/filter/limit-815 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-815 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-815 -m limit --limit 1/second -j LOG + inet6/filter/limit-815 -m limit --limit 1/second -j LOG + +Filter 817 {"flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-816 + inet6/filter/FORWARD -j limit-816 + inet/filter/INPUT -j limit-816 + inet6/filter/INPUT -j limit-816 + inet/filter/OUTPUT -j limit-816 + inet6/filter/OUTPUT -j limit-816 + inet/filter/limit-816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 818 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-817 + inet6/filter/FORWARD -j limit-817 + inet/filter/INPUT -j limit-817 + inet6/filter/INPUT -j limit-817 + inet/filter/OUTPUT -j limit-817 + inet6/filter/OUTPUT -j limit-817 + inet/filter/limit-817 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-817 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 819 {"flow-limit":{"addr":"dest","log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-818 + inet6/filter/FORWARD -j limit-818 + inet/filter/INPUT -j limit-818 + inet6/filter/INPUT -j limit-818 + inet/filter/OUTPUT -j limit-818 + inet6/filter/OUTPUT -j limit-818 + inet/filter/limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-818 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 820 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-819 + inet6/filter/FORWARD -j limit-819 + inet/filter/INPUT -j limit-819 + inet6/filter/INPUT -j limit-819 + inet/filter/OUTPUT -j limit-819 + inet6/filter/OUTPUT -j limit-819 + inet/filter/limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-819 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 821 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-820 + inet6/filter/FORWARD -j limit-820 + inet/filter/INPUT -j limit-820 + inet6/filter/INPUT -j limit-820 + inet/filter/OUTPUT -j limit-820 + inet6/filter/OUTPUT -j limit-820 + inet/filter/limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-820 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-17 + inet6/filter/FORWARD -j logaccept-final-17 + inet/filter/INPUT -j logaccept-final-17 + inet6/filter/INPUT -j logaccept-final-17 + inet/filter/OUTPUT -j logaccept-final-17 + inet6/filter/OUTPUT -j logaccept-final-17 + inet/filter/logaccept-final-17 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-17 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-17 -j ACCEPT + inet6/filter/logaccept-final-17 -j ACCEPT + +Filter 822 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-821 + inet6/filter/FORWARD -j limit-821 + inet/filter/INPUT -j limit-821 + inet6/filter/INPUT -j limit-821 + inet/filter/OUTPUT -j limit-821 + inet6/filter/OUTPUT -j limit-821 + inet/filter/limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 823 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-822 + inet6/filter/FORWARD -j limit-822 + inet/filter/INPUT -j limit-822 + inet6/filter/INPUT -j limit-822 + inet/filter/OUTPUT -j limit-822 + inet6/filter/OUTPUT -j limit-822 + inet/filter/limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-822 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 824 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-823 + inet6/filter/FORWARD -j limit-823 + inet/filter/INPUT -j limit-823 + inet6/filter/INPUT -j limit-823 + inet/filter/OUTPUT -j limit-823 + inet6/filter/OUTPUT -j limit-823 + inet/filter/limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-823 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 825 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-824 + inet6/filter/FORWARD -j limit-824 + inet/filter/INPUT -j limit-824 + inet6/filter/INPUT -j limit-824 + inet/filter/OUTPUT -j limit-824 + inet6/filter/OUTPUT -j limit-824 + inet/filter/limit-824 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-824 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 826 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-825 + inet6/filter/FORWARD -j limit-825 + inet/filter/INPUT -j limit-825 + inet6/filter/INPUT -j limit-825 + inet/filter/OUTPUT -j limit-825 + inet6/filter/OUTPUT -j limit-825 + inet/filter/limit-825 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-825 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 827 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-826 + inet6/filter/FORWARD -j limit-826 + inet/filter/INPUT -j limit-826 + inet6/filter/INPUT -j limit-826 + inet/filter/OUTPUT -j limit-826 + inet6/filter/OUTPUT -j limit-826 + inet/filter/limit-826 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-826 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-18 + inet6/filter/FORWARD -j logaccept-final-18 + inet/filter/INPUT -j logaccept-final-18 + inet6/filter/INPUT -j logaccept-final-18 + inet/filter/OUTPUT -j logaccept-final-18 + inet6/filter/OUTPUT -j logaccept-final-18 + inet/filter/logaccept-final-18 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-18 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-18 -j ACCEPT + inet6/filter/logaccept-final-18 -j ACCEPT + +Filter 828 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-827 + inet6/filter/FORWARD -j limit-827 + inet/filter/INPUT -j limit-827 + inet6/filter/INPUT -j limit-827 + inet/filter/OUTPUT -j limit-827 + inet6/filter/OUTPUT -j limit-827 + inet/filter/limit-827 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-827 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-827 -m limit --limit 1/second -j LOG + inet6/filter/limit-827 -m limit --limit 1/second -j LOG + +Filter 829 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-828 + inet6/filter/FORWARD -j limit-828 + inet/filter/INPUT -j limit-828 + inet6/filter/INPUT -j limit-828 + inet/filter/OUTPUT -j limit-828 + inet6/filter/OUTPUT -j limit-828 + inet/filter/limit-828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 830 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-829 + inet6/filter/FORWARD -j limit-829 + inet/filter/INPUT -j limit-829 + inet6/filter/INPUT -j limit-829 + inet/filter/OUTPUT -j limit-829 + inet6/filter/OUTPUT -j limit-829 + inet/filter/limit-829 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-829 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 831 {"flow-limit":{"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-830 + inet6/filter/FORWARD -j limit-830 + inet/filter/INPUT -j limit-830 + inet6/filter/INPUT -j limit-830 + inet/filter/OUTPUT -j limit-830 + inet6/filter/OUTPUT -j limit-830 + inet/filter/limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 832 {"action":"pass","flow-limit":{"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-831 + inet6/filter/FORWARD -j limit-831 + inet/filter/INPUT -j limit-831 + inet6/filter/INPUT -j limit-831 + inet/filter/OUTPUT -j limit-831 + inet6/filter/OUTPUT -j limit-831 + inet/filter/limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 833 {"flow-limit":{"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-832 + inet6/filter/FORWARD -j limit-832 + inet/filter/INPUT -j limit-832 + inet6/filter/INPUT -j limit-832 + inet/filter/OUTPUT -j limit-832 + inet6/filter/OUTPUT -j limit-832 + inet/filter/limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-19 + inet6/filter/FORWARD -j logaccept-final-19 + inet/filter/INPUT -j logaccept-final-19 + inet6/filter/INPUT -j logaccept-final-19 + inet/filter/OUTPUT -j logaccept-final-19 + inet6/filter/OUTPUT -j logaccept-final-19 + inet/filter/logaccept-final-19 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-19 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-19 -j ACCEPT + inet6/filter/logaccept-final-19 -j ACCEPT + +Filter 834 {"action":"pass","flow-limit":{"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-833 + inet6/filter/FORWARD -j limit-833 + inet/filter/INPUT -j limit-833 + inet6/filter/INPUT -j limit-833 + inet/filter/OUTPUT -j limit-833 + inet6/filter/OUTPUT -j limit-833 + inet/filter/limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 835 {"flow-limit":{"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-834 + inet6/filter/FORWARD -j limit-834 + inet/filter/INPUT -j limit-834 + inet6/filter/INPUT -j limit-834 + inet/filter/OUTPUT -j limit-834 + inet6/filter/OUTPUT -j limit-834 + inet/filter/limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 836 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-835 + inet6/filter/FORWARD -j limit-835 + inet/filter/INPUT -j limit-835 + inet6/filter/INPUT -j limit-835 + inet/filter/OUTPUT -j limit-835 + inet6/filter/OUTPUT -j limit-835 + inet/filter/limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 837 {"flow-limit":{"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-836 + inet6/filter/FORWARD -j limit-836 + inet/filter/INPUT -j limit-836 + inet6/filter/INPUT -j limit-836 + inet/filter/OUTPUT -j limit-836 + inet6/filter/OUTPUT -j limit-836 + inet/filter/limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 838 {"action":"pass","flow-limit":{"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-837 + inet6/filter/FORWARD -j limit-837 + inet/filter/INPUT -j limit-837 + inet6/filter/INPUT -j limit-837 + inet/filter/OUTPUT -j limit-837 + inet6/filter/OUTPUT -j limit-837 + inet/filter/limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 839 {"flow-limit":{"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-838 + inet6/filter/FORWARD -j limit-838 + inet/filter/INPUT -j limit-838 + inet6/filter/INPUT -j limit-838 + inet/filter/OUTPUT -j limit-838 + inet6/filter/OUTPUT -j limit-838 + inet/filter/limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-20 + inet6/filter/FORWARD -j logaccept-final-20 + inet/filter/INPUT -j logaccept-final-20 + inet6/filter/INPUT -j logaccept-final-20 + inet/filter/OUTPUT -j logaccept-final-20 + inet6/filter/OUTPUT -j logaccept-final-20 + inet/filter/logaccept-final-20 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-20 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-20 -j ACCEPT + inet6/filter/logaccept-final-20 -j ACCEPT + +Filter 840 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-839 + inet6/filter/FORWARD -j limit-839 + inet/filter/INPUT -j limit-839 + inet6/filter/INPUT -j limit-839 + inet/filter/OUTPUT -j limit-839 + inet6/filter/OUTPUT -j limit-839 + inet/filter/limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 841 {"flow-limit":{"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-840 + inet6/filter/FORWARD -j limit-840 + inet/filter/INPUT -j limit-840 + inet6/filter/INPUT -j limit-840 + inet/filter/OUTPUT -j limit-840 + inet6/filter/OUTPUT -j limit-840 + inet/filter/limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 842 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-841 + inet6/filter/FORWARD -j limit-841 + inet/filter/INPUT -j limit-841 + inet6/filter/INPUT -j limit-841 + inet/filter/OUTPUT -j limit-841 + inet6/filter/OUTPUT -j limit-841 + inet/filter/limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 843 {"flow-limit":{"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-842 + inet6/filter/FORWARD -j limit-842 + inet/filter/INPUT -j limit-842 + inet6/filter/INPUT -j limit-842 + inet/filter/OUTPUT -j limit-842 + inet6/filter/OUTPUT -j limit-842 + inet/filter/limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 844 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-843 + inet6/filter/FORWARD -j limit-843 + inet/filter/INPUT -j limit-843 + inet6/filter/INPUT -j limit-843 + inet/filter/OUTPUT -j limit-843 + inet6/filter/OUTPUT -j limit-843 + inet/filter/limit-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 845 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-844 + inet6/filter/FORWARD -j limit-844 + inet/filter/INPUT -j limit-844 + inet6/filter/INPUT -j limit-844 + inet/filter/OUTPUT -j limit-844 + inet6/filter/OUTPUT -j limit-844 + inet/filter/limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-21 + inet6/filter/FORWARD -j logaccept-final-21 + inet/filter/INPUT -j logaccept-final-21 + inet6/filter/INPUT -j logaccept-final-21 + inet/filter/OUTPUT -j logaccept-final-21 + inet6/filter/OUTPUT -j logaccept-final-21 + inet/filter/logaccept-final-21 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-21 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-21 -j ACCEPT + inet6/filter/logaccept-final-21 -j ACCEPT + +Filter 846 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-845 + inet6/filter/FORWARD -j limit-845 + inet/filter/INPUT -j limit-845 + inet6/filter/INPUT -j limit-845 + inet/filter/OUTPUT -j limit-845 + inet6/filter/OUTPUT -j limit-845 + inet/filter/limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-845 -m limit --limit 1/second -j LOG + inet6/filter/limit-845 -m limit --limit 1/second -j LOG + +Filter 847 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-846 + inet6/filter/FORWARD -j limit-846 + inet/filter/INPUT -j limit-846 + inet6/filter/INPUT -j limit-846 + inet/filter/OUTPUT -j limit-846 + inet6/filter/OUTPUT -j limit-846 + inet/filter/limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 848 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-847 + inet6/filter/FORWARD -j limit-847 + inet/filter/INPUT -j limit-847 + inet6/filter/INPUT -j limit-847 + inet/filter/OUTPUT -j limit-847 + inet6/filter/OUTPUT -j limit-847 + inet/filter/limit-847 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-847 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 849 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-848 + inet6/filter/FORWARD -j limit-848 + inet/filter/INPUT -j limit-848 + inet6/filter/INPUT -j limit-848 + inet/filter/OUTPUT -j limit-848 + inet6/filter/OUTPUT -j limit-848 + inet/filter/limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 850 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-849 + inet6/filter/FORWARD -j limit-849 + inet/filter/INPUT -j limit-849 + inet6/filter/INPUT -j limit-849 + inet/filter/OUTPUT -j limit-849 + inet6/filter/OUTPUT -j limit-849 + inet/filter/limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 851 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-850 + inet6/filter/FORWARD -j limit-850 + inet/filter/INPUT -j limit-850 + inet6/filter/INPUT -j limit-850 + inet/filter/OUTPUT -j limit-850 + inet6/filter/OUTPUT -j limit-850 + inet/filter/limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-22 + inet6/filter/FORWARD -j logaccept-final-22 + inet/filter/INPUT -j logaccept-final-22 + inet6/filter/INPUT -j logaccept-final-22 + inet/filter/OUTPUT -j logaccept-final-22 + inet6/filter/OUTPUT -j logaccept-final-22 + inet/filter/logaccept-final-22 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-22 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-22 -j ACCEPT + inet6/filter/logaccept-final-22 -j ACCEPT + +Filter 852 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-851 + inet6/filter/FORWARD -j limit-851 + inet/filter/INPUT -j limit-851 + inet6/filter/INPUT -j limit-851 + inet/filter/OUTPUT -j limit-851 + inet6/filter/OUTPUT -j limit-851 + inet/filter/limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 853 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-852 + inet6/filter/FORWARD -j limit-852 + inet/filter/INPUT -j limit-852 + inet6/filter/INPUT -j limit-852 + inet/filter/OUTPUT -j limit-852 + inet6/filter/OUTPUT -j limit-852 + inet/filter/limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 854 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-853 + inet6/filter/FORWARD -j limit-853 + inet/filter/INPUT -j limit-853 + inet6/filter/INPUT -j limit-853 + inet/filter/OUTPUT -j limit-853 + inet6/filter/OUTPUT -j limit-853 + inet/filter/limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 855 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-854 + inet6/filter/FORWARD -j limit-854 + inet/filter/INPUT -j limit-854 + inet6/filter/INPUT -j limit-854 + inet/filter/OUTPUT -j limit-854 + inet6/filter/OUTPUT -j limit-854 + inet/filter/limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 856 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-855 + inet6/filter/FORWARD -j limit-855 + inet/filter/INPUT -j limit-855 + inet6/filter/INPUT -j limit-855 + inet/filter/OUTPUT -j limit-855 + inet6/filter/OUTPUT -j limit-855 + inet/filter/limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 857 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-856 + inet6/filter/FORWARD -j limit-856 + inet/filter/INPUT -j limit-856 + inet6/filter/INPUT -j limit-856 + inet/filter/OUTPUT -j limit-856 + inet6/filter/OUTPUT -j limit-856 + inet/filter/limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-23 + inet6/filter/FORWARD -j logaccept-final-23 + inet/filter/INPUT -j logaccept-final-23 + inet6/filter/INPUT -j logaccept-final-23 + inet/filter/OUTPUT -j logaccept-final-23 + inet6/filter/OUTPUT -j logaccept-final-23 + inet/filter/logaccept-final-23 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-23 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-23 -j ACCEPT + inet6/filter/logaccept-final-23 -j ACCEPT + +Filter 858 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-857 + inet6/filter/FORWARD -j limit-857 + inet/filter/INPUT -j limit-857 + inet6/filter/INPUT -j limit-857 + inet/filter/OUTPUT -j limit-857 + inet6/filter/OUTPUT -j limit-857 + inet/filter/limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-857 -m limit --limit 1/second -j LOG + inet6/filter/limit-857 -m limit --limit 1/second -j LOG + +Filter 859 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-858 + inet6/filter/FORWARD -j limit-858 + inet/filter/INPUT -j limit-858 + inet6/filter/INPUT -j limit-858 + inet/filter/OUTPUT -j limit-858 + inet6/filter/OUTPUT -j limit-858 + inet/filter/limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 860 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-859 + inet6/filter/FORWARD -j limit-859 + inet/filter/INPUT -j limit-859 + inet6/filter/INPUT -j limit-859 + inet/filter/OUTPUT -j limit-859 + inet6/filter/OUTPUT -j limit-859 + inet/filter/limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 861 {"flow-limit":{"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-860 + inet6/filter/FORWARD -j limit-860 + inet/filter/INPUT -j limit-860 + inet6/filter/INPUT -j limit-860 + inet/filter/OUTPUT -j limit-860 + inet6/filter/OUTPUT -j limit-860 + inet/filter/limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-860 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-860 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 862 {"action":"pass","flow-limit":{"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-861 + inet6/filter/FORWARD -j limit-861 + inet/filter/INPUT -j limit-861 + inet6/filter/INPUT -j limit-861 + inet/filter/OUTPUT -j limit-861 + inet6/filter/OUTPUT -j limit-861 + inet/filter/limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-861 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-861 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 863 {"flow-limit":{"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-862 + inet6/filter/FORWARD -j limit-862 + inet/filter/INPUT -j limit-862 + inet6/filter/INPUT -j limit-862 + inet/filter/OUTPUT -j limit-862 + inet6/filter/OUTPUT -j limit-862 + inet/filter/limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-862 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-862 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-24 + inet6/filter/FORWARD -j logaccept-final-24 + inet/filter/INPUT -j logaccept-final-24 + inet6/filter/INPUT -j logaccept-final-24 + inet/filter/OUTPUT -j logaccept-final-24 + inet6/filter/OUTPUT -j logaccept-final-24 + inet/filter/logaccept-final-24 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-24 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-24 -j ACCEPT + inet6/filter/logaccept-final-24 -j ACCEPT + +Filter 864 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-863 + inet6/filter/FORWARD -j limit-863 + inet/filter/INPUT -j limit-863 + inet6/filter/INPUT -j limit-863 + inet/filter/OUTPUT -j limit-863 + inet6/filter/OUTPUT -j limit-863 + inet/filter/limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-863 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-863 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 865 {"flow-limit":{"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-864 + inet6/filter/FORWARD -j limit-864 + inet/filter/INPUT -j limit-864 + inet6/filter/INPUT -j limit-864 + inet/filter/OUTPUT -j limit-864 + inet6/filter/OUTPUT -j limit-864 + inet/filter/limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-864 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-864 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 866 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-865 + inet6/filter/FORWARD -j limit-865 + inet/filter/INPUT -j limit-865 + inet6/filter/INPUT -j limit-865 + inet/filter/OUTPUT -j limit-865 + inet6/filter/OUTPUT -j limit-865 + inet/filter/limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-865 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-865 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 867 {"flow-limit":{"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-866 + inet6/filter/FORWARD -j limit-866 + inet/filter/INPUT -j limit-866 + inet6/filter/INPUT -j limit-866 + inet/filter/OUTPUT -j limit-866 + inet6/filter/OUTPUT -j limit-866 + inet/filter/limit-866 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-866 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 868 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-867 + inet6/filter/FORWARD -j limit-867 + inet/filter/INPUT -j limit-867 + inet6/filter/INPUT -j limit-867 + inet/filter/OUTPUT -j limit-867 + inet6/filter/OUTPUT -j limit-867 + inet/filter/limit-867 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-867 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 869 {"flow-limit":{"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-868 + inet6/filter/FORWARD -j limit-868 + inet/filter/INPUT -j limit-868 + inet6/filter/INPUT -j limit-868 + inet/filter/OUTPUT -j limit-868 + inet6/filter/OUTPUT -j limit-868 + inet/filter/limit-868 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-868 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-25 + inet6/filter/FORWARD -j logaccept-final-25 + inet/filter/INPUT -j logaccept-final-25 + inet6/filter/INPUT -j logaccept-final-25 + inet/filter/OUTPUT -j logaccept-final-25 + inet6/filter/OUTPUT -j logaccept-final-25 + inet/filter/logaccept-final-25 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-25 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-25 -j ACCEPT + inet6/filter/logaccept-final-25 -j ACCEPT + +Filter 870 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-869 + inet6/filter/FORWARD -j limit-869 + inet/filter/INPUT -j limit-869 + inet6/filter/INPUT -j limit-869 + inet/filter/OUTPUT -j limit-869 + inet6/filter/OUTPUT -j limit-869 + inet/filter/limit-869 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-869 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-869 -m limit --limit 1/second -j LOG + inet6/filter/limit-869 -m limit --limit 1/second -j LOG + +Filter 871 {"flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-870 + inet6/filter/FORWARD -j limit-870 + inet/filter/INPUT -j limit-870 + inet6/filter/INPUT -j limit-870 + inet/filter/OUTPUT -j limit-870 + inet6/filter/OUTPUT -j limit-870 + inet/filter/limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-870 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 872 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-871 + inet6/filter/FORWARD -j limit-871 + inet/filter/INPUT -j limit-871 + inet6/filter/INPUT -j limit-871 + inet/filter/OUTPUT -j limit-871 + inet6/filter/OUTPUT -j limit-871 + inet/filter/limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-871 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 873 {"flow-limit":{"addr":"dest","log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-872 + inet6/filter/FORWARD -j limit-872 + inet/filter/INPUT -j limit-872 + inet6/filter/INPUT -j limit-872 + inet/filter/OUTPUT -j limit-872 + inet6/filter/OUTPUT -j limit-872 + inet/filter/limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-872 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 874 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-873 + inet6/filter/FORWARD -j limit-873 + inet/filter/INPUT -j limit-873 + inet6/filter/INPUT -j limit-873 + inet/filter/OUTPUT -j limit-873 + inet6/filter/OUTPUT -j limit-873 + inet/filter/limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-873 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 875 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-874 + inet6/filter/FORWARD -j limit-874 + inet/filter/INPUT -j limit-874 + inet6/filter/INPUT -j limit-874 + inet/filter/OUTPUT -j limit-874 + inet6/filter/OUTPUT -j limit-874 + inet/filter/limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-874 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-26 + inet6/filter/FORWARD -j logaccept-final-26 + inet/filter/INPUT -j logaccept-final-26 + inet6/filter/INPUT -j logaccept-final-26 + inet/filter/OUTPUT -j logaccept-final-26 + inet6/filter/OUTPUT -j logaccept-final-26 + inet/filter/logaccept-final-26 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-26 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-26 -j ACCEPT + inet6/filter/logaccept-final-26 -j ACCEPT + +Filter 876 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-875 + inet6/filter/FORWARD -j limit-875 + inet/filter/INPUT -j limit-875 + inet6/filter/INPUT -j limit-875 + inet/filter/OUTPUT -j limit-875 + inet6/filter/OUTPUT -j limit-875 + inet/filter/limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-875 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 877 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-876 + inet6/filter/FORWARD -j limit-876 + inet/filter/INPUT -j limit-876 + inet6/filter/INPUT -j limit-876 + inet/filter/OUTPUT -j limit-876 + inet6/filter/OUTPUT -j limit-876 + inet/filter/limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-876 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-876 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 878 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-877 + inet6/filter/FORWARD -j limit-877 + inet/filter/INPUT -j limit-877 + inet6/filter/INPUT -j limit-877 + inet/filter/OUTPUT -j limit-877 + inet6/filter/OUTPUT -j limit-877 + inet/filter/limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-877 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-877 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 879 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-878 + inet6/filter/FORWARD -j limit-878 + inet/filter/INPUT -j limit-878 + inet6/filter/INPUT -j limit-878 + inet/filter/OUTPUT -j limit-878 + inet6/filter/OUTPUT -j limit-878 + inet/filter/limit-878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 880 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-879 + inet6/filter/FORWARD -j limit-879 + inet/filter/INPUT -j limit-879 + inet6/filter/INPUT -j limit-879 + inet/filter/OUTPUT -j limit-879 + inet6/filter/OUTPUT -j limit-879 + inet/filter/limit-879 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-879 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 881 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-880 + inet6/filter/FORWARD -j limit-880 + inet/filter/INPUT -j limit-880 + inet6/filter/INPUT -j limit-880 + inet/filter/OUTPUT -j limit-880 + inet6/filter/OUTPUT -j limit-880 + inet/filter/limit-880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-27 + inet6/filter/FORWARD -j logaccept-final-27 + inet/filter/INPUT -j logaccept-final-27 + inet6/filter/INPUT -j logaccept-final-27 + inet/filter/OUTPUT -j logaccept-final-27 + inet6/filter/OUTPUT -j logaccept-final-27 + inet/filter/logaccept-final-27 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-27 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-27 -j ACCEPT + inet6/filter/logaccept-final-27 -j ACCEPT + +Filter 882 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-881 + inet6/filter/FORWARD -j limit-881 + inet/filter/INPUT -j limit-881 + inet6/filter/INPUT -j limit-881 + inet/filter/OUTPUT -j limit-881 + inet6/filter/OUTPUT -j limit-881 + inet/filter/limit-881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-881 -m limit --limit 1/second -j LOG + inet6/filter/limit-881 -m limit --limit 1/second -j LOG + +Filter 883 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-882 + inet6/filter/FORWARD -j limit-882 + inet/filter/INPUT -j limit-882 + inet6/filter/INPUT -j limit-882 + inet/filter/OUTPUT -j limit-882 + inet6/filter/OUTPUT -j limit-882 + inet/filter/limit-882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 884 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-883 + inet6/filter/FORWARD -j limit-883 + inet/filter/INPUT -j limit-883 + inet6/filter/INPUT -j limit-883 + inet/filter/OUTPUT -j limit-883 + inet6/filter/OUTPUT -j limit-883 + inet/filter/limit-883 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-883 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 885 {"flow-limit":{"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-884 + inet6/filter/FORWARD -j limit-884 + inet/filter/INPUT -j limit-884 + inet6/filter/INPUT -j limit-884 + inet/filter/OUTPUT -j limit-884 + inet6/filter/OUTPUT -j limit-884 + inet/filter/limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-288 + inet6/filter/limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-288 + inet/filter/logdrop-288 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-288 -m limit --limit 1/second -j LOG + inet/filter/logdrop-288 -j DROP + inet6/filter/logdrop-288 -j DROP + inet/filter/limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 886 {"action":"pass","flow-limit":{"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-885 + inet6/filter/FORWARD -j limit-885 + inet/filter/INPUT -j limit-885 + inet6/filter/INPUT -j limit-885 + inet/filter/OUTPUT -j limit-885 + inet6/filter/OUTPUT -j limit-885 + inet/filter/limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 + inet6/filter/limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 + inet/filter/logdrop-289 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-289 -m limit --limit 1/second -j LOG + inet/filter/logdrop-289 -j DROP + inet6/filter/logdrop-289 -j DROP + inet/filter/limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 887 {"flow-limit":{"interval":5},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-886 + inet6/filter/FORWARD -j limit-886 + inet/filter/INPUT -j limit-886 + inet6/filter/INPUT -j limit-886 + inet/filter/OUTPUT -j limit-886 + inet6/filter/OUTPUT -j limit-886 + inet/filter/limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 + inet6/filter/limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 + inet/filter/logdrop-290 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-290 -m limit --limit 1/second -j LOG + inet/filter/logdrop-290 -j DROP + inet6/filter/logdrop-290 -j DROP + inet/filter/limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-28 + inet6/filter/FORWARD -j logaccept-final-28 + inet/filter/INPUT -j logaccept-final-28 + inet6/filter/INPUT -j logaccept-final-28 + inet/filter/OUTPUT -j logaccept-final-28 + inet6/filter/OUTPUT -j logaccept-final-28 + inet/filter/logaccept-final-28 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-28 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-28 -j ACCEPT + inet6/filter/logaccept-final-28 -j ACCEPT + +Filter 888 {"action":"pass","flow-limit":{"interval":5},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-887 + inet6/filter/FORWARD -j limit-887 + inet/filter/INPUT -j limit-887 + inet6/filter/INPUT -j limit-887 + inet/filter/OUTPUT -j limit-887 + inet6/filter/OUTPUT -j limit-887 + inet/filter/limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 + inet6/filter/limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 + inet/filter/logdrop-291 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-291 -m limit --limit 1/second -j LOG + inet/filter/logdrop-291 -j DROP + inet6/filter/logdrop-291 -j DROP + inet/filter/limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 889 {"flow-limit":{"interval":5},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-888 + inet6/filter/FORWARD -j limit-888 + inet/filter/INPUT -j limit-888 + inet6/filter/INPUT -j limit-888 + inet/filter/OUTPUT -j limit-888 + inet6/filter/OUTPUT -j limit-888 + inet/filter/limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 + inet6/filter/limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 + inet/filter/logdrop-292 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-292 -m limit --limit 1/second -j LOG + inet/filter/logdrop-292 -j DROP + inet6/filter/logdrop-292 -j DROP + inet/filter/limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 890 {"action":"pass","flow-limit":{"interval":5},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-889 + inet6/filter/FORWARD -j limit-889 + inet/filter/INPUT -j limit-889 + inet6/filter/INPUT -j limit-889 + inet/filter/OUTPUT -j limit-889 + inet6/filter/OUTPUT -j limit-889 + inet/filter/limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 + inet6/filter/limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 + inet/filter/logdrop-293 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-293 -m limit --limit 1/second -j LOG + inet/filter/logdrop-293 -j DROP + inet6/filter/logdrop-293 -j DROP + inet/filter/limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 891 {"flow-limit":{"interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-890 + inet6/filter/FORWARD -j limit-890 + inet/filter/INPUT -j limit-890 + inet6/filter/INPUT -j limit-890 + inet/filter/OUTPUT -j limit-890 + inet6/filter/OUTPUT -j limit-890 + inet/filter/limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 + inet6/filter/limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 + inet/filter/logdrop-294 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-294 -m limit --limit 1/second -j LOG + inet/filter/logdrop-294 -j DROP + inet6/filter/logdrop-294 -j DROP + inet/filter/limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 892 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-891 + inet6/filter/FORWARD -j limit-891 + inet/filter/INPUT -j limit-891 + inet6/filter/INPUT -j limit-891 + inet/filter/OUTPUT -j limit-891 + inet6/filter/OUTPUT -j limit-891 + inet/filter/limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 + inet6/filter/limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 + inet/filter/logdrop-295 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-295 -m limit --limit 1/second -j LOG + inet/filter/logdrop-295 -j DROP + inet6/filter/logdrop-295 -j DROP + inet/filter/limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 893 {"flow-limit":{"interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-892 + inet6/filter/FORWARD -j limit-892 + inet/filter/INPUT -j limit-892 + inet6/filter/INPUT -j limit-892 + inet/filter/OUTPUT -j limit-892 + inet6/filter/OUTPUT -j limit-892 + inet/filter/limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 + inet6/filter/limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 + inet/filter/logdrop-296 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-296 -m limit --limit 1/second -j LOG + inet/filter/logdrop-296 -j DROP + inet6/filter/logdrop-296 -j DROP + inet/filter/limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-29 + inet6/filter/FORWARD -j logaccept-final-29 + inet/filter/INPUT -j logaccept-final-29 + inet6/filter/INPUT -j logaccept-final-29 + inet/filter/OUTPUT -j logaccept-final-29 + inet6/filter/OUTPUT -j logaccept-final-29 + inet/filter/logaccept-final-29 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-29 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-29 -j ACCEPT + inet6/filter/logaccept-final-29 -j ACCEPT + +Filter 894 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-893 + inet6/filter/FORWARD -j limit-893 + inet/filter/INPUT -j limit-893 + inet6/filter/INPUT -j limit-893 + inet/filter/OUTPUT -j limit-893 + inet6/filter/OUTPUT -j limit-893 + inet/filter/limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 + inet6/filter/limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 + inet/filter/logdrop-297 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-297 -m limit --limit 1/second -j LOG + inet/filter/logdrop-297 -j DROP + inet6/filter/logdrop-297 -j DROP + inet/filter/limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 895 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-894 + inet6/filter/FORWARD -j limit-894 + inet/filter/INPUT -j limit-894 + inet6/filter/INPUT -j limit-894 + inet/filter/OUTPUT -j limit-894 + inet6/filter/OUTPUT -j limit-894 + inet/filter/limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 + inet6/filter/limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 + inet/filter/logdrop-298 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-298 -m limit --limit 1/second -j LOG + inet/filter/logdrop-298 -j DROP + inet6/filter/logdrop-298 -j DROP + inet/filter/limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 896 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-895 + inet6/filter/FORWARD -j limit-895 + inet/filter/INPUT -j limit-895 + inet6/filter/INPUT -j limit-895 + inet/filter/OUTPUT -j limit-895 + inet6/filter/OUTPUT -j limit-895 + inet/filter/limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 + inet6/filter/limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 + inet/filter/logdrop-299 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-299 -m limit --limit 1/second -j LOG + inet/filter/logdrop-299 -j DROP + inet6/filter/logdrop-299 -j DROP + inet/filter/limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 897 {"flow-limit":{"interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-896 + inet6/filter/FORWARD -j limit-896 + inet/filter/INPUT -j limit-896 + inet6/filter/INPUT -j limit-896 + inet/filter/OUTPUT -j limit-896 + inet6/filter/OUTPUT -j limit-896 + inet/filter/limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-300 + inet6/filter/limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-300 + inet/filter/logdrop-300 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-300 -m limit --limit 1/second -j LOG + inet/filter/logdrop-300 -j DROP + inet6/filter/logdrop-300 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 898 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-897 + inet6/filter/FORWARD -j limit-897 + inet/filter/INPUT -j limit-897 + inet6/filter/INPUT -j limit-897 + inet/filter/OUTPUT -j limit-897 + inet6/filter/OUTPUT -j limit-897 + inet/filter/limit-897 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 + inet6/filter/limit-897 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 + inet/filter/logdrop-301 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-301 -m limit --limit 1/second -j LOG + inet/filter/logdrop-301 -j DROP + inet6/filter/logdrop-301 -j DROP + +Filter 899 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-898 + inet6/filter/FORWARD -j limit-898 + inet/filter/INPUT -j limit-898 + inet6/filter/INPUT -j limit-898 + inet/filter/OUTPUT -j limit-898 + inet6/filter/OUTPUT -j limit-898 + inet/filter/limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 + inet6/filter/limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 + inet/filter/logdrop-302 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-302 -m limit --limit 1/second -j LOG + inet/filter/logdrop-302 -j DROP + inet6/filter/logdrop-302 -j DROP + inet/filter/FORWARD -j logaccept-final-30 + inet6/filter/FORWARD -j logaccept-final-30 + inet/filter/INPUT -j logaccept-final-30 + inet6/filter/INPUT -j logaccept-final-30 + inet/filter/OUTPUT -j logaccept-final-30 + inet6/filter/OUTPUT -j logaccept-final-30 + inet/filter/logaccept-final-30 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-30 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-30 -j ACCEPT + inet6/filter/logaccept-final-30 -j ACCEPT + +Filter 900 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-899 + inet6/filter/FORWARD -j limit-899 + inet/filter/INPUT -j limit-899 + inet6/filter/INPUT -j limit-899 + inet/filter/OUTPUT -j limit-899 + inet6/filter/OUTPUT -j limit-899 + inet/filter/limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 + inet6/filter/limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 + inet/filter/logdrop-303 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-303 -m limit --limit 1/second -j LOG + inet/filter/logdrop-303 -j DROP + inet6/filter/logdrop-303 -j DROP + inet/filter/limit-899 -m limit --limit 1/second -j LOG + inet6/filter/limit-899 -m limit --limit 1/second -j LOG + +Filter 901 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-900 + inet6/filter/FORWARD -j limit-900 + inet/filter/INPUT -j limit-900 + inet6/filter/INPUT -j limit-900 + inet/filter/OUTPUT -j limit-900 + inet6/filter/OUTPUT -j limit-900 + inet/filter/limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 + inet6/filter/limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 + inet/filter/logdrop-304 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-304 -m limit --limit 1/second -j LOG + inet/filter/logdrop-304 -j DROP + inet6/filter/logdrop-304 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 902 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-901 + inet6/filter/FORWARD -j limit-901 + inet/filter/INPUT -j limit-901 + inet6/filter/INPUT -j limit-901 + inet/filter/OUTPUT -j limit-901 + inet6/filter/OUTPUT -j limit-901 + inet/filter/limit-901 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 + inet6/filter/limit-901 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 + inet/filter/logdrop-305 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-305 -m limit --limit 1/second -j LOG + inet/filter/logdrop-305 -j DROP + inet6/filter/logdrop-305 -j DROP + +Filter 903 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-902 + inet6/filter/FORWARD -j limit-902 + inet/filter/INPUT -j limit-902 + inet6/filter/INPUT -j limit-902 + inet/filter/OUTPUT -j limit-902 + inet6/filter/OUTPUT -j limit-902 + inet/filter/limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-306 + inet6/filter/limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-306 + inet/filter/logdrop-306 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-306 -m limit --limit 1/second -j LOG + inet/filter/logdrop-306 -j DROP + inet6/filter/logdrop-306 -j DROP + inet/filter/limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 904 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-903 + inet6/filter/FORWARD -j limit-903 + inet/filter/INPUT -j limit-903 + inet6/filter/INPUT -j limit-903 + inet/filter/OUTPUT -j limit-903 + inet6/filter/OUTPUT -j limit-903 + inet/filter/limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 + inet6/filter/limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 + inet/filter/logdrop-307 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-307 -m limit --limit 1/second -j LOG + inet/filter/logdrop-307 -j DROP + inet6/filter/logdrop-307 -j DROP + inet/filter/limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 905 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-904 + inet6/filter/FORWARD -j limit-904 + inet/filter/INPUT -j limit-904 + inet6/filter/INPUT -j limit-904 + inet/filter/OUTPUT -j limit-904 + inet6/filter/OUTPUT -j limit-904 + inet/filter/limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 + inet6/filter/limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 + inet/filter/logdrop-308 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-308 -m limit --limit 1/second -j LOG + inet/filter/logdrop-308 -j DROP + inet6/filter/logdrop-308 -j DROP + inet/filter/limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-31 + inet6/filter/FORWARD -j logaccept-final-31 + inet/filter/INPUT -j logaccept-final-31 + inet6/filter/INPUT -j logaccept-final-31 + inet/filter/OUTPUT -j logaccept-final-31 + inet6/filter/OUTPUT -j logaccept-final-31 + inet/filter/logaccept-final-31 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-31 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-31 -j ACCEPT + inet6/filter/logaccept-final-31 -j ACCEPT + +Filter 906 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-905 + inet6/filter/FORWARD -j limit-905 + inet/filter/INPUT -j limit-905 + inet6/filter/INPUT -j limit-905 + inet/filter/OUTPUT -j limit-905 + inet6/filter/OUTPUT -j limit-905 + inet/filter/limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 + inet6/filter/limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 + inet/filter/logdrop-309 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-309 -m limit --limit 1/second -j LOG + inet/filter/logdrop-309 -j DROP + inet6/filter/logdrop-309 -j DROP + inet/filter/limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 907 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-906 + inet6/filter/FORWARD -j limit-906 + inet/filter/INPUT -j limit-906 + inet6/filter/INPUT -j limit-906 + inet/filter/OUTPUT -j limit-906 + inet6/filter/OUTPUT -j limit-906 + inet/filter/limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 + inet6/filter/limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 + inet/filter/logdrop-310 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-310 -m limit --limit 1/second -j LOG + inet/filter/logdrop-310 -j DROP + inet6/filter/logdrop-310 -j DROP + inet/filter/limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 908 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-907 + inet6/filter/FORWARD -j limit-907 + inet/filter/INPUT -j limit-907 + inet6/filter/INPUT -j limit-907 + inet/filter/OUTPUT -j limit-907 + inet6/filter/OUTPUT -j limit-907 + inet/filter/limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 + inet6/filter/limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 + inet/filter/logdrop-311 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-311 -m limit --limit 1/second -j LOG + inet/filter/logdrop-311 -j DROP + inet6/filter/logdrop-311 -j DROP + inet/filter/limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 909 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-908 + inet6/filter/FORWARD -j limit-908 + inet/filter/INPUT -j limit-908 + inet6/filter/INPUT -j limit-908 + inet/filter/OUTPUT -j limit-908 + inet6/filter/OUTPUT -j limit-908 + inet/filter/limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-312 + inet6/filter/limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-312 + inet/filter/logdrop-312 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-312 -m limit --limit 1/second -j LOG + inet/filter/logdrop-312 -j DROP + inet6/filter/logdrop-312 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 910 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-909 + inet6/filter/FORWARD -j limit-909 + inet/filter/INPUT -j limit-909 + inet6/filter/INPUT -j limit-909 + inet/filter/OUTPUT -j limit-909 + inet6/filter/OUTPUT -j limit-909 + inet/filter/limit-909 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 + inet6/filter/limit-909 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 + inet/filter/logdrop-313 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-313 -m limit --limit 1/second -j LOG + inet/filter/logdrop-313 -j DROP + inet6/filter/logdrop-313 -j DROP + +Filter 911 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-910 + inet6/filter/FORWARD -j limit-910 + inet/filter/INPUT -j limit-910 + inet6/filter/INPUT -j limit-910 + inet/filter/OUTPUT -j limit-910 + inet6/filter/OUTPUT -j limit-910 + inet/filter/limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 + inet6/filter/limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 + inet/filter/logdrop-314 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-314 -m limit --limit 1/second -j LOG + inet/filter/logdrop-314 -j DROP + inet6/filter/logdrop-314 -j DROP + inet/filter/FORWARD -j logaccept-final-32 + inet6/filter/FORWARD -j logaccept-final-32 + inet/filter/INPUT -j logaccept-final-32 + inet6/filter/INPUT -j logaccept-final-32 + inet/filter/OUTPUT -j logaccept-final-32 + inet6/filter/OUTPUT -j logaccept-final-32 + inet/filter/logaccept-final-32 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-32 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-32 -j ACCEPT + inet6/filter/logaccept-final-32 -j ACCEPT + +Filter 912 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-911 + inet6/filter/FORWARD -j limit-911 + inet/filter/INPUT -j limit-911 + inet6/filter/INPUT -j limit-911 + inet/filter/OUTPUT -j limit-911 + inet6/filter/OUTPUT -j limit-911 + inet/filter/limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 + inet6/filter/limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 + inet/filter/logdrop-315 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-315 -m limit --limit 1/second -j LOG + inet/filter/logdrop-315 -j DROP + inet6/filter/logdrop-315 -j DROP + inet/filter/limit-911 -m limit --limit 1/second -j LOG + inet6/filter/limit-911 -m limit --limit 1/second -j LOG + +Filter 913 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-912 + inet6/filter/FORWARD -j limit-912 + inet/filter/INPUT -j limit-912 + inet6/filter/INPUT -j limit-912 + inet/filter/OUTPUT -j limit-912 + inet6/filter/OUTPUT -j limit-912 + inet/filter/limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 + inet6/filter/limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 + inet/filter/logdrop-316 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-316 -m limit --limit 1/second -j LOG + inet/filter/logdrop-316 -j DROP + inet6/filter/logdrop-316 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 914 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-913 + inet6/filter/FORWARD -j limit-913 + inet/filter/INPUT -j limit-913 + inet6/filter/INPUT -j limit-913 + inet/filter/OUTPUT -j limit-913 + inet6/filter/OUTPUT -j limit-913 + inet/filter/limit-913 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 + inet6/filter/limit-913 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 + inet/filter/logdrop-317 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-317 -m limit --limit 1/second -j LOG + inet/filter/logdrop-317 -j DROP + inet6/filter/logdrop-317 -j DROP + +Filter 915 {"flow-limit":{"interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-914 + inet6/filter/FORWARD -j limit-914 + inet/filter/INPUT -j limit-914 + inet6/filter/INPUT -j limit-914 + inet/filter/OUTPUT -j limit-914 + inet6/filter/OUTPUT -j limit-914 + inet/filter/limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-318 + inet6/filter/limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-318 + inet/filter/logdrop-318 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-318 -m limit --limit 1/second -j LOG + inet/filter/logdrop-318 -j DROP + inet6/filter/logdrop-318 -j DROP + inet/filter/limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-914 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 916 {"action":"pass","flow-limit":{"interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-915 + inet6/filter/FORWARD -j limit-915 + inet/filter/INPUT -j limit-915 + inet6/filter/INPUT -j limit-915 + inet/filter/OUTPUT -j limit-915 + inet6/filter/OUTPUT -j limit-915 + inet/filter/limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 + inet6/filter/limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 + inet/filter/logdrop-319 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-319 -m limit --limit 1/second -j LOG + inet/filter/logdrop-319 -j DROP + inet6/filter/logdrop-319 -j DROP + inet/filter/limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-915 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 917 {"flow-limit":{"interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-916 + inet6/filter/FORWARD -j limit-916 + inet/filter/INPUT -j limit-916 + inet6/filter/INPUT -j limit-916 + inet/filter/OUTPUT -j limit-916 + inet6/filter/OUTPUT -j limit-916 + inet/filter/limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 + inet6/filter/limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 + inet/filter/logdrop-320 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-320 -m limit --limit 1/second -j LOG + inet/filter/logdrop-320 -j DROP + inet6/filter/logdrop-320 -j DROP + inet/filter/limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-916 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-33 + inet6/filter/FORWARD -j logaccept-final-33 + inet/filter/INPUT -j logaccept-final-33 + inet6/filter/INPUT -j logaccept-final-33 + inet/filter/OUTPUT -j logaccept-final-33 + inet6/filter/OUTPUT -j logaccept-final-33 + inet/filter/logaccept-final-33 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-33 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-33 -j ACCEPT + inet6/filter/logaccept-final-33 -j ACCEPT + +Filter 918 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-917 + inet6/filter/FORWARD -j limit-917 + inet/filter/INPUT -j limit-917 + inet6/filter/INPUT -j limit-917 + inet/filter/OUTPUT -j limit-917 + inet6/filter/OUTPUT -j limit-917 + inet/filter/limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 + inet6/filter/limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 + inet/filter/logdrop-321 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-321 -m limit --limit 1/second -j LOG + inet/filter/logdrop-321 -j DROP + inet6/filter/logdrop-321 -j DROP + inet/filter/limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-917 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 919 {"flow-limit":{"interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-918 + inet6/filter/FORWARD -j limit-918 + inet/filter/INPUT -j limit-918 + inet6/filter/INPUT -j limit-918 + inet/filter/OUTPUT -j limit-918 + inet6/filter/OUTPUT -j limit-918 + inet/filter/limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 + inet6/filter/limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 + inet/filter/logdrop-322 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-322 -m limit --limit 1/second -j LOG + inet/filter/logdrop-322 -j DROP + inet6/filter/logdrop-322 -j DROP + inet/filter/limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-918 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 920 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-919 + inet6/filter/FORWARD -j limit-919 + inet/filter/INPUT -j limit-919 + inet6/filter/INPUT -j limit-919 + inet/filter/OUTPUT -j limit-919 + inet6/filter/OUTPUT -j limit-919 + inet/filter/limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 + inet6/filter/limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 + inet/filter/logdrop-323 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-323 -m limit --limit 1/second -j LOG + inet/filter/logdrop-323 -j DROP + inet6/filter/logdrop-323 -j DROP + inet/filter/limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-919 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 921 {"flow-limit":{"interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-920 + inet6/filter/FORWARD -j limit-920 + inet/filter/INPUT -j limit-920 + inet6/filter/INPUT -j limit-920 + inet/filter/OUTPUT -j limit-920 + inet6/filter/OUTPUT -j limit-920 + inet/filter/limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-324 + inet6/filter/limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-324 + inet/filter/logdrop-324 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-324 -m limit --limit 1/second -j LOG + inet/filter/logdrop-324 -j DROP + inet6/filter/logdrop-324 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 922 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-921 + inet6/filter/FORWARD -j limit-921 + inet/filter/INPUT -j limit-921 + inet6/filter/INPUT -j limit-921 + inet/filter/OUTPUT -j limit-921 + inet6/filter/OUTPUT -j limit-921 + inet/filter/limit-921 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 + inet6/filter/limit-921 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 + inet/filter/logdrop-325 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-325 -m limit --limit 1/second -j LOG + inet/filter/logdrop-325 -j DROP + inet6/filter/logdrop-325 -j DROP + +Filter 923 {"flow-limit":{"interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-922 + inet6/filter/FORWARD -j limit-922 + inet/filter/INPUT -j limit-922 + inet6/filter/INPUT -j limit-922 + inet/filter/OUTPUT -j limit-922 + inet6/filter/OUTPUT -j limit-922 + inet/filter/limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 + inet6/filter/limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 + inet/filter/logdrop-326 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-326 -m limit --limit 1/second -j LOG + inet/filter/logdrop-326 -j DROP + inet6/filter/logdrop-326 -j DROP + inet/filter/FORWARD -j logaccept-final-34 + inet6/filter/FORWARD -j logaccept-final-34 + inet/filter/INPUT -j logaccept-final-34 + inet6/filter/INPUT -j logaccept-final-34 + inet/filter/OUTPUT -j logaccept-final-34 + inet6/filter/OUTPUT -j logaccept-final-34 + inet/filter/logaccept-final-34 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-34 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-34 -j ACCEPT + inet6/filter/logaccept-final-34 -j ACCEPT + +Filter 924 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-923 + inet6/filter/FORWARD -j limit-923 + inet/filter/INPUT -j limit-923 + inet6/filter/INPUT -j limit-923 + inet/filter/OUTPUT -j limit-923 + inet6/filter/OUTPUT -j limit-923 + inet/filter/limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 + inet6/filter/limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 + inet/filter/logdrop-327 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-327 -m limit --limit 1/second -j LOG + inet/filter/logdrop-327 -j DROP + inet6/filter/logdrop-327 -j DROP + inet/filter/limit-923 -m limit --limit 1/second -j LOG + inet6/filter/limit-923 -m limit --limit 1/second -j LOG + +Filter 925 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-924 + inet6/filter/FORWARD -j limit-924 + inet/filter/INPUT -j limit-924 + inet6/filter/INPUT -j limit-924 + inet/filter/OUTPUT -j limit-924 + inet6/filter/OUTPUT -j limit-924 + inet/filter/limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 + inet6/filter/limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 + inet/filter/logdrop-328 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-328 -m limit --limit 1/second -j LOG + inet/filter/logdrop-328 -j DROP + inet6/filter/logdrop-328 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 926 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-925 + inet6/filter/FORWARD -j limit-925 + inet/filter/INPUT -j limit-925 + inet6/filter/INPUT -j limit-925 + inet/filter/OUTPUT -j limit-925 + inet6/filter/OUTPUT -j limit-925 + inet/filter/limit-925 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 + inet6/filter/limit-925 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 + inet/filter/logdrop-329 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-329 -m limit --limit 1/second -j LOG + inet/filter/logdrop-329 -j DROP + inet6/filter/logdrop-329 -j DROP + +Filter 927 {"flow-limit":{"addr":"dest","interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-926 + inet6/filter/FORWARD -j limit-926 + inet/filter/INPUT -j limit-926 + inet6/filter/INPUT -j limit-926 + inet/filter/OUTPUT -j limit-926 + inet6/filter/OUTPUT -j limit-926 + inet/filter/limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-330 + inet6/filter/limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-330 + inet/filter/logdrop-330 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-330 -m limit --limit 1/second -j LOG + inet/filter/logdrop-330 -j DROP + inet6/filter/logdrop-330 -j DROP + inet/filter/limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-926 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 928 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-927 + inet6/filter/FORWARD -j limit-927 + inet/filter/INPUT -j limit-927 + inet6/filter/INPUT -j limit-927 + inet/filter/OUTPUT -j limit-927 + inet6/filter/OUTPUT -j limit-927 + inet/filter/limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 + inet6/filter/limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 + inet/filter/logdrop-331 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-331 -m limit --limit 1/second -j LOG + inet/filter/logdrop-331 -j DROP + inet6/filter/logdrop-331 -j DROP + inet/filter/limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-927 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 929 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-928 + inet6/filter/FORWARD -j limit-928 + inet/filter/INPUT -j limit-928 + inet6/filter/INPUT -j limit-928 + inet/filter/OUTPUT -j limit-928 + inet6/filter/OUTPUT -j limit-928 + inet/filter/limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 + inet6/filter/limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 + inet/filter/logdrop-332 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-332 -m limit --limit 1/second -j LOG + inet/filter/logdrop-332 -j DROP + inet6/filter/logdrop-332 -j DROP + inet/filter/limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-928 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-35 + inet6/filter/FORWARD -j logaccept-final-35 + inet/filter/INPUT -j logaccept-final-35 + inet6/filter/INPUT -j logaccept-final-35 + inet/filter/OUTPUT -j logaccept-final-35 + inet6/filter/OUTPUT -j logaccept-final-35 + inet/filter/logaccept-final-35 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-35 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-35 -j ACCEPT + inet6/filter/logaccept-final-35 -j ACCEPT + +Filter 930 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-929 + inet6/filter/FORWARD -j limit-929 + inet/filter/INPUT -j limit-929 + inet6/filter/INPUT -j limit-929 + inet/filter/OUTPUT -j limit-929 + inet6/filter/OUTPUT -j limit-929 + inet/filter/limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 + inet6/filter/limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 + inet/filter/logdrop-333 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-333 -m limit --limit 1/second -j LOG + inet/filter/logdrop-333 -j DROP + inet6/filter/logdrop-333 -j DROP + inet/filter/limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-929 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 931 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-930 + inet6/filter/FORWARD -j limit-930 + inet/filter/INPUT -j limit-930 + inet6/filter/INPUT -j limit-930 + inet/filter/OUTPUT -j limit-930 + inet6/filter/OUTPUT -j limit-930 + inet/filter/limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 + inet6/filter/limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 + inet/filter/logdrop-334 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-334 -m limit --limit 1/second -j LOG + inet/filter/logdrop-334 -j DROP + inet6/filter/logdrop-334 -j DROP + inet/filter/limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-930 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 932 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-931 + inet6/filter/FORWARD -j limit-931 + inet/filter/INPUT -j limit-931 + inet6/filter/INPUT -j limit-931 + inet/filter/OUTPUT -j limit-931 + inet6/filter/OUTPUT -j limit-931 + inet/filter/limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 + inet6/filter/limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 + inet/filter/logdrop-335 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-335 -m limit --limit 1/second -j LOG + inet/filter/logdrop-335 -j DROP + inet6/filter/logdrop-335 -j DROP + inet/filter/limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-931 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 933 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-932 + inet6/filter/FORWARD -j limit-932 + inet/filter/INPUT -j limit-932 + inet6/filter/INPUT -j limit-932 + inet/filter/OUTPUT -j limit-932 + inet6/filter/OUTPUT -j limit-932 + inet/filter/limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-336 + inet6/filter/limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-336 + inet/filter/logdrop-336 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-336 -m limit --limit 1/second -j LOG + inet/filter/logdrop-336 -j DROP + inet6/filter/logdrop-336 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 934 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-933 + inet6/filter/FORWARD -j limit-933 + inet/filter/INPUT -j limit-933 + inet6/filter/INPUT -j limit-933 + inet/filter/OUTPUT -j limit-933 + inet6/filter/OUTPUT -j limit-933 + inet/filter/limit-933 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 + inet6/filter/limit-933 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 + inet/filter/logdrop-337 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-337 -m limit --limit 1/second -j LOG + inet/filter/logdrop-337 -j DROP + inet6/filter/logdrop-337 -j DROP + +Filter 935 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-934 + inet6/filter/FORWARD -j limit-934 + inet/filter/INPUT -j limit-934 + inet6/filter/INPUT -j limit-934 + inet/filter/OUTPUT -j limit-934 + inet6/filter/OUTPUT -j limit-934 + inet/filter/limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 + inet6/filter/limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 + inet/filter/logdrop-338 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-338 -m limit --limit 1/second -j LOG + inet/filter/logdrop-338 -j DROP + inet6/filter/logdrop-338 -j DROP + inet/filter/FORWARD -j logaccept-final-36 + inet6/filter/FORWARD -j logaccept-final-36 + inet/filter/INPUT -j logaccept-final-36 + inet6/filter/INPUT -j logaccept-final-36 + inet/filter/OUTPUT -j logaccept-final-36 + inet6/filter/OUTPUT -j logaccept-final-36 + inet/filter/logaccept-final-36 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-36 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-36 -j ACCEPT + inet6/filter/logaccept-final-36 -j ACCEPT + +Filter 936 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-935 + inet6/filter/FORWARD -j limit-935 + inet/filter/INPUT -j limit-935 + inet6/filter/INPUT -j limit-935 + inet/filter/OUTPUT -j limit-935 + inet6/filter/OUTPUT -j limit-935 + inet/filter/limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 + inet6/filter/limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 + inet/filter/logdrop-339 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-339 -m limit --limit 1/second -j LOG + inet/filter/logdrop-339 -j DROP + inet6/filter/logdrop-339 -j DROP + inet/filter/limit-935 -m limit --limit 1/second -j LOG + inet6/filter/limit-935 -m limit --limit 1/second -j LOG + +Filter 937 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-936 + inet6/filter/FORWARD -j limit-936 + inet/filter/INPUT -j limit-936 + inet6/filter/INPUT -j limit-936 + inet/filter/OUTPUT -j limit-936 + inet6/filter/OUTPUT -j limit-936 + inet/filter/limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 + inet6/filter/limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 + inet/filter/logdrop-340 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-340 -m limit --limit 1/second -j LOG + inet/filter/logdrop-340 -j DROP + inet6/filter/logdrop-340 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 938 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-937 + inet6/filter/FORWARD -j limit-937 + inet/filter/INPUT -j limit-937 + inet6/filter/INPUT -j limit-937 + inet/filter/OUTPUT -j limit-937 + inet6/filter/OUTPUT -j limit-937 + inet/filter/limit-937 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 + inet6/filter/limit-937 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 + inet/filter/logdrop-341 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-341 -m limit --limit 1/second -j LOG + inet/filter/logdrop-341 -j DROP + inet6/filter/logdrop-341 -j DROP + +Filter 939 {"flow-limit":{"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-938 + inet6/filter/FORWARD -j limit-938 + inet/filter/INPUT -j limit-938 + inet6/filter/INPUT -j limit-938 + inet/filter/OUTPUT -j limit-938 + inet6/filter/OUTPUT -j limit-938 + inet/filter/limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 940 {"action":"pass","flow-limit":{"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-939 + inet6/filter/FORWARD -j limit-939 + inet/filter/INPUT -j limit-939 + inet6/filter/INPUT -j limit-939 + inet/filter/OUTPUT -j limit-939 + inet6/filter/OUTPUT -j limit-939 + inet/filter/limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 941 {"flow-limit":{"interval":5,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-940 + inet6/filter/FORWARD -j limit-940 + inet/filter/INPUT -j limit-940 + inet6/filter/INPUT -j limit-940 + inet/filter/OUTPUT -j limit-940 + inet6/filter/OUTPUT -j limit-940 + inet/filter/limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-37 + inet6/filter/FORWARD -j logaccept-final-37 + inet/filter/INPUT -j logaccept-final-37 + inet6/filter/INPUT -j logaccept-final-37 + inet/filter/OUTPUT -j logaccept-final-37 + inet6/filter/OUTPUT -j logaccept-final-37 + inet/filter/logaccept-final-37 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-37 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-37 -j ACCEPT + inet6/filter/logaccept-final-37 -j ACCEPT + +Filter 942 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-941 + inet6/filter/FORWARD -j limit-941 + inet/filter/INPUT -j limit-941 + inet6/filter/INPUT -j limit-941 + inet/filter/OUTPUT -j limit-941 + inet6/filter/OUTPUT -j limit-941 + inet/filter/limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 943 {"flow-limit":{"interval":5,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-942 + inet6/filter/FORWARD -j limit-942 + inet/filter/INPUT -j limit-942 + inet6/filter/INPUT -j limit-942 + inet/filter/OUTPUT -j limit-942 + inet6/filter/OUTPUT -j limit-942 + inet/filter/limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 944 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-943 + inet6/filter/FORWARD -j limit-943 + inet/filter/INPUT -j limit-943 + inet6/filter/INPUT -j limit-943 + inet/filter/OUTPUT -j limit-943 + inet6/filter/OUTPUT -j limit-943 + inet/filter/limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 945 {"flow-limit":{"interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-944 + inet6/filter/FORWARD -j limit-944 + inet/filter/INPUT -j limit-944 + inet6/filter/INPUT -j limit-944 + inet/filter/OUTPUT -j limit-944 + inet6/filter/OUTPUT -j limit-944 + inet/filter/limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 946 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-945 + inet6/filter/FORWARD -j limit-945 + inet/filter/INPUT -j limit-945 + inet6/filter/INPUT -j limit-945 + inet/filter/OUTPUT -j limit-945 + inet6/filter/OUTPUT -j limit-945 + inet/filter/limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 947 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-946 + inet6/filter/FORWARD -j limit-946 + inet/filter/INPUT -j limit-946 + inet6/filter/INPUT -j limit-946 + inet/filter/OUTPUT -j limit-946 + inet6/filter/OUTPUT -j limit-946 + inet/filter/limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-38 + inet6/filter/FORWARD -j logaccept-final-38 + inet/filter/INPUT -j logaccept-final-38 + inet6/filter/INPUT -j logaccept-final-38 + inet/filter/OUTPUT -j logaccept-final-38 + inet6/filter/OUTPUT -j logaccept-final-38 + inet/filter/logaccept-final-38 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-38 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-38 -j ACCEPT + inet6/filter/logaccept-final-38 -j ACCEPT + +Filter 948 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-947 + inet6/filter/FORWARD -j limit-947 + inet/filter/INPUT -j limit-947 + inet6/filter/INPUT -j limit-947 + inet/filter/OUTPUT -j limit-947 + inet6/filter/OUTPUT -j limit-947 + inet/filter/limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 949 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-948 + inet6/filter/FORWARD -j limit-948 + inet/filter/INPUT -j limit-948 + inet6/filter/INPUT -j limit-948 + inet/filter/OUTPUT -j limit-948 + inet6/filter/OUTPUT -j limit-948 + inet/filter/limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 950 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-949 + inet6/filter/FORWARD -j limit-949 + inet/filter/INPUT -j limit-949 + inet6/filter/INPUT -j limit-949 + inet/filter/OUTPUT -j limit-949 + inet6/filter/OUTPUT -j limit-949 + inet/filter/limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 951 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-950 + inet6/filter/FORWARD -j limit-950 + inet/filter/INPUT -j limit-950 + inet6/filter/INPUT -j limit-950 + inet/filter/OUTPUT -j limit-950 + inet6/filter/OUTPUT -j limit-950 + inet/filter/limit-950 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 952 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-951 + inet6/filter/FORWARD -j limit-951 + inet/filter/INPUT -j limit-951 + inet6/filter/INPUT -j limit-951 + inet/filter/OUTPUT -j limit-951 + inet6/filter/OUTPUT -j limit-951 + inet/filter/limit-951 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 953 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-952 + inet6/filter/FORWARD -j limit-952 + inet/filter/INPUT -j limit-952 + inet6/filter/INPUT -j limit-952 + inet/filter/OUTPUT -j limit-952 + inet6/filter/OUTPUT -j limit-952 + inet/filter/limit-952 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-39 + inet6/filter/FORWARD -j logaccept-final-39 + inet/filter/INPUT -j logaccept-final-39 + inet6/filter/INPUT -j logaccept-final-39 + inet/filter/OUTPUT -j logaccept-final-39 + inet6/filter/OUTPUT -j logaccept-final-39 + inet/filter/logaccept-final-39 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-39 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-39 -j ACCEPT + inet6/filter/logaccept-final-39 -j ACCEPT + +Filter 954 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-953 + inet6/filter/FORWARD -j limit-953 + inet/filter/INPUT -j limit-953 + inet6/filter/INPUT -j limit-953 + inet/filter/OUTPUT -j limit-953 + inet6/filter/OUTPUT -j limit-953 + inet/filter/limit-953 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-953 -m limit --limit 1/second -j LOG + inet6/filter/limit-953 -m limit --limit 1/second -j LOG + +Filter 955 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-954 + inet6/filter/FORWARD -j limit-954 + inet/filter/INPUT -j limit-954 + inet6/filter/INPUT -j limit-954 + inet/filter/OUTPUT -j limit-954 + inet6/filter/OUTPUT -j limit-954 + inet/filter/limit-954 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 956 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-955 + inet6/filter/FORWARD -j limit-955 + inet/filter/INPUT -j limit-955 + inet6/filter/INPUT -j limit-955 + inet/filter/OUTPUT -j limit-955 + inet6/filter/OUTPUT -j limit-955 + inet/filter/limit-955 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 957 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-956 + inet6/filter/FORWARD -j limit-956 + inet/filter/INPUT -j limit-956 + inet6/filter/INPUT -j limit-956 + inet/filter/OUTPUT -j limit-956 + inet6/filter/OUTPUT -j limit-956 + inet/filter/limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 958 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-957 + inet6/filter/FORWARD -j limit-957 + inet/filter/INPUT -j limit-957 + inet6/filter/INPUT -j limit-957 + inet/filter/OUTPUT -j limit-957 + inet6/filter/OUTPUT -j limit-957 + inet/filter/limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 959 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-958 + inet6/filter/FORWARD -j limit-958 + inet/filter/INPUT -j limit-958 + inet6/filter/INPUT -j limit-958 + inet/filter/OUTPUT -j limit-958 + inet6/filter/OUTPUT -j limit-958 + inet/filter/limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-40 + inet6/filter/FORWARD -j logaccept-final-40 + inet/filter/INPUT -j logaccept-final-40 + inet6/filter/INPUT -j logaccept-final-40 + inet/filter/OUTPUT -j logaccept-final-40 + inet6/filter/OUTPUT -j logaccept-final-40 + inet/filter/logaccept-final-40 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-40 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-40 -j ACCEPT + inet6/filter/logaccept-final-40 -j ACCEPT + +Filter 960 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-959 + inet6/filter/FORWARD -j limit-959 + inet/filter/INPUT -j limit-959 + inet6/filter/INPUT -j limit-959 + inet/filter/OUTPUT -j limit-959 + inet6/filter/OUTPUT -j limit-959 + inet/filter/limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 961 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-960 + inet6/filter/FORWARD -j limit-960 + inet/filter/INPUT -j limit-960 + inet6/filter/INPUT -j limit-960 + inet/filter/OUTPUT -j limit-960 + inet6/filter/OUTPUT -j limit-960 + inet/filter/limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 962 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-961 + inet6/filter/FORWARD -j limit-961 + inet/filter/INPUT -j limit-961 + inet6/filter/INPUT -j limit-961 + inet/filter/OUTPUT -j limit-961 + inet6/filter/OUTPUT -j limit-961 + inet/filter/limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 963 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-962 + inet6/filter/FORWARD -j limit-962 + inet/filter/INPUT -j limit-962 + inet6/filter/INPUT -j limit-962 + inet/filter/OUTPUT -j limit-962 + inet6/filter/OUTPUT -j limit-962 + inet/filter/limit-962 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-962 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 964 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-963 + inet6/filter/FORWARD -j limit-963 + inet/filter/INPUT -j limit-963 + inet6/filter/INPUT -j limit-963 + inet/filter/OUTPUT -j limit-963 + inet6/filter/OUTPUT -j limit-963 + inet/filter/limit-963 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-963 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 965 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-964 + inet6/filter/FORWARD -j limit-964 + inet/filter/INPUT -j limit-964 + inet6/filter/INPUT -j limit-964 + inet/filter/OUTPUT -j limit-964 + inet6/filter/OUTPUT -j limit-964 + inet/filter/limit-964 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-964 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-41 + inet6/filter/FORWARD -j logaccept-final-41 + inet/filter/INPUT -j logaccept-final-41 + inet6/filter/INPUT -j logaccept-final-41 + inet/filter/OUTPUT -j logaccept-final-41 + inet6/filter/OUTPUT -j logaccept-final-41 + inet/filter/logaccept-final-41 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-41 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-41 -j ACCEPT + inet6/filter/logaccept-final-41 -j ACCEPT + +Filter 966 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-965 + inet6/filter/FORWARD -j limit-965 + inet/filter/INPUT -j limit-965 + inet6/filter/INPUT -j limit-965 + inet/filter/OUTPUT -j limit-965 + inet6/filter/OUTPUT -j limit-965 + inet/filter/limit-965 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-965 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-965 -m limit --limit 1/second -j LOG + inet6/filter/limit-965 -m limit --limit 1/second -j LOG + +Filter 967 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-966 + inet6/filter/FORWARD -j limit-966 + inet/filter/INPUT -j limit-966 + inet6/filter/INPUT -j limit-966 + inet/filter/OUTPUT -j limit-966 + inet6/filter/OUTPUT -j limit-966 + inet/filter/limit-966 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-966 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 968 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-967 + inet6/filter/FORWARD -j limit-967 + inet/filter/INPUT -j limit-967 + inet6/filter/INPUT -j limit-967 + inet/filter/OUTPUT -j limit-967 + inet6/filter/OUTPUT -j limit-967 + inet/filter/limit-967 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-967 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 969 {"flow-limit":{"interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-968 + inet6/filter/FORWARD -j limit-968 + inet/filter/INPUT -j limit-968 + inet6/filter/INPUT -j limit-968 + inet/filter/OUTPUT -j limit-968 + inet6/filter/OUTPUT -j limit-968 + inet/filter/limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-968 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-968 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 970 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-969 + inet6/filter/FORWARD -j limit-969 + inet/filter/INPUT -j limit-969 + inet6/filter/INPUT -j limit-969 + inet/filter/OUTPUT -j limit-969 + inet6/filter/OUTPUT -j limit-969 + inet/filter/limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-969 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-969 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 971 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-970 + inet6/filter/FORWARD -j limit-970 + inet/filter/INPUT -j limit-970 + inet6/filter/INPUT -j limit-970 + inet/filter/OUTPUT -j limit-970 + inet6/filter/OUTPUT -j limit-970 + inet/filter/limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-970 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-970 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-42 + inet6/filter/FORWARD -j logaccept-final-42 + inet/filter/INPUT -j logaccept-final-42 + inet6/filter/INPUT -j logaccept-final-42 + inet/filter/OUTPUT -j logaccept-final-42 + inet6/filter/OUTPUT -j logaccept-final-42 + inet/filter/logaccept-final-42 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-42 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-42 -j ACCEPT + inet6/filter/logaccept-final-42 -j ACCEPT + +Filter 972 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-971 + inet6/filter/FORWARD -j limit-971 + inet/filter/INPUT -j limit-971 + inet6/filter/INPUT -j limit-971 + inet/filter/OUTPUT -j limit-971 + inet6/filter/OUTPUT -j limit-971 + inet/filter/limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-971 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-971 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 973 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-972 + inet6/filter/FORWARD -j limit-972 + inet/filter/INPUT -j limit-972 + inet6/filter/INPUT -j limit-972 + inet/filter/OUTPUT -j limit-972 + inet6/filter/OUTPUT -j limit-972 + inet/filter/limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-972 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-972 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 974 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-973 + inet6/filter/FORWARD -j limit-973 + inet/filter/INPUT -j limit-973 + inet6/filter/INPUT -j limit-973 + inet/filter/OUTPUT -j limit-973 + inet6/filter/OUTPUT -j limit-973 + inet/filter/limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-973 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-973 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 975 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-974 + inet6/filter/FORWARD -j limit-974 + inet/filter/INPUT -j limit-974 + inet6/filter/INPUT -j limit-974 + inet/filter/OUTPUT -j limit-974 + inet6/filter/OUTPUT -j limit-974 + inet/filter/limit-974 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-974 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 976 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-975 + inet6/filter/FORWARD -j limit-975 + inet/filter/INPUT -j limit-975 + inet6/filter/INPUT -j limit-975 + inet/filter/OUTPUT -j limit-975 + inet6/filter/OUTPUT -j limit-975 + inet/filter/limit-975 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-975 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 977 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-976 + inet6/filter/FORWARD -j limit-976 + inet/filter/INPUT -j limit-976 + inet6/filter/INPUT -j limit-976 + inet/filter/OUTPUT -j limit-976 + inet6/filter/OUTPUT -j limit-976 + inet/filter/limit-976 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-976 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-43 + inet6/filter/FORWARD -j logaccept-final-43 + inet/filter/INPUT -j logaccept-final-43 + inet6/filter/INPUT -j logaccept-final-43 + inet/filter/OUTPUT -j logaccept-final-43 + inet6/filter/OUTPUT -j logaccept-final-43 + inet/filter/logaccept-final-43 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-43 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-43 -j ACCEPT + inet6/filter/logaccept-final-43 -j ACCEPT + +Filter 978 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-977 + inet6/filter/FORWARD -j limit-977 + inet/filter/INPUT -j limit-977 + inet6/filter/INPUT -j limit-977 + inet/filter/OUTPUT -j limit-977 + inet6/filter/OUTPUT -j limit-977 + inet/filter/limit-977 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-977 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-977 -m limit --limit 1/second -j LOG + inet6/filter/limit-977 -m limit --limit 1/second -j LOG + +Filter 979 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-978 + inet6/filter/FORWARD -j limit-978 + inet/filter/INPUT -j limit-978 + inet6/filter/INPUT -j limit-978 + inet/filter/OUTPUT -j limit-978 + inet6/filter/OUTPUT -j limit-978 + inet/filter/limit-978 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-978 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 980 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-979 + inet6/filter/FORWARD -j limit-979 + inet/filter/INPUT -j limit-979 + inet6/filter/INPUT -j limit-979 + inet/filter/OUTPUT -j limit-979 + inet6/filter/OUTPUT -j limit-979 + inet/filter/limit-979 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-979 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 981 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-980 + inet6/filter/FORWARD -j limit-980 + inet/filter/INPUT -j limit-980 + inet6/filter/INPUT -j limit-980 + inet/filter/OUTPUT -j limit-980 + inet6/filter/OUTPUT -j limit-980 + inet/filter/limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-980 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-980 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 982 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-981 + inet6/filter/FORWARD -j limit-981 + inet/filter/INPUT -j limit-981 + inet6/filter/INPUT -j limit-981 + inet/filter/OUTPUT -j limit-981 + inet6/filter/OUTPUT -j limit-981 + inet/filter/limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-981 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-981 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 983 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-982 + inet6/filter/FORWARD -j limit-982 + inet/filter/INPUT -j limit-982 + inet6/filter/INPUT -j limit-982 + inet/filter/OUTPUT -j limit-982 + inet6/filter/OUTPUT -j limit-982 + inet/filter/limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-982 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-982 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-44 + inet6/filter/FORWARD -j logaccept-final-44 + inet/filter/INPUT -j logaccept-final-44 + inet6/filter/INPUT -j logaccept-final-44 + inet/filter/OUTPUT -j logaccept-final-44 + inet6/filter/OUTPUT -j logaccept-final-44 + inet/filter/logaccept-final-44 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-44 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-44 -j ACCEPT + inet6/filter/logaccept-final-44 -j ACCEPT + +Filter 984 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-983 + inet6/filter/FORWARD -j limit-983 + inet/filter/INPUT -j limit-983 + inet6/filter/INPUT -j limit-983 + inet/filter/OUTPUT -j limit-983 + inet6/filter/OUTPUT -j limit-983 + inet/filter/limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-983 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-983 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 985 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-984 + inet6/filter/FORWARD -j limit-984 + inet/filter/INPUT -j limit-984 + inet6/filter/INPUT -j limit-984 + inet/filter/OUTPUT -j limit-984 + inet6/filter/OUTPUT -j limit-984 + inet/filter/limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-984 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-984 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 986 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-985 + inet6/filter/FORWARD -j limit-985 + inet/filter/INPUT -j limit-985 + inet6/filter/INPUT -j limit-985 + inet/filter/OUTPUT -j limit-985 + inet6/filter/OUTPUT -j limit-985 + inet/filter/limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-985 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-985 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 987 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-986 + inet6/filter/FORWARD -j limit-986 + inet/filter/INPUT -j limit-986 + inet6/filter/INPUT -j limit-986 + inet/filter/OUTPUT -j limit-986 + inet6/filter/OUTPUT -j limit-986 + inet/filter/limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-986 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 988 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-987 + inet6/filter/FORWARD -j limit-987 + inet/filter/INPUT -j limit-987 + inet6/filter/INPUT -j limit-987 + inet/filter/OUTPUT -j limit-987 + inet6/filter/OUTPUT -j limit-987 + inet/filter/limit-987 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-987 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 989 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-988 + inet6/filter/FORWARD -j limit-988 + inet/filter/INPUT -j limit-988 + inet6/filter/INPUT -j limit-988 + inet/filter/OUTPUT -j limit-988 + inet6/filter/OUTPUT -j limit-988 + inet/filter/limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-988 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-45 + inet6/filter/FORWARD -j logaccept-final-45 + inet/filter/INPUT -j logaccept-final-45 + inet6/filter/INPUT -j logaccept-final-45 + inet/filter/OUTPUT -j logaccept-final-45 + inet6/filter/OUTPUT -j logaccept-final-45 + inet/filter/logaccept-final-45 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-45 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-45 -j ACCEPT + inet6/filter/logaccept-final-45 -j ACCEPT + +Filter 990 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-989 + inet6/filter/FORWARD -j limit-989 + inet/filter/INPUT -j limit-989 + inet6/filter/INPUT -j limit-989 + inet/filter/OUTPUT -j limit-989 + inet6/filter/OUTPUT -j limit-989 + inet/filter/limit-989 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-989 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-989 -m limit --limit 1/second -j LOG + inet6/filter/limit-989 -m limit --limit 1/second -j LOG + +Filter 991 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-990 + inet6/filter/FORWARD -j limit-990 + inet/filter/INPUT -j limit-990 + inet6/filter/INPUT -j limit-990 + inet/filter/OUTPUT -j limit-990 + inet6/filter/OUTPUT -j limit-990 + inet/filter/limit-990 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-990 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 992 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-991 + inet6/filter/FORWARD -j limit-991 + inet/filter/INPUT -j limit-991 + inet6/filter/INPUT -j limit-991 + inet/filter/OUTPUT -j limit-991 + inet6/filter/OUTPUT -j limit-991 + inet/filter/limit-991 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-991 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 993 {"flow-limit":{"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-992 + inet6/filter/FORWARD -j limit-992 + inet/filter/INPUT -j limit-992 + inet6/filter/INPUT -j limit-992 + inet/filter/OUTPUT -j limit-992 + inet6/filter/OUTPUT -j limit-992 + inet/filter/limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 994 {"action":"pass","flow-limit":{"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-993 + inet6/filter/FORWARD -j limit-993 + inet/filter/INPUT -j limit-993 + inet6/filter/INPUT -j limit-993 + inet/filter/OUTPUT -j limit-993 + inet6/filter/OUTPUT -j limit-993 + inet/filter/limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 995 {"flow-limit":{"interval":5,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-994 + inet6/filter/FORWARD -j limit-994 + inet/filter/INPUT -j limit-994 + inet6/filter/INPUT -j limit-994 + inet/filter/OUTPUT -j limit-994 + inet6/filter/OUTPUT -j limit-994 + inet/filter/limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-46 + inet6/filter/FORWARD -j logaccept-final-46 + inet/filter/INPUT -j logaccept-final-46 + inet6/filter/INPUT -j logaccept-final-46 + inet/filter/OUTPUT -j logaccept-final-46 + inet6/filter/OUTPUT -j logaccept-final-46 + inet/filter/logaccept-final-46 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-46 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-46 -j ACCEPT + inet6/filter/logaccept-final-46 -j ACCEPT + +Filter 996 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-995 + inet6/filter/FORWARD -j limit-995 + inet/filter/INPUT -j limit-995 + inet6/filter/INPUT -j limit-995 + inet/filter/OUTPUT -j limit-995 + inet6/filter/OUTPUT -j limit-995 + inet/filter/limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 997 {"flow-limit":{"interval":5,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-996 + inet6/filter/FORWARD -j limit-996 + inet/filter/INPUT -j limit-996 + inet6/filter/INPUT -j limit-996 + inet/filter/OUTPUT -j limit-996 + inet6/filter/OUTPUT -j limit-996 + inet/filter/limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 998 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-997 + inet6/filter/FORWARD -j limit-997 + inet/filter/INPUT -j limit-997 + inet6/filter/INPUT -j limit-997 + inet/filter/OUTPUT -j limit-997 + inet6/filter/OUTPUT -j limit-997 + inet/filter/limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 999 {"flow-limit":{"interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-998 + inet6/filter/FORWARD -j limit-998 + inet/filter/INPUT -j limit-998 + inet6/filter/INPUT -j limit-998 + inet/filter/OUTPUT -j limit-998 + inet6/filter/OUTPUT -j limit-998 + inet/filter/limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1000 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-999 + inet6/filter/FORWARD -j limit-999 + inet/filter/INPUT -j limit-999 + inet6/filter/INPUT -j limit-999 + inet/filter/OUTPUT -j limit-999 + inet6/filter/OUTPUT -j limit-999 + inet/filter/limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1001 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1000 + inet6/filter/FORWARD -j limit-1000 + inet/filter/INPUT -j limit-1000 + inet6/filter/INPUT -j limit-1000 + inet/filter/OUTPUT -j limit-1000 + inet6/filter/OUTPUT -j limit-1000 + inet/filter/limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-47 + inet6/filter/FORWARD -j logaccept-final-47 + inet/filter/INPUT -j logaccept-final-47 + inet6/filter/INPUT -j logaccept-final-47 + inet/filter/OUTPUT -j logaccept-final-47 + inet6/filter/OUTPUT -j logaccept-final-47 + inet/filter/logaccept-final-47 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-47 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-47 -j ACCEPT + inet6/filter/logaccept-final-47 -j ACCEPT + +Filter 1002 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1001 + inet6/filter/FORWARD -j limit-1001 + inet/filter/INPUT -j limit-1001 + inet6/filter/INPUT -j limit-1001 + inet/filter/OUTPUT -j limit-1001 + inet6/filter/OUTPUT -j limit-1001 + inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1003 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1002 + inet6/filter/FORWARD -j limit-1002 + inet/filter/INPUT -j limit-1002 + inet6/filter/INPUT -j limit-1002 + inet/filter/OUTPUT -j limit-1002 + inet6/filter/OUTPUT -j limit-1002 + inet/filter/limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1004 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1003 + inet6/filter/FORWARD -j limit-1003 + inet/filter/INPUT -j limit-1003 + inet6/filter/INPUT -j limit-1003 + inet/filter/OUTPUT -j limit-1003 + inet6/filter/OUTPUT -j limit-1003 + inet/filter/limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1005 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1004 + inet6/filter/FORWARD -j limit-1004 + inet/filter/INPUT -j limit-1004 + inet6/filter/INPUT -j limit-1004 + inet/filter/OUTPUT -j limit-1004 + inet6/filter/OUTPUT -j limit-1004 + inet/filter/limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1006 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1005 + inet6/filter/FORWARD -j limit-1005 + inet/filter/INPUT -j limit-1005 + inet6/filter/INPUT -j limit-1005 + inet/filter/OUTPUT -j limit-1005 + inet6/filter/OUTPUT -j limit-1005 + inet/filter/limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1007 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1006 + inet6/filter/FORWARD -j limit-1006 + inet/filter/INPUT -j limit-1006 + inet6/filter/INPUT -j limit-1006 + inet/filter/OUTPUT -j limit-1006 + inet6/filter/OUTPUT -j limit-1006 + inet/filter/limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-48 + inet6/filter/FORWARD -j logaccept-final-48 + inet/filter/INPUT -j logaccept-final-48 + inet6/filter/INPUT -j logaccept-final-48 + inet/filter/OUTPUT -j logaccept-final-48 + inet6/filter/OUTPUT -j logaccept-final-48 + inet/filter/logaccept-final-48 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-48 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-48 -j ACCEPT + inet6/filter/logaccept-final-48 -j ACCEPT + +Filter 1008 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1007 + inet6/filter/FORWARD -j limit-1007 + inet/filter/INPUT -j limit-1007 + inet6/filter/INPUT -j limit-1007 + inet/filter/OUTPUT -j limit-1007 + inet6/filter/OUTPUT -j limit-1007 + inet/filter/limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1007 -m limit --limit 1/second -j LOG + inet6/filter/limit-1007 -m limit --limit 1/second -j LOG + +Filter 1009 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1008 + inet6/filter/FORWARD -j limit-1008 + inet/filter/INPUT -j limit-1008 + inet6/filter/INPUT -j limit-1008 + inet/filter/OUTPUT -j limit-1008 + inet6/filter/OUTPUT -j limit-1008 + inet/filter/limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1010 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1009 + inet6/filter/FORWARD -j limit-1009 + inet/filter/INPUT -j limit-1009 + inet6/filter/INPUT -j limit-1009 + inet/filter/OUTPUT -j limit-1009 + inet6/filter/OUTPUT -j limit-1009 + inet/filter/limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1011 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-1010 + inet6/filter/FORWARD -j limit-1010 + inet/filter/INPUT -j limit-1010 + inet6/filter/INPUT -j limit-1010 + inet/filter/OUTPUT -j limit-1010 + inet6/filter/OUTPUT -j limit-1010 + inet/filter/limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1012 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-1011 + inet6/filter/FORWARD -j limit-1011 + inet/filter/INPUT -j limit-1011 + inet6/filter/INPUT -j limit-1011 + inet/filter/OUTPUT -j limit-1011 + inet6/filter/OUTPUT -j limit-1011 + inet/filter/limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1013 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1012 + inet6/filter/FORWARD -j limit-1012 + inet/filter/INPUT -j limit-1012 + inet6/filter/INPUT -j limit-1012 + inet/filter/OUTPUT -j limit-1012 + inet6/filter/OUTPUT -j limit-1012 + inet/filter/limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-49 + inet6/filter/FORWARD -j logaccept-final-49 + inet/filter/INPUT -j logaccept-final-49 + inet6/filter/INPUT -j logaccept-final-49 + inet/filter/OUTPUT -j logaccept-final-49 + inet6/filter/OUTPUT -j logaccept-final-49 + inet/filter/logaccept-final-49 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-49 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-49 -j ACCEPT + inet6/filter/logaccept-final-49 -j ACCEPT + +Filter 1014 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1013 + inet6/filter/FORWARD -j limit-1013 + inet/filter/INPUT -j limit-1013 + inet6/filter/INPUT -j limit-1013 + inet/filter/OUTPUT -j limit-1013 + inet6/filter/OUTPUT -j limit-1013 + inet/filter/limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1015 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1014 + inet6/filter/FORWARD -j limit-1014 + inet/filter/INPUT -j limit-1014 + inet6/filter/INPUT -j limit-1014 + inet/filter/OUTPUT -j limit-1014 + inet6/filter/OUTPUT -j limit-1014 + inet/filter/limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1016 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1015 + inet6/filter/FORWARD -j limit-1015 + inet/filter/INPUT -j limit-1015 + inet6/filter/INPUT -j limit-1015 + inet/filter/OUTPUT -j limit-1015 + inet6/filter/OUTPUT -j limit-1015 + inet/filter/limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1017 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1016 + inet6/filter/FORWARD -j limit-1016 + inet/filter/INPUT -j limit-1016 + inet6/filter/INPUT -j limit-1016 + inet/filter/OUTPUT -j limit-1016 + inet6/filter/OUTPUT -j limit-1016 + inet/filter/limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1018 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1017 + inet6/filter/FORWARD -j limit-1017 + inet/filter/INPUT -j limit-1017 + inet6/filter/INPUT -j limit-1017 + inet/filter/OUTPUT -j limit-1017 + inet6/filter/OUTPUT -j limit-1017 + inet/filter/limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1019 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1018 + inet6/filter/FORWARD -j limit-1018 + inet/filter/INPUT -j limit-1018 + inet6/filter/INPUT -j limit-1018 + inet/filter/OUTPUT -j limit-1018 + inet6/filter/OUTPUT -j limit-1018 + inet/filter/limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-50 + inet6/filter/FORWARD -j logaccept-final-50 + inet/filter/INPUT -j logaccept-final-50 + inet6/filter/INPUT -j logaccept-final-50 + inet/filter/OUTPUT -j logaccept-final-50 + inet6/filter/OUTPUT -j logaccept-final-50 + inet/filter/logaccept-final-50 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-50 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-50 -j ACCEPT + inet6/filter/logaccept-final-50 -j ACCEPT + +Filter 1020 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1019 + inet6/filter/FORWARD -j limit-1019 + inet/filter/INPUT -j limit-1019 + inet6/filter/INPUT -j limit-1019 + inet/filter/OUTPUT -j limit-1019 + inet6/filter/OUTPUT -j limit-1019 + inet/filter/limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1019 -m limit --limit 1/second -j LOG + inet6/filter/limit-1019 -m limit --limit 1/second -j LOG + +Filter 1021 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1020 + inet6/filter/FORWARD -j limit-1020 + inet/filter/INPUT -j limit-1020 + inet6/filter/INPUT -j limit-1020 + inet/filter/OUTPUT -j limit-1020 + inet6/filter/OUTPUT -j limit-1020 + inet/filter/limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1022 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1021 + inet6/filter/FORWARD -j limit-1021 + inet/filter/INPUT -j limit-1021 + inet6/filter/INPUT -j limit-1021 + inet/filter/OUTPUT -j limit-1021 + inet6/filter/OUTPUT -j limit-1021 + inet/filter/limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1023 {"flow-limit":{"interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-1022 + inet6/filter/FORWARD -j limit-1022 + inet/filter/INPUT -j limit-1022 + inet6/filter/INPUT -j limit-1022 + inet/filter/OUTPUT -j limit-1022 + inet6/filter/OUTPUT -j limit-1022 + inet/filter/limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1022 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1022 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1024 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-1023 + inet6/filter/FORWARD -j limit-1023 + inet/filter/INPUT -j limit-1023 + inet6/filter/INPUT -j limit-1023 + inet/filter/OUTPUT -j limit-1023 + inet6/filter/OUTPUT -j limit-1023 + inet/filter/limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1023 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1023 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1025 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1024 + inet6/filter/FORWARD -j limit-1024 + inet/filter/INPUT -j limit-1024 + inet6/filter/INPUT -j limit-1024 + inet/filter/OUTPUT -j limit-1024 + inet6/filter/OUTPUT -j limit-1024 + inet/filter/limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1024 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1024 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-51 + inet6/filter/FORWARD -j logaccept-final-51 + inet/filter/INPUT -j logaccept-final-51 + inet6/filter/INPUT -j logaccept-final-51 + inet/filter/OUTPUT -j logaccept-final-51 + inet6/filter/OUTPUT -j logaccept-final-51 + inet/filter/logaccept-final-51 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-51 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-51 -j ACCEPT + inet6/filter/logaccept-final-51 -j ACCEPT + +Filter 1026 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1025 + inet6/filter/FORWARD -j limit-1025 + inet/filter/INPUT -j limit-1025 + inet6/filter/INPUT -j limit-1025 + inet/filter/OUTPUT -j limit-1025 + inet6/filter/OUTPUT -j limit-1025 + inet/filter/limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1025 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1025 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1027 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1026 + inet6/filter/FORWARD -j limit-1026 + inet/filter/INPUT -j limit-1026 + inet6/filter/INPUT -j limit-1026 + inet/filter/OUTPUT -j limit-1026 + inet6/filter/OUTPUT -j limit-1026 + inet/filter/limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1026 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1026 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1028 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1027 + inet6/filter/FORWARD -j limit-1027 + inet/filter/INPUT -j limit-1027 + inet6/filter/INPUT -j limit-1027 + inet/filter/OUTPUT -j limit-1027 + inet6/filter/OUTPUT -j limit-1027 + inet/filter/limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1027 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1027 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1029 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1028 + inet6/filter/FORWARD -j limit-1028 + inet/filter/INPUT -j limit-1028 + inet6/filter/INPUT -j limit-1028 + inet/filter/OUTPUT -j limit-1028 + inet6/filter/OUTPUT -j limit-1028 + inet/filter/limit-1028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1030 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1029 + inet6/filter/FORWARD -j limit-1029 + inet/filter/INPUT -j limit-1029 + inet6/filter/INPUT -j limit-1029 + inet/filter/OUTPUT -j limit-1029 + inet6/filter/OUTPUT -j limit-1029 + inet/filter/limit-1029 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1029 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1031 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1030 + inet6/filter/FORWARD -j limit-1030 + inet/filter/INPUT -j limit-1030 + inet6/filter/INPUT -j limit-1030 + inet/filter/OUTPUT -j limit-1030 + inet6/filter/OUTPUT -j limit-1030 + inet/filter/limit-1030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-52 + inet6/filter/FORWARD -j logaccept-final-52 + inet/filter/INPUT -j logaccept-final-52 + inet6/filter/INPUT -j logaccept-final-52 + inet/filter/OUTPUT -j logaccept-final-52 + inet6/filter/OUTPUT -j logaccept-final-52 + inet/filter/logaccept-final-52 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-52 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-52 -j ACCEPT + inet6/filter/logaccept-final-52 -j ACCEPT + +Filter 1032 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1031 + inet6/filter/FORWARD -j limit-1031 + inet/filter/INPUT -j limit-1031 + inet6/filter/INPUT -j limit-1031 + inet/filter/OUTPUT -j limit-1031 + inet6/filter/OUTPUT -j limit-1031 + inet/filter/limit-1031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1031 -m limit --limit 1/second -j LOG + inet6/filter/limit-1031 -m limit --limit 1/second -j LOG + +Filter 1033 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1032 + inet6/filter/FORWARD -j limit-1032 + inet/filter/INPUT -j limit-1032 + inet6/filter/INPUT -j limit-1032 + inet/filter/OUTPUT -j limit-1032 + inet6/filter/OUTPUT -j limit-1032 + inet/filter/limit-1032 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1032 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1034 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1033 + inet6/filter/FORWARD -j limit-1033 + inet/filter/INPUT -j limit-1033 + inet6/filter/INPUT -j limit-1033 + inet/filter/OUTPUT -j limit-1033 + inet6/filter/OUTPUT -j limit-1033 + inet/filter/limit-1033 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1033 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1035 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-1034 + inet6/filter/FORWARD -j limit-1034 + inet/filter/INPUT -j limit-1034 + inet6/filter/INPUT -j limit-1034 + inet/filter/OUTPUT -j limit-1034 + inet6/filter/OUTPUT -j limit-1034 + inet/filter/limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1034 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1036 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-1035 + inet6/filter/FORWARD -j limit-1035 + inet/filter/INPUT -j limit-1035 + inet6/filter/INPUT -j limit-1035 + inet/filter/OUTPUT -j limit-1035 + inet6/filter/OUTPUT -j limit-1035 + inet/filter/limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1035 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1037 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1036 + inet6/filter/FORWARD -j limit-1036 + inet/filter/INPUT -j limit-1036 + inet6/filter/INPUT -j limit-1036 + inet/filter/OUTPUT -j limit-1036 + inet6/filter/OUTPUT -j limit-1036 + inet/filter/limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1036 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-53 + inet6/filter/FORWARD -j logaccept-final-53 + inet/filter/INPUT -j logaccept-final-53 + inet6/filter/INPUT -j logaccept-final-53 + inet/filter/OUTPUT -j logaccept-final-53 + inet6/filter/OUTPUT -j logaccept-final-53 + inet/filter/logaccept-final-53 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-53 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-53 -j ACCEPT + inet6/filter/logaccept-final-53 -j ACCEPT + +Filter 1038 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1037 + inet6/filter/FORWARD -j limit-1037 + inet/filter/INPUT -j limit-1037 + inet6/filter/INPUT -j limit-1037 + inet/filter/OUTPUT -j limit-1037 + inet6/filter/OUTPUT -j limit-1037 + inet/filter/limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1037 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1039 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1038 + inet6/filter/FORWARD -j limit-1038 + inet/filter/INPUT -j limit-1038 + inet6/filter/INPUT -j limit-1038 + inet/filter/OUTPUT -j limit-1038 + inet6/filter/OUTPUT -j limit-1038 + inet/filter/limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1038 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1040 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1039 + inet6/filter/FORWARD -j limit-1039 + inet/filter/INPUT -j limit-1039 + inet6/filter/INPUT -j limit-1039 + inet/filter/OUTPUT -j limit-1039 + inet6/filter/OUTPUT -j limit-1039 + inet/filter/limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1039 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1041 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1040 + inet6/filter/FORWARD -j limit-1040 + inet/filter/INPUT -j limit-1040 + inet6/filter/INPUT -j limit-1040 + inet/filter/OUTPUT -j limit-1040 + inet6/filter/OUTPUT -j limit-1040 + inet/filter/limit-1040 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1040 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1042 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1041 + inet6/filter/FORWARD -j limit-1041 + inet/filter/INPUT -j limit-1041 + inet6/filter/INPUT -j limit-1041 + inet/filter/OUTPUT -j limit-1041 + inet6/filter/OUTPUT -j limit-1041 + inet/filter/limit-1041 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1041 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1043 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1042 + inet6/filter/FORWARD -j limit-1042 + inet/filter/INPUT -j limit-1042 + inet6/filter/INPUT -j limit-1042 + inet/filter/OUTPUT -j limit-1042 + inet6/filter/OUTPUT -j limit-1042 + inet/filter/limit-1042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-54 + inet6/filter/FORWARD -j logaccept-final-54 + inet/filter/INPUT -j logaccept-final-54 + inet6/filter/INPUT -j logaccept-final-54 + inet/filter/OUTPUT -j logaccept-final-54 + inet6/filter/OUTPUT -j logaccept-final-54 + inet/filter/logaccept-final-54 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-54 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-54 -j ACCEPT + inet6/filter/logaccept-final-54 -j ACCEPT + +Filter 1044 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1043 + inet6/filter/FORWARD -j limit-1043 + inet/filter/INPUT -j limit-1043 + inet6/filter/INPUT -j limit-1043 + inet/filter/OUTPUT -j limit-1043 + inet6/filter/OUTPUT -j limit-1043 + inet/filter/limit-1043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1043 -m limit --limit 1/second -j LOG + inet6/filter/limit-1043 -m limit --limit 1/second -j LOG + +Filter 1045 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1044 + inet6/filter/FORWARD -j limit-1044 + inet/filter/INPUT -j limit-1044 + inet6/filter/INPUT -j limit-1044 + inet/filter/OUTPUT -j limit-1044 + inet6/filter/OUTPUT -j limit-1044 + inet/filter/limit-1044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1046 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1045 + inet6/filter/FORWARD -j limit-1045 + inet/filter/INPUT -j limit-1045 + inet6/filter/INPUT -j limit-1045 + inet/filter/OUTPUT -j limit-1045 + inet6/filter/OUTPUT -j limit-1045 + inet/filter/limit-1045 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1045 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1047 {"flow-limit":150} +(filter-limit) + inet/filter/FORWARD -j limit-1046 + inet6/filter/FORWARD -j limit-1046 + inet/filter/INPUT -j limit-1046 + inet6/filter/INPUT -j limit-1046 + inet/filter/OUTPUT -j limit-1046 + inet6/filter/OUTPUT -j limit-1046 + inet/filter/limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1046 -j RETURN + inet6/filter/limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1046 -j RETURN + inet/filter/limit-1046 -m limit --limit 1/second -j LOG + inet6/filter/limit-1046 -m limit --limit 1/second -j LOG + inet/filter/limit-1046 -j DROP + inet6/filter/limit-1046 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1048 {"action":"pass","flow-limit":150} +(filter-limit) + inet/filter/FORWARD -j limit-1047 + inet6/filter/FORWARD -j limit-1047 + inet/filter/INPUT -j limit-1047 + inet6/filter/INPUT -j limit-1047 + inet/filter/OUTPUT -j limit-1047 + inet6/filter/OUTPUT -j limit-1047 + inet/filter/limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1047 -j RETURN + inet6/filter/limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1047 -j RETURN + inet/filter/limit-1047 -m limit --limit 1/second -j LOG + inet6/filter/limit-1047 -m limit --limit 1/second -j LOG + inet/filter/limit-1047 -j DROP + inet6/filter/limit-1047 -j DROP + +Filter 1049 {"flow-limit":150,"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1048 + inet6/filter/FORWARD -j limit-1048 + inet/filter/INPUT -j limit-1048 + inet6/filter/INPUT -j limit-1048 + inet/filter/OUTPUT -j limit-1048 + inet6/filter/OUTPUT -j limit-1048 + inet/filter/limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j RETURN + inet6/filter/limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j RETURN + inet/filter/limit-1048 -m limit --limit 1/second -j LOG + inet6/filter/limit-1048 -m limit --limit 1/second -j LOG + inet/filter/limit-1048 -j DROP + inet6/filter/limit-1048 -j DROP + inet/filter/FORWARD -j logaccept-final-55 + inet6/filter/FORWARD -j logaccept-final-55 + inet/filter/INPUT -j logaccept-final-55 + inet6/filter/INPUT -j logaccept-final-55 + inet/filter/OUTPUT -j logaccept-final-55 + inet6/filter/OUTPUT -j logaccept-final-55 + inet/filter/logaccept-final-55 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-55 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-55 -j ACCEPT + inet6/filter/logaccept-final-55 -j ACCEPT + +Filter 1050 {"flow-limit":150,"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1049 + inet6/filter/FORWARD -j limit-1049 + inet/filter/INPUT -j limit-1049 + inet6/filter/INPUT -j limit-1049 + inet/filter/OUTPUT -j limit-1049 + inet6/filter/OUTPUT -j limit-1049 + inet/filter/limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1049 -j RETURN + inet6/filter/limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1049 -j RETURN + inet/filter/limit-1049 -m limit --limit 1/second -j LOG + inet6/filter/limit-1049 -m limit --limit 1/second -j LOG + inet/filter/limit-1049 -j DROP + inet6/filter/limit-1049 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1051 {"flow-limit":{"count":150}} +(filter-limit) + inet/filter/FORWARD -j limit-1050 + inet6/filter/FORWARD -j limit-1050 + inet/filter/INPUT -j limit-1050 + inet6/filter/INPUT -j limit-1050 + inet/filter/OUTPUT -j limit-1050 + inet6/filter/OUTPUT -j limit-1050 + inet/filter/limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1050 -j RETURN + inet6/filter/limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1050 -j RETURN + inet/filter/limit-1050 -m limit --limit 1/second -j LOG + inet6/filter/limit-1050 -m limit --limit 1/second -j LOG + inet/filter/limit-1050 -j DROP + inet6/filter/limit-1050 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1052 {"action":"pass","flow-limit":{"count":150}} +(filter-limit) + inet/filter/FORWARD -j limit-1051 + inet6/filter/FORWARD -j limit-1051 + inet/filter/INPUT -j limit-1051 + inet6/filter/INPUT -j limit-1051 + inet/filter/OUTPUT -j limit-1051 + inet6/filter/OUTPUT -j limit-1051 + inet/filter/limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1051 -j RETURN + inet6/filter/limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1051 -j RETURN + inet/filter/limit-1051 -m limit --limit 1/second -j LOG + inet6/filter/limit-1051 -m limit --limit 1/second -j LOG + inet/filter/limit-1051 -j DROP + inet6/filter/limit-1051 -j DROP + +Filter 1053 {"flow-limit":{"count":150},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1052 + inet6/filter/FORWARD -j limit-1052 + inet/filter/INPUT -j limit-1052 + inet6/filter/INPUT -j limit-1052 + inet/filter/OUTPUT -j limit-1052 + inet6/filter/OUTPUT -j limit-1052 + inet/filter/limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j RETURN + inet6/filter/limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j RETURN + inet/filter/limit-1052 -m limit --limit 1/second -j LOG + inet6/filter/limit-1052 -m limit --limit 1/second -j LOG + inet/filter/limit-1052 -j DROP + inet6/filter/limit-1052 -j DROP + inet/filter/FORWARD -j logaccept-final-56 + inet6/filter/FORWARD -j logaccept-final-56 + inet/filter/INPUT -j logaccept-final-56 + inet6/filter/INPUT -j logaccept-final-56 + inet/filter/OUTPUT -j logaccept-final-56 + inet6/filter/OUTPUT -j logaccept-final-56 + inet/filter/logaccept-final-56 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-56 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-56 -j ACCEPT + inet6/filter/logaccept-final-56 -j ACCEPT + +Filter 1054 {"flow-limit":{"count":150},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1053 + inet6/filter/FORWARD -j limit-1053 + inet/filter/INPUT -j limit-1053 + inet6/filter/INPUT -j limit-1053 + inet/filter/OUTPUT -j limit-1053 + inet6/filter/OUTPUT -j limit-1053 + inet/filter/limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1053 -j RETURN + inet6/filter/limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1053 -j RETURN + inet/filter/limit-1053 -m limit --limit 1/second -j LOG + inet6/filter/limit-1053 -m limit --limit 1/second -j LOG + inet/filter/limit-1053 -j DROP + inet6/filter/limit-1053 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1055 {"flow-limit":{"count":150,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1054 + inet6/filter/FORWARD -j limit-1054 + inet/filter/INPUT -j limit-1054 + inet6/filter/INPUT -j limit-1054 + inet/filter/OUTPUT -j limit-1054 + inet6/filter/OUTPUT -j limit-1054 + inet/filter/limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1054 -j RETURN + inet6/filter/limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1054 -j RETURN + inet/filter/limit-1054 -j DROP + inet6/filter/limit-1054 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1056 {"action":"pass","flow-limit":{"count":150,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1055 + inet6/filter/FORWARD -j limit-1055 + inet/filter/INPUT -j limit-1055 + inet6/filter/INPUT -j limit-1055 + inet/filter/OUTPUT -j limit-1055 + inet6/filter/OUTPUT -j limit-1055 + inet/filter/limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1055 -j RETURN + inet6/filter/limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1055 -j RETURN + inet/filter/limit-1055 -j DROP + inet6/filter/limit-1055 -j DROP + +Filter 1057 {"flow-limit":{"count":150,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1056 + inet6/filter/FORWARD -j limit-1056 + inet/filter/INPUT -j limit-1056 + inet6/filter/INPUT -j limit-1056 + inet/filter/OUTPUT -j limit-1056 + inet6/filter/OUTPUT -j limit-1056 + inet/filter/limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j RETURN + inet6/filter/limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j RETURN + inet/filter/limit-1056 -j DROP + inet6/filter/limit-1056 -j DROP + inet/filter/FORWARD -j logaccept-final-57 + inet6/filter/FORWARD -j logaccept-final-57 + inet/filter/INPUT -j logaccept-final-57 + inet6/filter/INPUT -j logaccept-final-57 + inet/filter/OUTPUT -j logaccept-final-57 + inet6/filter/OUTPUT -j logaccept-final-57 + inet/filter/logaccept-final-57 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-57 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-57 -j ACCEPT + inet6/filter/logaccept-final-57 -j ACCEPT + +Filter 1058 {"flow-limit":{"count":150,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1057 + inet6/filter/FORWARD -j limit-1057 + inet/filter/INPUT -j limit-1057 + inet6/filter/INPUT -j limit-1057 + inet/filter/OUTPUT -j limit-1057 + inet6/filter/OUTPUT -j limit-1057 + inet/filter/limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1057 -j RETURN + inet6/filter/limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1057 -j RETURN + inet/filter/limit-1057 -j DROP + inet6/filter/limit-1057 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1059 {"flow-limit":{"count":150,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-1058 + inet6/filter/FORWARD -j limit-1058 + inet/filter/INPUT -j limit-1058 + inet6/filter/INPUT -j limit-1058 + inet/filter/OUTPUT -j limit-1058 + inet6/filter/OUTPUT -j limit-1058 + inet/filter/limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1058 -j RETURN + inet6/filter/limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1058 -j RETURN + inet/filter/limit-1058 -j DROP + inet6/filter/limit-1058 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1060 {"action":"pass","flow-limit":{"count":150,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-1059 + inet6/filter/FORWARD -j limit-1059 + inet/filter/INPUT -j limit-1059 + inet6/filter/INPUT -j limit-1059 + inet/filter/OUTPUT -j limit-1059 + inet6/filter/OUTPUT -j limit-1059 + inet/filter/limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1059 -j RETURN + inet6/filter/limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1059 -j RETURN + inet/filter/limit-1059 -j DROP + inet6/filter/limit-1059 -j DROP + +Filter 1061 {"flow-limit":{"count":150,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1060 + inet6/filter/FORWARD -j limit-1060 + inet/filter/INPUT -j limit-1060 + inet6/filter/INPUT -j limit-1060 + inet/filter/OUTPUT -j limit-1060 + inet6/filter/OUTPUT -j limit-1060 + inet/filter/limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j RETURN + inet6/filter/limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j RETURN + inet/filter/limit-1060 -j DROP + inet6/filter/limit-1060 -j DROP + inet/filter/FORWARD -j logaccept-final-58 + inet6/filter/FORWARD -j logaccept-final-58 + inet/filter/INPUT -j logaccept-final-58 + inet6/filter/INPUT -j logaccept-final-58 + inet/filter/OUTPUT -j logaccept-final-58 + inet6/filter/OUTPUT -j logaccept-final-58 + inet/filter/logaccept-final-58 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-58 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-58 -j ACCEPT + inet6/filter/logaccept-final-58 -j ACCEPT + +Filter 1062 {"flow-limit":{"count":150,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1061 + inet6/filter/FORWARD -j limit-1061 + inet/filter/INPUT -j limit-1061 + inet6/filter/INPUT -j limit-1061 + inet/filter/OUTPUT -j limit-1061 + inet6/filter/OUTPUT -j limit-1061 + inet/filter/limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1061 -j RETURN + inet6/filter/limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1061 -j RETURN + inet/filter/limit-1061 -j DROP + inet6/filter/limit-1061 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1063 {"flow-limit":{"count":150,"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-1062 + inet6/filter/FORWARD -j limit-1062 + inet/filter/INPUT -j limit-1062 + inet6/filter/INPUT -j limit-1062 + inet/filter/OUTPUT -j limit-1062 + inet6/filter/OUTPUT -j limit-1062 + inet/filter/limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1062 -j RETURN + inet6/filter/limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1062 -j RETURN + inet/filter/limit-1062 -m limit --limit 1/second -j LOG + inet6/filter/limit-1062 -m limit --limit 1/second -j LOG + inet/filter/limit-1062 -j DROP + inet6/filter/limit-1062 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1064 {"action":"pass","flow-limit":{"count":150,"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-1063 + inet6/filter/FORWARD -j limit-1063 + inet/filter/INPUT -j limit-1063 + inet6/filter/INPUT -j limit-1063 + inet/filter/OUTPUT -j limit-1063 + inet6/filter/OUTPUT -j limit-1063 + inet/filter/limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1063 -j RETURN + inet6/filter/limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1063 -j RETURN + inet/filter/limit-1063 -m limit --limit 1/second -j LOG + inet6/filter/limit-1063 -m limit --limit 1/second -j LOG + inet/filter/limit-1063 -j DROP + inet6/filter/limit-1063 -j DROP + +Filter 1065 {"flow-limit":{"count":150,"interval":5},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1064 + inet6/filter/FORWARD -j limit-1064 + inet/filter/INPUT -j limit-1064 + inet6/filter/INPUT -j limit-1064 + inet/filter/OUTPUT -j limit-1064 + inet6/filter/OUTPUT -j limit-1064 + inet/filter/limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j RETURN + inet6/filter/limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j RETURN + inet/filter/limit-1064 -m limit --limit 1/second -j LOG + inet6/filter/limit-1064 -m limit --limit 1/second -j LOG + inet/filter/limit-1064 -j DROP + inet6/filter/limit-1064 -j DROP + inet/filter/FORWARD -j logaccept-final-59 + inet6/filter/FORWARD -j logaccept-final-59 + inet/filter/INPUT -j logaccept-final-59 + inet6/filter/INPUT -j logaccept-final-59 + inet/filter/OUTPUT -j logaccept-final-59 + inet6/filter/OUTPUT -j logaccept-final-59 + inet/filter/logaccept-final-59 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-59 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-59 -j ACCEPT + inet6/filter/logaccept-final-59 -j ACCEPT + +Filter 1066 {"flow-limit":{"count":150,"interval":5},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1065 + inet6/filter/FORWARD -j limit-1065 + inet/filter/INPUT -j limit-1065 + inet6/filter/INPUT -j limit-1065 + inet/filter/OUTPUT -j limit-1065 + inet6/filter/OUTPUT -j limit-1065 + inet/filter/limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1065 -j RETURN + inet6/filter/limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1065 -j RETURN + inet/filter/limit-1065 -m limit --limit 1/second -j LOG + inet6/filter/limit-1065 -m limit --limit 1/second -j LOG + inet/filter/limit-1065 -j DROP + inet6/filter/limit-1065 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1067 {"flow-limit":{"count":150,"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1066 + inet6/filter/FORWARD -j limit-1066 + inet/filter/INPUT -j limit-1066 + inet6/filter/INPUT -j limit-1066 + inet/filter/OUTPUT -j limit-1066 + inet6/filter/OUTPUT -j limit-1066 + inet/filter/limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1066 -j RETURN + inet6/filter/limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1066 -j RETURN + inet/filter/limit-1066 -j DROP + inet6/filter/limit-1066 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1068 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1067 + inet6/filter/FORWARD -j limit-1067 + inet/filter/INPUT -j limit-1067 + inet6/filter/INPUT -j limit-1067 + inet/filter/OUTPUT -j limit-1067 + inet6/filter/OUTPUT -j limit-1067 + inet/filter/limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1067 -j RETURN + inet6/filter/limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1067 -j RETURN + inet/filter/limit-1067 -j DROP + inet6/filter/limit-1067 -j DROP + +Filter 1069 {"flow-limit":{"count":150,"interval":5,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1068 + inet6/filter/FORWARD -j limit-1068 + inet/filter/INPUT -j limit-1068 + inet6/filter/INPUT -j limit-1068 + inet/filter/OUTPUT -j limit-1068 + inet6/filter/OUTPUT -j limit-1068 + inet/filter/limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j RETURN + inet6/filter/limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j RETURN + inet/filter/limit-1068 -j DROP + inet6/filter/limit-1068 -j DROP + inet/filter/FORWARD -j logaccept-final-60 + inet6/filter/FORWARD -j logaccept-final-60 + inet/filter/INPUT -j logaccept-final-60 + inet6/filter/INPUT -j logaccept-final-60 + inet/filter/OUTPUT -j logaccept-final-60 + inet6/filter/OUTPUT -j logaccept-final-60 + inet/filter/logaccept-final-60 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-60 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-60 -j ACCEPT + inet6/filter/logaccept-final-60 -j ACCEPT + +Filter 1070 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1069 + inet6/filter/FORWARD -j limit-1069 + inet/filter/INPUT -j limit-1069 + inet6/filter/INPUT -j limit-1069 + inet/filter/OUTPUT -j limit-1069 + inet6/filter/OUTPUT -j limit-1069 + inet/filter/limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1069 -j RETURN + inet6/filter/limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1069 -j RETURN + inet/filter/limit-1069 -j DROP + inet6/filter/limit-1069 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1071 {"flow-limit":{"count":150,"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-1070 + inet6/filter/FORWARD -j limit-1070 + inet/filter/INPUT -j limit-1070 + inet6/filter/INPUT -j limit-1070 + inet/filter/OUTPUT -j limit-1070 + inet6/filter/OUTPUT -j limit-1070 + inet/filter/limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1070 -j RETURN + inet6/filter/limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1070 -j RETURN + inet/filter/limit-1070 -j DROP + inet6/filter/limit-1070 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1072 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-1071 + inet6/filter/FORWARD -j limit-1071 + inet/filter/INPUT -j limit-1071 + inet6/filter/INPUT -j limit-1071 + inet/filter/OUTPUT -j limit-1071 + inet6/filter/OUTPUT -j limit-1071 + inet/filter/limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1071 -j RETURN + inet6/filter/limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1071 -j RETURN + inet/filter/limit-1071 -j DROP + inet6/filter/limit-1071 -j DROP + +Filter 1073 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1072 + inet6/filter/FORWARD -j limit-1072 + inet/filter/INPUT -j limit-1072 + inet6/filter/INPUT -j limit-1072 + inet/filter/OUTPUT -j limit-1072 + inet6/filter/OUTPUT -j limit-1072 + inet/filter/limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j RETURN + inet6/filter/limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j RETURN + inet/filter/limit-1072 -j DROP + inet6/filter/limit-1072 -j DROP + inet/filter/FORWARD -j logaccept-final-61 + inet6/filter/FORWARD -j logaccept-final-61 + inet/filter/INPUT -j logaccept-final-61 + inet6/filter/INPUT -j logaccept-final-61 + inet/filter/OUTPUT -j logaccept-final-61 + inet6/filter/OUTPUT -j logaccept-final-61 + inet/filter/logaccept-final-61 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-61 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-61 -j ACCEPT + inet6/filter/logaccept-final-61 -j ACCEPT + +Filter 1074 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1073 + inet6/filter/FORWARD -j limit-1073 + inet/filter/INPUT -j limit-1073 + inet6/filter/INPUT -j limit-1073 + inet/filter/OUTPUT -j limit-1073 + inet6/filter/OUTPUT -j limit-1073 + inet/filter/limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1073 -j RETURN + inet6/filter/limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1073 -j RETURN + inet/filter/limit-1073 -j DROP + inet6/filter/limit-1073 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1075 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1074 + inet6/filter/INPUT -i eth0 -j limit-1074 + inet/filter/limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-342 + inet6/filter/limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-342 + inet/filter/logdrop-342 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-342 -m limit --limit 1/second -j LOG + inet/filter/logdrop-342 -j DROP + inet6/filter/logdrop-342 -j DROP + inet/filter/limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1076 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1075 + inet6/filter/INPUT -i eth0 -j limit-1075 + inet/filter/limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-343 + inet6/filter/limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-343 + inet/filter/logdrop-343 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-343 -m limit --limit 1/second -j LOG + inet/filter/logdrop-343 -j DROP + inet6/filter/logdrop-343 -j DROP + inet/filter/limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1077 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1076 + inet6/filter/INPUT -i eth0 -j limit-1076 + inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-344 + inet6/filter/limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-344 + inet/filter/logdrop-344 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-344 -m limit --limit 1/second -j LOG + inet/filter/logdrop-344 -j DROP + inet6/filter/logdrop-344 -j DROP + inet/filter/limit-1076 -m limit --limit 1/second -j LOG + inet6/filter/limit-1076 -m limit --limit 1/second -j LOG + inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1078 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1077 + inet6/filter/INPUT -i eth0 -j limit-1077 + inet/filter/limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-345 + inet6/filter/limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-345 + inet/filter/logdrop-345 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-345 -m limit --limit 1/second -j LOG + inet/filter/logdrop-345 -j DROP + inet6/filter/logdrop-345 -j DROP + inet/filter/limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1079 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1078 + inet6/filter/INPUT -i eth0 -j limit-1078 + inet/filter/limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-346 + inet6/filter/limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-346 + inet/filter/logdrop-346 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-346 -m limit --limit 1/second -j LOG + inet/filter/logdrop-346 -j DROP + inet6/filter/logdrop-346 -j DROP + inet/filter/limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1080 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1079 + inet6/filter/INPUT -i eth0 -j limit-1079 + inet/filter/limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-347 + inet6/filter/limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-347 + inet/filter/logdrop-347 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-347 -m limit --limit 1/second -j LOG + inet/filter/logdrop-347 -j DROP + inet6/filter/logdrop-347 -j DROP + inet/filter/limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1081 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1080 + inet6/filter/INPUT -i eth0 -j limit-1080 + inet/filter/limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-348 + inet6/filter/limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-348 + inet/filter/logdrop-348 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-348 -m limit --limit 1/second -j LOG + inet/filter/logdrop-348 -j DROP + inet6/filter/logdrop-348 -j DROP + inet/filter/limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1082 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1081 + inet6/filter/INPUT -i eth0 -j limit-1081 + inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-349 + inet6/filter/limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-349 + inet/filter/logdrop-349 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-349 -m limit --limit 1/second -j LOG + inet/filter/logdrop-349 -j DROP + inet6/filter/logdrop-349 -j DROP + inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1083 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1082 + inet6/filter/INPUT -i eth0 -j limit-1082 + inet/filter/limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-350 + inet6/filter/limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-350 + inet/filter/logdrop-350 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-350 -m limit --limit 1/second -j LOG + inet/filter/logdrop-350 -j DROP + inet6/filter/logdrop-350 -j DROP + inet/filter/limit-1082 -m limit --limit 1/second -j LOG + inet6/filter/limit-1082 -m limit --limit 1/second -j LOG + inet/filter/limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1084 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1083 + inet6/filter/INPUT -i eth0 -j limit-1083 + inet/filter/limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-351 + inet6/filter/limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-351 + inet/filter/logdrop-351 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-351 -m limit --limit 1/second -j LOG + inet/filter/logdrop-351 -j DROP + inet6/filter/logdrop-351 -j DROP + inet/filter/limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1085 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1084 + inet6/filter/INPUT -i eth0 -j limit-1084 + inet/filter/limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-352 + inet6/filter/limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-352 + inet/filter/logdrop-352 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-352 -m limit --limit 1/second -j LOG + inet/filter/logdrop-352 -j DROP + inet6/filter/logdrop-352 -j DROP + inet/filter/limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1086 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1085 + inet6/filter/INPUT -i eth0 -j limit-1085 + inet/filter/limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-353 + inet6/filter/limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-353 + inet/filter/logdrop-353 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-353 -m limit --limit 1/second -j LOG + inet/filter/logdrop-353 -j DROP + inet6/filter/logdrop-353 -j DROP + inet/filter/limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1087 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1086 + inet6/filter/INPUT -i eth0 -j limit-1086 + inet/filter/limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-354 + inet6/filter/limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-354 + inet/filter/logdrop-354 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-354 -m limit --limit 1/second -j LOG + inet/filter/logdrop-354 -j DROP + inet6/filter/logdrop-354 -j DROP + inet/filter/limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1088 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1087 + inet6/filter/INPUT -i eth0 -j limit-1087 + inet/filter/limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-355 + inet6/filter/limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-355 + inet/filter/logdrop-355 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-355 -m limit --limit 1/second -j LOG + inet/filter/logdrop-355 -j DROP + inet6/filter/logdrop-355 -j DROP + inet/filter/limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1089 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1088 + inet6/filter/INPUT -i eth0 -j limit-1088 + inet/filter/limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-356 + inet6/filter/limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-356 + inet/filter/logdrop-356 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-356 -m limit --limit 1/second -j LOG + inet/filter/logdrop-356 -j DROP + inet6/filter/logdrop-356 -j DROP + inet/filter/limit-1088 -m limit --limit 1/second -j LOG + inet6/filter/limit-1088 -m limit --limit 1/second -j LOG + inet/filter/limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1090 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1089 + inet6/filter/INPUT -i eth0 -j limit-1089 + inet/filter/limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-357 + inet6/filter/limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-357 + inet/filter/logdrop-357 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-357 -m limit --limit 1/second -j LOG + inet/filter/logdrop-357 -j DROP + inet6/filter/logdrop-357 -j DROP + inet/filter/limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1091 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1090 + inet6/filter/INPUT -i eth0 -j limit-1090 + inet/filter/limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-358 + inet6/filter/limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-358 + inet/filter/logdrop-358 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-358 -m limit --limit 1/second -j LOG + inet/filter/logdrop-358 -j DROP + inet6/filter/logdrop-358 -j DROP + inet/filter/limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1092 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1091 + inet6/filter/INPUT -i eth0 -j limit-1091 + inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-359 + inet6/filter/limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-359 + inet/filter/logdrop-359 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-359 -m limit --limit 1/second -j LOG + inet/filter/logdrop-359 -j DROP + inet6/filter/logdrop-359 -j DROP + inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1093 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1092 + inet6/filter/INPUT -i eth0 -j limit-1092 + inet/filter/limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-360 + inet6/filter/limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-360 + inet/filter/logdrop-360 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-360 -m limit --limit 1/second -j LOG + inet/filter/logdrop-360 -j DROP + inet6/filter/logdrop-360 -j DROP + inet/filter/limit-1092 -j ACCEPT + inet6/filter/limit-1092 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1094 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-361 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-361 + inet/filter/logdrop-361 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-361 -m limit --limit 1/second -j LOG + inet/filter/logdrop-361 -j DROP + inet6/filter/logdrop-361 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1095 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1094 + inet6/filter/INPUT -i eth0 -j limit-1094 + inet/filter/limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-362 + inet6/filter/limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-362 + inet/filter/logdrop-362 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-362 -m limit --limit 1/second -j LOG + inet/filter/logdrop-362 -j DROP + inet6/filter/logdrop-362 -j DROP + inet/filter/limit-1094 -m limit --limit 1/second -j LOG + inet6/filter/limit-1094 -m limit --limit 1/second -j LOG + inet/filter/limit-1094 -j ACCEPT + inet6/filter/limit-1094 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1096 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1095 + inet6/filter/INPUT -i eth0 -j limit-1095 + inet/filter/limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-363 + inet6/filter/limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-363 + inet/filter/logdrop-363 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-363 -m limit --limit 1/second -j LOG + inet/filter/logdrop-363 -j DROP + inet6/filter/logdrop-363 -j DROP + inet/filter/limit-1095 -m limit --limit 1/second -j LOG + inet6/filter/limit-1095 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1097 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1096 + inet6/filter/INPUT -i eth0 -j limit-1096 + inet/filter/limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-364 + inet6/filter/limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-364 + inet/filter/logdrop-364 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-364 -m limit --limit 1/second -j LOG + inet/filter/logdrop-364 -j DROP + inet6/filter/logdrop-364 -j DROP + inet/filter/limit-1096 -j ACCEPT + inet6/filter/limit-1096 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1098 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-365 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-365 + inet/filter/logdrop-365 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-365 -m limit --limit 1/second -j LOG + inet/filter/logdrop-365 -j DROP + inet6/filter/logdrop-365 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1099 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1098 + inet6/filter/INPUT -i eth0 -j limit-1098 + inet/filter/limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-366 + inet6/filter/limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-366 + inet/filter/logdrop-366 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-366 -m limit --limit 1/second -j LOG + inet/filter/logdrop-366 -j DROP + inet6/filter/logdrop-366 -j DROP + inet/filter/limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1100 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1099 + inet6/filter/INPUT -i eth0 -j limit-1099 + inet/filter/limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-367 + inet6/filter/limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-367 + inet/filter/logdrop-367 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-367 -m limit --limit 1/second -j LOG + inet/filter/logdrop-367 -j DROP + inet6/filter/logdrop-367 -j DROP + inet/filter/limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1101 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1100 + inet6/filter/INPUT -i eth0 -j limit-1100 + inet/filter/limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-368 + inet6/filter/limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-368 + inet/filter/logdrop-368 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-368 -m limit --limit 1/second -j LOG + inet/filter/logdrop-368 -j DROP + inet6/filter/logdrop-368 -j DROP + inet/filter/limit-1100 -m limit --limit 1/second -j LOG + inet6/filter/limit-1100 -m limit --limit 1/second -j LOG + inet/filter/limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1102 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1101 + inet6/filter/INPUT -i eth0 -j limit-1101 + inet/filter/limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-369 + inet6/filter/limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-369 + inet/filter/logdrop-369 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-369 -m limit --limit 1/second -j LOG + inet/filter/logdrop-369 -j DROP + inet6/filter/logdrop-369 -j DROP + inet/filter/limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1103 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1102 + inet6/filter/INPUT -i eth0 -j limit-1102 + inet/filter/limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-370 + inet6/filter/limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-370 + inet/filter/logdrop-370 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-370 -m limit --limit 1/second -j LOG + inet/filter/logdrop-370 -j DROP + inet6/filter/logdrop-370 -j DROP + inet/filter/limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1104 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1103 + inet6/filter/INPUT -i eth0 -j limit-1103 + inet/filter/limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-371 + inet6/filter/limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-371 + inet/filter/logdrop-371 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-371 -m limit --limit 1/second -j LOG + inet/filter/logdrop-371 -j DROP + inet6/filter/logdrop-371 -j DROP + inet/filter/limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1105 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1104 + inet6/filter/INPUT -i eth0 -j limit-1104 + inet/filter/limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-372 + inet6/filter/limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-372 + inet/filter/logdrop-372 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-372 -m limit --limit 1/second -j LOG + inet/filter/logdrop-372 -j DROP + inet6/filter/logdrop-372 -j DROP + inet/filter/limit-1104 -j ACCEPT + inet6/filter/limit-1104 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1106 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-373 + inet/filter/logdrop-373 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-373 -m limit --limit 1/second -j LOG + inet/filter/logdrop-373 -j DROP + inet6/filter/logdrop-373 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1107 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1106 + inet6/filter/INPUT -i eth0 -j limit-1106 + inet/filter/limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 + inet6/filter/limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-374 + inet/filter/logdrop-374 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-374 -m limit --limit 1/second -j LOG + inet/filter/logdrop-374 -j DROP + inet6/filter/logdrop-374 -j DROP + inet/filter/limit-1106 -m limit --limit 1/second -j LOG + inet6/filter/limit-1106 -m limit --limit 1/second -j LOG + inet/filter/limit-1106 -j ACCEPT + inet6/filter/limit-1106 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1108 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1107 + inet6/filter/INPUT -i eth0 -j limit-1107 + inet/filter/limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 + inet6/filter/limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-375 + inet/filter/logdrop-375 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-375 -m limit --limit 1/second -j LOG + inet/filter/logdrop-375 -j DROP + inet6/filter/logdrop-375 -j DROP + inet/filter/limit-1107 -m limit --limit 1/second -j LOG + inet6/filter/limit-1107 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1109 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1108 + inet6/filter/INPUT -i eth0 -j limit-1108 + inet/filter/limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-376 + inet6/filter/limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-376 + inet/filter/logdrop-376 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-376 -m limit --limit 1/second -j LOG + inet/filter/logdrop-376 -j DROP + inet6/filter/logdrop-376 -j DROP + inet/filter/limit-1108 -j ACCEPT + inet6/filter/limit-1108 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1110 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-377 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-377 + inet/filter/logdrop-377 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-377 -m limit --limit 1/second -j LOG + inet/filter/logdrop-377 -j DROP + inet6/filter/logdrop-377 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1111 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1110 + inet6/filter/INPUT -i eth0 -j limit-1110 + inet/filter/limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-378 + inet6/filter/limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-378 + inet/filter/logdrop-378 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-378 -m limit --limit 1/second -j LOG + inet/filter/logdrop-378 -j DROP + inet6/filter/logdrop-378 -j DROP + inet/filter/limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1110 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1112 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1111 + inet6/filter/INPUT -i eth0 -j limit-1111 + inet/filter/limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-379 + inet6/filter/limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-379 + inet/filter/logdrop-379 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-379 -m limit --limit 1/second -j LOG + inet/filter/logdrop-379 -j DROP + inet6/filter/logdrop-379 -j DROP + inet/filter/limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1111 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1113 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1112 + inet6/filter/INPUT -i eth0 -j limit-1112 + inet/filter/limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-380 + inet6/filter/limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-380 + inet/filter/logdrop-380 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-380 -m limit --limit 1/second -j LOG + inet/filter/logdrop-380 -j DROP + inet6/filter/logdrop-380 -j DROP + inet/filter/limit-1112 -m limit --limit 1/second -j LOG + inet6/filter/limit-1112 -m limit --limit 1/second -j LOG + inet/filter/limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1112 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1114 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1113 + inet6/filter/INPUT -i eth0 -j limit-1113 + inet/filter/limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-381 + inet6/filter/limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-381 + inet/filter/logdrop-381 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-381 -m limit --limit 1/second -j LOG + inet/filter/logdrop-381 -j DROP + inet6/filter/logdrop-381 -j DROP + inet/filter/limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1113 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1115 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1114 + inet6/filter/INPUT -i eth0 -j limit-1114 + inet/filter/limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-382 + inet6/filter/limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-382 + inet/filter/logdrop-382 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-382 -m limit --limit 1/second -j LOG + inet/filter/logdrop-382 -j DROP + inet6/filter/logdrop-382 -j DROP + inet/filter/limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1114 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1116 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1115 + inet6/filter/INPUT -i eth0 -j limit-1115 + inet/filter/limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-383 + inet6/filter/limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-383 + inet/filter/logdrop-383 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-383 -m limit --limit 1/second -j LOG + inet/filter/logdrop-383 -j DROP + inet6/filter/logdrop-383 -j DROP + inet/filter/limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1115 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1117 {"flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1116 + inet6/filter/INPUT -i eth0 -j limit-1116 + inet/filter/limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-384 + inet6/filter/limit-1116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-384 + inet/filter/logdrop-384 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-384 -m limit --limit 1/second -j LOG + inet/filter/logdrop-384 -j DROP + inet6/filter/logdrop-384 -j DROP + inet/filter/limit-1116 -j ACCEPT + inet6/filter/limit-1116 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1118 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-385 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-385 + inet/filter/logdrop-385 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-385 -m limit --limit 1/second -j LOG + inet/filter/logdrop-385 -j DROP + inet6/filter/logdrop-385 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1119 {"flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1118 + inet6/filter/INPUT -i eth0 -j limit-1118 + inet/filter/limit-1118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-386 + inet6/filter/limit-1118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-386 + inet/filter/logdrop-386 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-386 -m limit --limit 1/second -j LOG + inet/filter/logdrop-386 -j DROP + inet6/filter/logdrop-386 -j DROP + inet/filter/limit-1118 -m limit --limit 1/second -j LOG + inet6/filter/limit-1118 -m limit --limit 1/second -j LOG + inet/filter/limit-1118 -j ACCEPT + inet6/filter/limit-1118 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1120 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1119 + inet6/filter/INPUT -i eth0 -j limit-1119 + inet/filter/limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-387 + inet6/filter/limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-387 + inet/filter/logdrop-387 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-387 -m limit --limit 1/second -j LOG + inet/filter/logdrop-387 -j DROP + inet6/filter/logdrop-387 -j DROP + inet/filter/limit-1119 -m limit --limit 1/second -j LOG + inet6/filter/limit-1119 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1121 {"flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1120 + inet6/filter/INPUT -i eth0 -j limit-1120 + inet/filter/limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-388 + inet6/filter/limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-388 + inet/filter/logdrop-388 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-388 -m limit --limit 1/second -j LOG + inet/filter/logdrop-388 -j DROP + inet6/filter/logdrop-388 -j DROP + inet/filter/limit-1120 -j ACCEPT + inet6/filter/limit-1120 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1122 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-389 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-389 + inet/filter/logdrop-389 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-389 -m limit --limit 1/second -j LOG + inet/filter/logdrop-389 -j DROP + inet6/filter/logdrop-389 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1123 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1122 + inet6/filter/INPUT -i eth0 -j limit-1122 + inet/filter/limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-390 + inet6/filter/limit-1122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-390 + inet/filter/logdrop-390 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-390 -m limit --limit 1/second -j LOG + inet/filter/logdrop-390 -j DROP + inet6/filter/logdrop-390 -j DROP + inet/filter/limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1122 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1124 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1123 + inet6/filter/INPUT -i eth0 -j limit-1123 + inet/filter/limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-391 + inet6/filter/limit-1123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-391 + inet/filter/logdrop-391 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-391 -m limit --limit 1/second -j LOG + inet/filter/logdrop-391 -j DROP + inet6/filter/logdrop-391 -j DROP + inet/filter/limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1123 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1125 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1124 + inet6/filter/INPUT -i eth0 -j limit-1124 + inet/filter/limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-392 + inet6/filter/limit-1124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-392 + inet/filter/logdrop-392 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-392 -m limit --limit 1/second -j LOG + inet/filter/logdrop-392 -j DROP + inet6/filter/logdrop-392 -j DROP + inet/filter/limit-1124 -m limit --limit 1/second -j LOG + inet6/filter/limit-1124 -m limit --limit 1/second -j LOG + inet/filter/limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1124 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1126 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1125 + inet6/filter/INPUT -i eth0 -j limit-1125 + inet/filter/limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-393 + inet6/filter/limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-393 + inet/filter/logdrop-393 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-393 -m limit --limit 1/second -j LOG + inet/filter/logdrop-393 -j DROP + inet6/filter/logdrop-393 -j DROP + inet/filter/limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1125 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1127 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1126 + inet6/filter/INPUT -i eth0 -j limit-1126 + inet/filter/limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-394 + inet6/filter/limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-394 + inet/filter/logdrop-394 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-394 -m limit --limit 1/second -j LOG + inet/filter/logdrop-394 -j DROP + inet6/filter/logdrop-394 -j DROP + inet/filter/limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1126 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1128 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1127 + inet6/filter/INPUT -i eth0 -j limit-1127 + inet/filter/limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-395 + inet6/filter/limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-395 + inet/filter/logdrop-395 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-395 -m limit --limit 1/second -j LOG + inet/filter/logdrop-395 -j DROP + inet6/filter/logdrop-395 -j DROP + inet/filter/limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1127 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1129 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1128 + inet6/filter/INPUT -i eth0 -j limit-1128 + inet/filter/limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-396 + inet6/filter/limit-1128 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-396 + inet/filter/logdrop-396 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-396 -m limit --limit 1/second -j LOG + inet/filter/logdrop-396 -j DROP + inet6/filter/logdrop-396 -j DROP + inet/filter/limit-1128 -j ACCEPT + inet6/filter/limit-1128 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1130 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-397 + inet/filter/logdrop-397 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-397 -m limit --limit 1/second -j LOG + inet/filter/logdrop-397 -j DROP + inet6/filter/logdrop-397 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1131 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1130 + inet6/filter/INPUT -i eth0 -j limit-1130 + inet/filter/limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 + inet6/filter/limit-1130 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-398 + inet/filter/logdrop-398 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-398 -m limit --limit 1/second -j LOG + inet/filter/logdrop-398 -j DROP + inet6/filter/logdrop-398 -j DROP + inet/filter/limit-1130 -m limit --limit 1/second -j LOG + inet6/filter/limit-1130 -m limit --limit 1/second -j LOG + inet/filter/limit-1130 -j ACCEPT + inet6/filter/limit-1130 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1132 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1131 + inet6/filter/INPUT -i eth0 -j limit-1131 + inet/filter/limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 + inet6/filter/limit-1131 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-399 + inet/filter/logdrop-399 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-399 -m limit --limit 1/second -j LOG + inet/filter/logdrop-399 -j DROP + inet6/filter/logdrop-399 -j DROP + inet/filter/limit-1131 -m limit --limit 1/second -j LOG + inet6/filter/limit-1131 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1133 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1132 + inet6/filter/INPUT -i eth0 -j limit-1132 + inet/filter/limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-400 + inet6/filter/limit-1132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-400 + inet/filter/logdrop-400 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-400 -m limit --limit 1/second -j LOG + inet/filter/logdrop-400 -j DROP + inet6/filter/logdrop-400 -j DROP + inet/filter/limit-1132 -j ACCEPT + inet6/filter/limit-1132 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1134 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-401 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-401 + inet/filter/logdrop-401 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-401 -m limit --limit 1/second -j LOG + inet/filter/logdrop-401 -j DROP + inet6/filter/logdrop-401 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1135 {"flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1134 + inet6/filter/INPUT -i eth0 -j limit-1134 + inet/filter/limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1136 {"action":"pass","flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1135 + inet6/filter/INPUT -i eth0 -j limit-1135 + inet/filter/limit-1135 -m recent --name limit-1135 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1135 -m recent --name limit-1135 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1135 -m recent --name limit-1135 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1135 -m recent --name limit-1135 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1137 {"flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1136 + inet6/filter/INPUT -i eth0 -j limit-1136 + inet/filter/limit-1136 -m recent --name limit-1136 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1136 -m recent --name limit-1136 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1136 -m limit --limit 1/second -j LOG + inet6/filter/limit-1136 -m limit --limit 1/second -j LOG + inet/filter/limit-1136 -m recent --name limit-1136 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1136 -m recent --name limit-1136 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1138 {"action":"pass","flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1137 + inet6/filter/INPUT -i eth0 -j limit-1137 + inet/filter/limit-1137 -m recent --name limit-1137 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1137 -m recent --name limit-1137 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1137 -m recent --name limit-1137 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1137 -m recent --name limit-1137 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1139 {"flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1138 + inet6/filter/INPUT -i eth0 -j limit-1138 + inet/filter/limit-1138 -m recent --name limit-1138 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1138 -m recent --name limit-1138 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1138 -m recent --name limit-1138 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1138 -m recent --name limit-1138 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1140 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1139 + inet6/filter/INPUT -i eth0 -j limit-1139 + inet/filter/limit-1139 -m recent --name limit-1139 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1139 -m recent --name limit-1139 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1139 -m recent --name limit-1139 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1139 -m recent --name limit-1139 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1141 {"flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1140 + inet6/filter/INPUT -i eth0 -j limit-1140 + inet/filter/limit-1140 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1140 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1142 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1141 + inet6/filter/INPUT -i eth0 -j limit-1141 + inet/filter/limit-1141 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1141 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1143 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1142 + inet6/filter/INPUT -i eth0 -j limit-1142 + inet/filter/limit-1142 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1142 -m limit --limit 1/second -j LOG + inet6/filter/limit-1142 -m limit --limit 1/second -j LOG + inet/filter/limit-1142 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1144 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1143 + inet6/filter/INPUT -i eth0 -j limit-1143 + inet/filter/limit-1143 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1143 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1145 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1144 + inet6/filter/INPUT -i eth0 -j limit-1144 + inet/filter/limit-1144 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1144 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1146 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1145 + inet6/filter/INPUT -i eth0 -j limit-1145 + inet/filter/limit-1145 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1145 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1145 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1145 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1147 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1146 + inet6/filter/INPUT -i eth0 -j limit-1146 + inet/filter/limit-1146 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1146 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1146 -j ACCEPT + inet6/filter/limit-1146 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1148 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1149 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1148 + inet6/filter/INPUT -i eth0 -j limit-1148 + inet/filter/limit-1148 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1148 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1148 -m limit --limit 1/second -j LOG + inet6/filter/limit-1148 -m limit --limit 1/second -j LOG + inet/filter/limit-1148 -j ACCEPT + inet6/filter/limit-1148 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1150 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1149 + inet6/filter/INPUT -i eth0 -j limit-1149 + inet/filter/limit-1149 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1149 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1149 -m limit --limit 1/second -j LOG + inet6/filter/limit-1149 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1151 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1150 + inet6/filter/INPUT -i eth0 -j limit-1150 + inet/filter/limit-1150 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1150 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1150 -j ACCEPT + inet6/filter/limit-1150 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1152 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1153 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1152 + inet6/filter/INPUT -i eth0 -j limit-1152 + inet/filter/limit-1152 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1152 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1154 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1153 + inet6/filter/INPUT -i eth0 -j limit-1153 + inet/filter/limit-1153 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1153 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1155 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1154 + inet6/filter/INPUT -i eth0 -j limit-1154 + inet/filter/limit-1154 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1154 -m limit --limit 1/second -j LOG + inet6/filter/limit-1154 -m limit --limit 1/second -j LOG + inet/filter/limit-1154 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1156 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1155 + inet6/filter/INPUT -i eth0 -j limit-1155 + inet/filter/limit-1155 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1155 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1157 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1156 + inet6/filter/INPUT -i eth0 -j limit-1156 + inet/filter/limit-1156 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1156 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1158 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1157 + inet6/filter/INPUT -i eth0 -j limit-1157 + inet/filter/limit-1157 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1157 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1159 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1158 + inet6/filter/INPUT -i eth0 -j limit-1158 + inet/filter/limit-1158 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1158 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1158 -j ACCEPT + inet6/filter/limit-1158 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1160 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1161 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1160 + inet6/filter/INPUT -i eth0 -j limit-1160 + inet/filter/limit-1160 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1160 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1160 -m limit --limit 1/second -j LOG + inet6/filter/limit-1160 -m limit --limit 1/second -j LOG + inet/filter/limit-1160 -j ACCEPT + inet6/filter/limit-1160 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1162 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1161 + inet6/filter/INPUT -i eth0 -j limit-1161 + inet/filter/limit-1161 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1161 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1161 -m limit --limit 1/second -j LOG + inet6/filter/limit-1161 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1163 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1162 + inet6/filter/INPUT -i eth0 -j limit-1162 + inet/filter/limit-1162 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1162 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1162 -j ACCEPT + inet6/filter/limit-1162 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1164 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1165 {"flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1164 + inet6/filter/INPUT -i eth0 -j limit-1164 + inet/filter/limit-1164 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1164 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1164 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1164 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1166 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1165 + inet6/filter/INPUT -i eth0 -j limit-1165 + inet/filter/limit-1165 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1165 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1165 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1165 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1167 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1166 + inet6/filter/INPUT -i eth0 -j limit-1166 + inet/filter/limit-1166 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1166 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1166 -m limit --limit 1/second -j LOG + inet6/filter/limit-1166 -m limit --limit 1/second -j LOG + inet/filter/limit-1166 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1166 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1168 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1167 + inet6/filter/INPUT -i eth0 -j limit-1167 + inet/filter/limit-1167 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1167 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1167 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1167 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1169 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1168 + inet6/filter/INPUT -i eth0 -j limit-1168 + inet/filter/limit-1168 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1168 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1168 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1168 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1170 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1169 + inet6/filter/INPUT -i eth0 -j limit-1169 + inet/filter/limit-1169 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1169 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1169 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1169 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1171 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1170 + inet6/filter/INPUT -i eth0 -j limit-1170 + inet/filter/limit-1170 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1170 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1170 -j ACCEPT + inet6/filter/limit-1170 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1172 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1173 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1172 + inet6/filter/INPUT -i eth0 -j limit-1172 + inet/filter/limit-1172 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1172 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1172 -m limit --limit 1/second -j LOG + inet6/filter/limit-1172 -m limit --limit 1/second -j LOG + inet/filter/limit-1172 -j ACCEPT + inet6/filter/limit-1172 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1174 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1173 + inet6/filter/INPUT -i eth0 -j limit-1173 + inet/filter/limit-1173 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1173 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1173 -m limit --limit 1/second -j LOG + inet6/filter/limit-1173 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1175 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1174 + inet6/filter/INPUT -i eth0 -j limit-1174 + inet/filter/limit-1174 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1174 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1174 -j ACCEPT + inet6/filter/limit-1174 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1176 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1177 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1176 + inet6/filter/INPUT -i eth0 -j limit-1176 + inet/filter/limit-1176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1178 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1177 + inet6/filter/INPUT -i eth0 -j limit-1177 + inet/filter/limit-1177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1177 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1177 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1179 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1178 + inet6/filter/INPUT -i eth0 -j limit-1178 + inet/filter/limit-1178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1178 -m limit --limit 1/second -j LOG + inet6/filter/limit-1178 -m limit --limit 1/second -j LOG + inet/filter/limit-1178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1180 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1179 + inet6/filter/INPUT -i eth0 -j limit-1179 + inet/filter/limit-1179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1179 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1181 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1180 + inet6/filter/INPUT -i eth0 -j limit-1180 + inet/filter/limit-1180 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1180 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1180 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1180 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1182 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1181 + inet6/filter/INPUT -i eth0 -j limit-1181 + inet/filter/limit-1181 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1181 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1181 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1181 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1183 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1182 + inet6/filter/INPUT -i eth0 -j limit-1182 + inet/filter/limit-1182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1182 -j ACCEPT + inet6/filter/limit-1182 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1184 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1185 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1184 + inet6/filter/INPUT -i eth0 -j limit-1184 + inet/filter/limit-1184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1184 -m limit --limit 1/second -j LOG + inet6/filter/limit-1184 -m limit --limit 1/second -j LOG + inet/filter/limit-1184 -j ACCEPT + inet6/filter/limit-1184 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1186 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1185 + inet6/filter/INPUT -i eth0 -j limit-1185 + inet/filter/limit-1185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1185 -m limit --limit 1/second -j LOG + inet6/filter/limit-1185 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1187 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1186 + inet6/filter/INPUT -i eth0 -j limit-1186 + inet/filter/limit-1186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1186 -j ACCEPT + inet6/filter/limit-1186 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1188 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1189 {"flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1188 + inet6/filter/INPUT -i eth0 -j limit-1188 + inet/filter/limit-1188 -m recent --name limit-1188 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1188 -m recent --name limit-1188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1188 -m recent --name limit-1188 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1188 -m recent --name limit-1188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1190 {"action":"pass","flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1189 + inet6/filter/INPUT -i eth0 -j limit-1189 + inet/filter/limit-1189 -m recent --name limit-1189 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1189 -m recent --name limit-1189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1189 -m recent --name limit-1189 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1189 -m recent --name limit-1189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1191 {"flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1190 + inet6/filter/INPUT -i eth0 -j limit-1190 + inet/filter/limit-1190 -m recent --name limit-1190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1190 -m recent --name limit-1190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1190 -m limit --limit 1/second -j LOG + inet6/filter/limit-1190 -m limit --limit 1/second -j LOG + inet/filter/limit-1190 -m recent --name limit-1190 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1190 -m recent --name limit-1190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1192 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1191 + inet6/filter/INPUT -i eth0 -j limit-1191 + inet/filter/limit-1191 -m recent --name limit-1191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1191 -m recent --name limit-1191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1191 -m recent --name limit-1191 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1191 -m recent --name limit-1191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1193 {"flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1192 + inet6/filter/INPUT -i eth0 -j limit-1192 + inet/filter/limit-1192 -m recent --name limit-1192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1192 -m recent --name limit-1192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1192 -m recent --name limit-1192 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1192 -m recent --name limit-1192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1194 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1193 + inet6/filter/INPUT -i eth0 -j limit-1193 + inet/filter/limit-1193 -m recent --name limit-1193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1193 -m recent --name limit-1193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1193 -m recent --name limit-1193 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1193 -m recent --name limit-1193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1195 {"flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1194 + inet6/filter/INPUT -i eth0 -j limit-1194 + inet/filter/limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1196 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1195 + inet6/filter/INPUT -i eth0 -j limit-1195 + inet/filter/limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1197 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1196 + inet6/filter/INPUT -i eth0 -j limit-1196 + inet/filter/limit-1196 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1196 -m limit --limit 1/second -j LOG + inet6/filter/limit-1196 -m limit --limit 1/second -j LOG + inet/filter/limit-1196 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1198 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1197 + inet6/filter/INPUT -i eth0 -j limit-1197 + inet/filter/limit-1197 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1197 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1199 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1198 + inet6/filter/INPUT -i eth0 -j limit-1198 + inet/filter/limit-1198 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1198 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1200 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1199 + inet6/filter/INPUT -i eth0 -j limit-1199 + inet/filter/limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1201 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1200 + inet6/filter/INPUT -i eth0 -j limit-1200 + inet/filter/limit-1200 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1200 -j ACCEPT + inet6/filter/limit-1200 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1202 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1203 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1202 + inet6/filter/INPUT -i eth0 -j limit-1202 + inet/filter/limit-1202 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1202 -m limit --limit 1/second -j LOG + inet6/filter/limit-1202 -m limit --limit 1/second -j LOG + inet/filter/limit-1202 -j ACCEPT + inet6/filter/limit-1202 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1204 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1203 + inet6/filter/INPUT -i eth0 -j limit-1203 + inet/filter/limit-1203 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1203 -m limit --limit 1/second -j LOG + inet6/filter/limit-1203 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1205 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1204 + inet6/filter/INPUT -i eth0 -j limit-1204 + inet/filter/limit-1204 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1204 -j ACCEPT + inet6/filter/limit-1204 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1206 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1207 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1206 + inet6/filter/INPUT -i eth0 -j limit-1206 + inet/filter/limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1208 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1207 + inet6/filter/INPUT -i eth0 -j limit-1207 + inet/filter/limit-1207 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1207 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1209 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1208 + inet6/filter/INPUT -i eth0 -j limit-1208 + inet/filter/limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1208 -m limit --limit 1/second -j LOG + inet6/filter/limit-1208 -m limit --limit 1/second -j LOG + inet/filter/limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1210 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1209 + inet6/filter/INPUT -i eth0 -j limit-1209 + inet/filter/limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1211 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1210 + inet6/filter/INPUT -i eth0 -j limit-1210 + inet/filter/limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1212 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1211 + inet6/filter/INPUT -i eth0 -j limit-1211 + inet/filter/limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1213 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1212 + inet6/filter/INPUT -i eth0 -j limit-1212 + inet/filter/limit-1212 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1212 -j ACCEPT + inet6/filter/limit-1212 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1214 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1215 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1214 + inet6/filter/INPUT -i eth0 -j limit-1214 + inet/filter/limit-1214 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1214 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1214 -m limit --limit 1/second -j LOG + inet6/filter/limit-1214 -m limit --limit 1/second -j LOG + inet/filter/limit-1214 -j ACCEPT + inet6/filter/limit-1214 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1216 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1215 + inet6/filter/INPUT -i eth0 -j limit-1215 + inet/filter/limit-1215 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1215 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1215 -m limit --limit 1/second -j LOG + inet6/filter/limit-1215 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1217 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1216 + inet6/filter/INPUT -i eth0 -j limit-1216 + inet/filter/limit-1216 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1216 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1216 -j ACCEPT + inet6/filter/limit-1216 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1218 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1219 {"flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1218 + inet6/filter/INPUT -i eth0 -j limit-1218 + inet/filter/limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1218 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1218 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1220 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1219 + inet6/filter/INPUT -i eth0 -j limit-1219 + inet/filter/limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1219 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1219 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1221 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1220 + inet6/filter/INPUT -i eth0 -j limit-1220 + inet/filter/limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1220 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1220 -m limit --limit 1/second -j LOG + inet6/filter/limit-1220 -m limit --limit 1/second -j LOG + inet/filter/limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1220 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1222 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1221 + inet6/filter/INPUT -i eth0 -j limit-1221 + inet/filter/limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1221 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1221 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1223 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1222 + inet6/filter/INPUT -i eth0 -j limit-1222 + inet/filter/limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1222 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1222 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1224 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1223 + inet6/filter/INPUT -i eth0 -j limit-1223 + inet/filter/limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1223 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1223 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1225 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1224 + inet6/filter/INPUT -i eth0 -j limit-1224 + inet/filter/limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1224 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1224 -j ACCEPT + inet6/filter/limit-1224 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1226 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1227 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1226 + inet6/filter/INPUT -i eth0 -j limit-1226 + inet/filter/limit-1226 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1226 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1226 -m limit --limit 1/second -j LOG + inet6/filter/limit-1226 -m limit --limit 1/second -j LOG + inet/filter/limit-1226 -j ACCEPT + inet6/filter/limit-1226 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1228 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1227 + inet6/filter/INPUT -i eth0 -j limit-1227 + inet/filter/limit-1227 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1227 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1227 -m limit --limit 1/second -j LOG + inet6/filter/limit-1227 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1229 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1228 + inet6/filter/INPUT -i eth0 -j limit-1228 + inet/filter/limit-1228 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1228 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1228 -j ACCEPT + inet6/filter/limit-1228 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1230 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1231 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1230 + inet6/filter/INPUT -i eth0 -j limit-1230 + inet/filter/limit-1230 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1230 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1230 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1230 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1232 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1231 + inet6/filter/INPUT -i eth0 -j limit-1231 + inet/filter/limit-1231 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1231 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1231 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1231 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1233 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1232 + inet6/filter/INPUT -i eth0 -j limit-1232 + inet/filter/limit-1232 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1232 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1232 -m limit --limit 1/second -j LOG + inet6/filter/limit-1232 -m limit --limit 1/second -j LOG + inet/filter/limit-1232 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1232 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1234 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1233 + inet6/filter/INPUT -i eth0 -j limit-1233 + inet/filter/limit-1233 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1233 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1233 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1233 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1235 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1234 + inet6/filter/INPUT -i eth0 -j limit-1234 + inet/filter/limit-1234 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1234 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1234 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1234 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1236 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1235 + inet6/filter/INPUT -i eth0 -j limit-1235 + inet/filter/limit-1235 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1235 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1235 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1235 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1237 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1236 + inet6/filter/INPUT -i eth0 -j limit-1236 + inet/filter/limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1236 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1236 -j ACCEPT + inet6/filter/limit-1236 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1238 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1239 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1238 + inet6/filter/INPUT -i eth0 -j limit-1238 + inet/filter/limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1238 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1238 -m limit --limit 1/second -j LOG + inet6/filter/limit-1238 -m limit --limit 1/second -j LOG + inet/filter/limit-1238 -j ACCEPT + inet6/filter/limit-1238 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1240 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1239 + inet6/filter/INPUT -i eth0 -j limit-1239 + inet/filter/limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1239 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1239 -m limit --limit 1/second -j LOG + inet6/filter/limit-1239 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1241 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1240 + inet6/filter/INPUT -i eth0 -j limit-1240 + inet/filter/limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1240 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1240 -j ACCEPT + inet6/filter/limit-1240 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1242 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1243 {"flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1242 + inet6/filter/INPUT -i eth0 -j limit-1242 + inet/filter/limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-402 + inet6/filter/limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-402 + inet/filter/logdrop-402 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-402 -m limit --limit 1/second -j LOG + inet/filter/logdrop-402 -j DROP + inet6/filter/logdrop-402 -j DROP + inet/filter/limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1244 {"action":"pass","flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1243 + inet6/filter/INPUT -i eth0 -j limit-1243 + inet/filter/limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 + inet6/filter/limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 + inet/filter/logdrop-403 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-403 -m limit --limit 1/second -j LOG + inet/filter/logdrop-403 -j DROP + inet6/filter/logdrop-403 -j DROP + inet/filter/limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1245 {"flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1244 + inet6/filter/INPUT -i eth0 -j limit-1244 + inet/filter/limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 + inet6/filter/limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 + inet/filter/logdrop-404 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-404 -m limit --limit 1/second -j LOG + inet/filter/logdrop-404 -j DROP + inet6/filter/logdrop-404 -j DROP + inet/filter/limit-1244 -m limit --limit 1/second -j LOG + inet6/filter/limit-1244 -m limit --limit 1/second -j LOG + inet/filter/limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1246 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1245 + inet6/filter/INPUT -i eth0 -j limit-1245 + inet/filter/limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 + inet6/filter/limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 + inet/filter/logdrop-405 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-405 -m limit --limit 1/second -j LOG + inet/filter/logdrop-405 -j DROP + inet6/filter/logdrop-405 -j DROP + inet/filter/limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1247 {"flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1246 + inet6/filter/INPUT -i eth0 -j limit-1246 + inet/filter/limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 + inet6/filter/limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 + inet/filter/logdrop-406 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-406 -m limit --limit 1/second -j LOG + inet/filter/logdrop-406 -j DROP + inet6/filter/logdrop-406 -j DROP + inet/filter/limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1248 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1247 + inet6/filter/INPUT -i eth0 -j limit-1247 + inet/filter/limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 + inet6/filter/limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 + inet/filter/logdrop-407 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-407 -m limit --limit 1/second -j LOG + inet/filter/logdrop-407 -j DROP + inet6/filter/logdrop-407 -j DROP + inet/filter/limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1249 {"flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1248 + inet6/filter/INPUT -i eth0 -j limit-1248 + inet/filter/limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 + inet6/filter/limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 + inet/filter/logdrop-408 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-408 -m limit --limit 1/second -j LOG + inet/filter/logdrop-408 -j DROP + inet6/filter/logdrop-408 -j DROP + inet/filter/limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1250 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1249 + inet6/filter/INPUT -i eth0 -j limit-1249 + inet/filter/limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 + inet6/filter/limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 + inet/filter/logdrop-409 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-409 -m limit --limit 1/second -j LOG + inet/filter/logdrop-409 -j DROP + inet6/filter/logdrop-409 -j DROP + inet/filter/limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1251 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1250 + inet6/filter/INPUT -i eth0 -j limit-1250 + inet/filter/limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-410 + inet6/filter/limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-410 + inet/filter/logdrop-410 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-410 -m limit --limit 1/second -j LOG + inet/filter/logdrop-410 -j DROP + inet6/filter/logdrop-410 -j DROP + inet/filter/limit-1250 -m limit --limit 1/second -j LOG + inet6/filter/limit-1250 -m limit --limit 1/second -j LOG + inet/filter/limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1252 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1251 + inet6/filter/INPUT -i eth0 -j limit-1251 + inet/filter/limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-411 + inet6/filter/limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-411 + inet/filter/logdrop-411 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-411 -m limit --limit 1/second -j LOG + inet/filter/logdrop-411 -j DROP + inet6/filter/logdrop-411 -j DROP + inet/filter/limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1253 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1252 + inet6/filter/INPUT -i eth0 -j limit-1252 + inet/filter/limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-412 + inet6/filter/limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-412 + inet/filter/logdrop-412 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-412 -m limit --limit 1/second -j LOG + inet/filter/logdrop-412 -j DROP + inet6/filter/logdrop-412 -j DROP + inet/filter/limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1254 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1253 + inet6/filter/INPUT -i eth0 -j limit-1253 + inet/filter/limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-413 + inet6/filter/limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-413 + inet/filter/logdrop-413 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-413 -m limit --limit 1/second -j LOG + inet/filter/logdrop-413 -j DROP + inet6/filter/logdrop-413 -j DROP + inet/filter/limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1255 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1254 + inet6/filter/INPUT -i eth0 -j limit-1254 + inet/filter/limit-1254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-414 + inet6/filter/limit-1254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-414 + inet/filter/logdrop-414 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-414 -m limit --limit 1/second -j LOG + inet/filter/logdrop-414 -j DROP + inet6/filter/logdrop-414 -j DROP + inet/filter/limit-1254 -j ACCEPT + inet6/filter/limit-1254 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1256 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 + inet/filter/logdrop-415 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-415 -m limit --limit 1/second -j LOG + inet/filter/logdrop-415 -j DROP + inet6/filter/logdrop-415 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1257 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1256 + inet6/filter/INPUT -i eth0 -j limit-1256 + inet/filter/limit-1256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 + inet6/filter/limit-1256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 + inet/filter/logdrop-416 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-416 -m limit --limit 1/second -j LOG + inet/filter/logdrop-416 -j DROP + inet6/filter/logdrop-416 -j DROP + inet/filter/limit-1256 -m limit --limit 1/second -j LOG + inet6/filter/limit-1256 -m limit --limit 1/second -j LOG + inet/filter/limit-1256 -j ACCEPT + inet6/filter/limit-1256 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1258 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1257 + inet6/filter/INPUT -i eth0 -j limit-1257 + inet/filter/limit-1257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 + inet6/filter/limit-1257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 + inet/filter/logdrop-417 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-417 -m limit --limit 1/second -j LOG + inet/filter/logdrop-417 -j DROP + inet6/filter/logdrop-417 -j DROP + inet/filter/limit-1257 -m limit --limit 1/second -j LOG + inet6/filter/limit-1257 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1259 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1258 + inet6/filter/INPUT -i eth0 -j limit-1258 + inet/filter/limit-1258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 + inet6/filter/limit-1258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 + inet/filter/logdrop-418 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-418 -m limit --limit 1/second -j LOG + inet/filter/logdrop-418 -j DROP + inet6/filter/logdrop-418 -j DROP + inet/filter/limit-1258 -j ACCEPT + inet6/filter/limit-1258 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1260 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 + inet/filter/logdrop-419 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-419 -m limit --limit 1/second -j LOG + inet/filter/logdrop-419 -j DROP + inet6/filter/logdrop-419 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1261 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1260 + inet6/filter/INPUT -i eth0 -j limit-1260 + inet/filter/limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-420 + inet6/filter/limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-420 + inet/filter/logdrop-420 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-420 -m limit --limit 1/second -j LOG + inet/filter/logdrop-420 -j DROP + inet6/filter/logdrop-420 -j DROP + inet/filter/limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1262 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1261 + inet6/filter/INPUT -i eth0 -j limit-1261 + inet/filter/limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-421 + inet6/filter/limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-421 + inet/filter/logdrop-421 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-421 -m limit --limit 1/second -j LOG + inet/filter/logdrop-421 -j DROP + inet6/filter/logdrop-421 -j DROP + inet/filter/limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1263 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1262 + inet6/filter/INPUT -i eth0 -j limit-1262 + inet/filter/limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-422 + inet6/filter/limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-422 + inet/filter/logdrop-422 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-422 -m limit --limit 1/second -j LOG + inet/filter/logdrop-422 -j DROP + inet6/filter/logdrop-422 -j DROP + inet/filter/limit-1262 -m limit --limit 1/second -j LOG + inet6/filter/limit-1262 -m limit --limit 1/second -j LOG + inet/filter/limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1264 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1263 + inet6/filter/INPUT -i eth0 -j limit-1263 + inet/filter/limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-423 + inet6/filter/limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-423 + inet/filter/logdrop-423 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-423 -m limit --limit 1/second -j LOG + inet/filter/logdrop-423 -j DROP + inet6/filter/logdrop-423 -j DROP + inet/filter/limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1265 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1264 + inet6/filter/INPUT -i eth0 -j limit-1264 + inet/filter/limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-424 + inet6/filter/limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-424 + inet/filter/logdrop-424 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-424 -m limit --limit 1/second -j LOG + inet/filter/logdrop-424 -j DROP + inet6/filter/logdrop-424 -j DROP + inet/filter/limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1266 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1265 + inet6/filter/INPUT -i eth0 -j limit-1265 + inet/filter/limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-425 + inet6/filter/limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-425 + inet/filter/logdrop-425 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-425 -m limit --limit 1/second -j LOG + inet/filter/logdrop-425 -j DROP + inet6/filter/logdrop-425 -j DROP + inet/filter/limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1267 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1266 + inet6/filter/INPUT -i eth0 -j limit-1266 + inet/filter/limit-1266 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-426 + inet6/filter/limit-1266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-426 + inet/filter/logdrop-426 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-426 -m limit --limit 1/second -j LOG + inet/filter/logdrop-426 -j DROP + inet6/filter/logdrop-426 -j DROP + inet/filter/limit-1266 -j ACCEPT + inet6/filter/limit-1266 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1268 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-427 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-427 + inet/filter/logdrop-427 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-427 -m limit --limit 1/second -j LOG + inet/filter/logdrop-427 -j DROP + inet6/filter/logdrop-427 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1269 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1268 + inet6/filter/INPUT -i eth0 -j limit-1268 + inet/filter/limit-1268 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-428 + inet6/filter/limit-1268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-428 + inet/filter/logdrop-428 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-428 -m limit --limit 1/second -j LOG + inet/filter/logdrop-428 -j DROP + inet6/filter/logdrop-428 -j DROP + inet/filter/limit-1268 -m limit --limit 1/second -j LOG + inet6/filter/limit-1268 -m limit --limit 1/second -j LOG + inet/filter/limit-1268 -j ACCEPT + inet6/filter/limit-1268 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1270 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1269 + inet6/filter/INPUT -i eth0 -j limit-1269 + inet/filter/limit-1269 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-429 + inet6/filter/limit-1269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-429 + inet/filter/logdrop-429 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-429 -m limit --limit 1/second -j LOG + inet/filter/logdrop-429 -j DROP + inet6/filter/logdrop-429 -j DROP + inet/filter/limit-1269 -m limit --limit 1/second -j LOG + inet6/filter/limit-1269 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1271 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1270 + inet6/filter/INPUT -i eth0 -j limit-1270 + inet/filter/limit-1270 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 + inet6/filter/limit-1270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-430 + inet/filter/logdrop-430 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-430 -m limit --limit 1/second -j LOG + inet/filter/logdrop-430 -j DROP + inet6/filter/logdrop-430 -j DROP + inet/filter/limit-1270 -j ACCEPT + inet6/filter/limit-1270 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1272 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-431 + inet/filter/logdrop-431 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-431 -m limit --limit 1/second -j LOG + inet/filter/logdrop-431 -j DROP + inet6/filter/logdrop-431 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1273 {"flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1272 + inet6/filter/INPUT -i eth0 -j limit-1272 + inet/filter/limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-432 + inet6/filter/limit-1272 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-432 + inet/filter/logdrop-432 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-432 -m limit --limit 1/second -j LOG + inet/filter/logdrop-432 -j DROP + inet6/filter/logdrop-432 -j DROP + inet/filter/limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1272 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1274 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1273 + inet6/filter/INPUT -i eth0 -j limit-1273 + inet/filter/limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-433 + inet6/filter/limit-1273 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-433 + inet/filter/logdrop-433 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-433 -m limit --limit 1/second -j LOG + inet/filter/logdrop-433 -j DROP + inet6/filter/logdrop-433 -j DROP + inet/filter/limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1273 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1275 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1274 + inet6/filter/INPUT -i eth0 -j limit-1274 + inet/filter/limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-434 + inet6/filter/limit-1274 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-434 + inet/filter/logdrop-434 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-434 -m limit --limit 1/second -j LOG + inet/filter/logdrop-434 -j DROP + inet6/filter/logdrop-434 -j DROP + inet/filter/limit-1274 -m limit --limit 1/second -j LOG + inet6/filter/limit-1274 -m limit --limit 1/second -j LOG + inet/filter/limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1274 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1276 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1275 + inet6/filter/INPUT -i eth0 -j limit-1275 + inet/filter/limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-435 + inet6/filter/limit-1275 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-435 + inet/filter/logdrop-435 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-435 -m limit --limit 1/second -j LOG + inet/filter/logdrop-435 -j DROP + inet6/filter/logdrop-435 -j DROP + inet/filter/limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1275 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1277 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1276 + inet6/filter/INPUT -i eth0 -j limit-1276 + inet/filter/limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-436 + inet6/filter/limit-1276 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-436 + inet/filter/logdrop-436 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-436 -m limit --limit 1/second -j LOG + inet/filter/logdrop-436 -j DROP + inet6/filter/logdrop-436 -j DROP + inet/filter/limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1276 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1278 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1277 + inet6/filter/INPUT -i eth0 -j limit-1277 + inet/filter/limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-437 + inet6/filter/limit-1277 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-437 + inet/filter/logdrop-437 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-437 -m limit --limit 1/second -j LOG + inet/filter/logdrop-437 -j DROP + inet6/filter/logdrop-437 -j DROP + inet/filter/limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1277 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1279 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1278 + inet6/filter/INPUT -i eth0 -j limit-1278 + inet/filter/limit-1278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-438 + inet6/filter/limit-1278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-438 + inet/filter/logdrop-438 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-438 -m limit --limit 1/second -j LOG + inet/filter/logdrop-438 -j DROP + inet6/filter/logdrop-438 -j DROP + inet/filter/limit-1278 -j ACCEPT + inet6/filter/limit-1278 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1280 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 + inet/filter/logdrop-439 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-439 -m limit --limit 1/second -j LOG + inet/filter/logdrop-439 -j DROP + inet6/filter/logdrop-439 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1281 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1280 + inet6/filter/INPUT -i eth0 -j limit-1280 + inet/filter/limit-1280 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-440 + inet6/filter/limit-1280 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-440 + inet/filter/logdrop-440 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-440 -m limit --limit 1/second -j LOG + inet/filter/logdrop-440 -j DROP + inet6/filter/logdrop-440 -j DROP + inet/filter/limit-1280 -m limit --limit 1/second -j LOG + inet6/filter/limit-1280 -m limit --limit 1/second -j LOG + inet/filter/limit-1280 -j ACCEPT + inet6/filter/limit-1280 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1282 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1281 + inet6/filter/INPUT -i eth0 -j limit-1281 + inet/filter/limit-1281 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-441 + inet6/filter/limit-1281 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-441 + inet/filter/logdrop-441 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-441 -m limit --limit 1/second -j LOG + inet/filter/logdrop-441 -j DROP + inet6/filter/logdrop-441 -j DROP + inet/filter/limit-1281 -m limit --limit 1/second -j LOG + inet6/filter/limit-1281 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1283 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1282 + inet6/filter/INPUT -i eth0 -j limit-1282 + inet/filter/limit-1282 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-442 + inet6/filter/limit-1282 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-442 + inet/filter/logdrop-442 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-442 -m limit --limit 1/second -j LOG + inet/filter/logdrop-442 -j DROP + inet6/filter/logdrop-442 -j DROP + inet/filter/limit-1282 -j ACCEPT + inet6/filter/limit-1282 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1284 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-443 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-443 + inet/filter/logdrop-443 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-443 -m limit --limit 1/second -j LOG + inet/filter/logdrop-443 -j DROP + inet6/filter/logdrop-443 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1285 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1284 + inet6/filter/INPUT -i eth0 -j limit-1284 + inet/filter/limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-444 + inet6/filter/limit-1284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-444 + inet/filter/logdrop-444 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-444 -m limit --limit 1/second -j LOG + inet/filter/logdrop-444 -j DROP + inet6/filter/logdrop-444 -j DROP + inet/filter/limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1286 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1285 + inet6/filter/INPUT -i eth0 -j limit-1285 + inet/filter/limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 + inet6/filter/limit-1285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 + inet/filter/logdrop-445 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-445 -m limit --limit 1/second -j LOG + inet/filter/logdrop-445 -j DROP + inet6/filter/logdrop-445 -j DROP + inet/filter/limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1285 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1287 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1286 + inet6/filter/INPUT -i eth0 -j limit-1286 + inet/filter/limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 + inet6/filter/limit-1286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 + inet/filter/logdrop-446 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-446 -m limit --limit 1/second -j LOG + inet/filter/logdrop-446 -j DROP + inet6/filter/logdrop-446 -j DROP + inet/filter/limit-1286 -m limit --limit 1/second -j LOG + inet6/filter/limit-1286 -m limit --limit 1/second -j LOG + inet/filter/limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1288 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1287 + inet6/filter/INPUT -i eth0 -j limit-1287 + inet/filter/limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 + inet6/filter/limit-1287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 + inet/filter/logdrop-447 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-447 -m limit --limit 1/second -j LOG + inet/filter/logdrop-447 -j DROP + inet6/filter/logdrop-447 -j DROP + inet/filter/limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1287 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1289 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1288 + inet6/filter/INPUT -i eth0 -j limit-1288 + inet/filter/limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 + inet6/filter/limit-1288 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 + inet/filter/logdrop-448 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-448 -m limit --limit 1/second -j LOG + inet/filter/logdrop-448 -j DROP + inet6/filter/logdrop-448 -j DROP + inet/filter/limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1288 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1290 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1289 + inet6/filter/INPUT -i eth0 -j limit-1289 + inet/filter/limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 + inet6/filter/limit-1289 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 + inet/filter/logdrop-449 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-449 -m limit --limit 1/second -j LOG + inet/filter/logdrop-449 -j DROP + inet6/filter/logdrop-449 -j DROP + inet/filter/limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1289 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1291 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1290 + inet6/filter/INPUT -i eth0 -j limit-1290 + inet/filter/limit-1290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-450 + inet6/filter/limit-1290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-450 + inet/filter/logdrop-450 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-450 -m limit --limit 1/second -j LOG + inet/filter/logdrop-450 -j DROP + inet6/filter/logdrop-450 -j DROP + inet/filter/limit-1290 -j ACCEPT + inet6/filter/limit-1290 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1292 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 + inet/filter/logdrop-451 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-451 -m limit --limit 1/second -j LOG + inet/filter/logdrop-451 -j DROP + inet6/filter/logdrop-451 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1293 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1292 + inet6/filter/INPUT -i eth0 -j limit-1292 + inet/filter/limit-1292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 + inet6/filter/limit-1292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 + inet/filter/logdrop-452 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-452 -m limit --limit 1/second -j LOG + inet/filter/logdrop-452 -j DROP + inet6/filter/logdrop-452 -j DROP + inet/filter/limit-1292 -m limit --limit 1/second -j LOG + inet6/filter/limit-1292 -m limit --limit 1/second -j LOG + inet/filter/limit-1292 -j ACCEPT + inet6/filter/limit-1292 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1294 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1293 + inet6/filter/INPUT -i eth0 -j limit-1293 + inet/filter/limit-1293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 + inet6/filter/limit-1293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 + inet/filter/logdrop-453 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-453 -m limit --limit 1/second -j LOG + inet/filter/logdrop-453 -j DROP + inet6/filter/logdrop-453 -j DROP + inet/filter/limit-1293 -m limit --limit 1/second -j LOG + inet6/filter/limit-1293 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1295 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1294 + inet6/filter/INPUT -i eth0 -j limit-1294 + inet/filter/limit-1294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 + inet6/filter/limit-1294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 + inet/filter/logdrop-454 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-454 -m limit --limit 1/second -j LOG + inet/filter/logdrop-454 -j DROP + inet6/filter/logdrop-454 -j DROP + inet/filter/limit-1294 -j ACCEPT + inet6/filter/limit-1294 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1296 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 + inet/filter/logdrop-455 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-455 -m limit --limit 1/second -j LOG + inet/filter/logdrop-455 -j DROP + inet6/filter/logdrop-455 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1297 {"flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1296 + inet6/filter/INPUT -i eth0 -j limit-1296 + inet/filter/limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1298 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1297 + inet6/filter/INPUT -i eth0 -j limit-1297 + inet/filter/limit-1297 -m recent --name limit-1297 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1297 -m recent --name limit-1297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1297 -m recent --name limit-1297 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1297 -m recent --name limit-1297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1299 {"flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1298 + inet6/filter/INPUT -i eth0 -j limit-1298 + inet/filter/limit-1298 -m recent --name limit-1298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1298 -m recent --name limit-1298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1298 -m limit --limit 1/second -j LOG + inet6/filter/limit-1298 -m limit --limit 1/second -j LOG + inet/filter/limit-1298 -m recent --name limit-1298 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1298 -m recent --name limit-1298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1300 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1299 + inet6/filter/INPUT -i eth0 -j limit-1299 + inet/filter/limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1301 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1300 + inet6/filter/INPUT -i eth0 -j limit-1300 + inet/filter/limit-1300 -m recent --name limit-1300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1300 -m recent --name limit-1300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1300 -m recent --name limit-1300 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1300 -m recent --name limit-1300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1302 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1301 + inet6/filter/INPUT -i eth0 -j limit-1301 + inet/filter/limit-1301 -m recent --name limit-1301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1301 -m recent --name limit-1301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1301 -m recent --name limit-1301 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1301 -m recent --name limit-1301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1303 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1302 + inet6/filter/INPUT -i eth0 -j limit-1302 + inet/filter/limit-1302 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1302 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1304 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1303 + inet6/filter/INPUT -i eth0 -j limit-1303 + inet/filter/limit-1303 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1303 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1305 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1304 + inet6/filter/INPUT -i eth0 -j limit-1304 + inet/filter/limit-1304 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1304 -m limit --limit 1/second -j LOG + inet6/filter/limit-1304 -m limit --limit 1/second -j LOG + inet/filter/limit-1304 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1306 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1305 + inet6/filter/INPUT -i eth0 -j limit-1305 + inet/filter/limit-1305 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1305 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1307 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1306 + inet6/filter/INPUT -i eth0 -j limit-1306 + inet/filter/limit-1306 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1306 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1308 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1307 + inet6/filter/INPUT -i eth0 -j limit-1307 + inet/filter/limit-1307 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1307 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1309 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1308 + inet6/filter/INPUT -i eth0 -j limit-1308 + inet/filter/limit-1308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1308 -j ACCEPT + inet6/filter/limit-1308 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1310 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1311 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1310 + inet6/filter/INPUT -i eth0 -j limit-1310 + inet/filter/limit-1310 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1310 -m limit --limit 1/second -j LOG + inet6/filter/limit-1310 -m limit --limit 1/second -j LOG + inet/filter/limit-1310 -j ACCEPT + inet6/filter/limit-1310 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1312 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1311 + inet6/filter/INPUT -i eth0 -j limit-1311 + inet/filter/limit-1311 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1311 -m limit --limit 1/second -j LOG + inet6/filter/limit-1311 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1313 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1312 + inet6/filter/INPUT -i eth0 -j limit-1312 + inet/filter/limit-1312 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1312 -j ACCEPT + inet6/filter/limit-1312 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1314 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1315 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1314 + inet6/filter/INPUT -i eth0 -j limit-1314 + inet/filter/limit-1314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1316 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1315 + inet6/filter/INPUT -i eth0 -j limit-1315 + inet/filter/limit-1315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1315 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1317 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1316 + inet6/filter/INPUT -i eth0 -j limit-1316 + inet/filter/limit-1316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1316 -m limit --limit 1/second -j LOG + inet6/filter/limit-1316 -m limit --limit 1/second -j LOG + inet/filter/limit-1316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1318 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1317 + inet6/filter/INPUT -i eth0 -j limit-1317 + inet/filter/limit-1317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1317 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1319 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1318 + inet6/filter/INPUT -i eth0 -j limit-1318 + inet/filter/limit-1318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1320 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1319 + inet6/filter/INPUT -i eth0 -j limit-1319 + inet/filter/limit-1319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1319 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1321 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1320 + inet6/filter/INPUT -i eth0 -j limit-1320 + inet/filter/limit-1320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1320 -j ACCEPT + inet6/filter/limit-1320 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1322 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1323 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1322 + inet6/filter/INPUT -i eth0 -j limit-1322 + inet/filter/limit-1322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1322 -m limit --limit 1/second -j LOG + inet6/filter/limit-1322 -m limit --limit 1/second -j LOG + inet/filter/limit-1322 -j ACCEPT + inet6/filter/limit-1322 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1324 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1323 + inet6/filter/INPUT -i eth0 -j limit-1323 + inet/filter/limit-1323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1323 -m limit --limit 1/second -j LOG + inet6/filter/limit-1323 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1325 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1324 + inet6/filter/INPUT -i eth0 -j limit-1324 + inet/filter/limit-1324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1324 -j ACCEPT + inet6/filter/limit-1324 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1326 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1327 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1326 + inet6/filter/INPUT -i eth0 -j limit-1326 + inet/filter/limit-1326 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1326 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1326 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1326 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1328 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1327 + inet6/filter/INPUT -i eth0 -j limit-1327 + inet/filter/limit-1327 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1327 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1327 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1327 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1329 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1328 + inet6/filter/INPUT -i eth0 -j limit-1328 + inet/filter/limit-1328 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1328 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1328 -m limit --limit 1/second -j LOG + inet6/filter/limit-1328 -m limit --limit 1/second -j LOG + inet/filter/limit-1328 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1328 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1330 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1329 + inet6/filter/INPUT -i eth0 -j limit-1329 + inet/filter/limit-1329 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1329 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1329 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1329 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1331 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1330 + inet6/filter/INPUT -i eth0 -j limit-1330 + inet/filter/limit-1330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1332 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1331 + inet6/filter/INPUT -i eth0 -j limit-1331 + inet/filter/limit-1331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1331 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1331 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1333 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1332 + inet6/filter/INPUT -i eth0 -j limit-1332 + inet/filter/limit-1332 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1332 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1332 -j ACCEPT + inet6/filter/limit-1332 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1334 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1335 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1334 + inet6/filter/INPUT -i eth0 -j limit-1334 + inet/filter/limit-1334 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1334 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1334 -m limit --limit 1/second -j LOG + inet6/filter/limit-1334 -m limit --limit 1/second -j LOG + inet/filter/limit-1334 -j ACCEPT + inet6/filter/limit-1334 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1336 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1335 + inet6/filter/INPUT -i eth0 -j limit-1335 + inet/filter/limit-1335 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1335 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1335 -m limit --limit 1/second -j LOG + inet6/filter/limit-1335 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1337 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1336 + inet6/filter/INPUT -i eth0 -j limit-1336 + inet/filter/limit-1336 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1336 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1336 -j ACCEPT + inet6/filter/limit-1336 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1338 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1339 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1338 + inet6/filter/INPUT -i eth0 -j limit-1338 + inet/filter/limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1338 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1338 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1340 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1339 + inet6/filter/INPUT -i eth0 -j limit-1339 + inet/filter/limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1339 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1339 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1341 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1340 + inet6/filter/INPUT -i eth0 -j limit-1340 + inet/filter/limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1340 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1340 -m limit --limit 1/second -j LOG + inet6/filter/limit-1340 -m limit --limit 1/second -j LOG + inet/filter/limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1340 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1342 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1341 + inet6/filter/INPUT -i eth0 -j limit-1341 + inet/filter/limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1341 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1341 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1343 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1342 + inet6/filter/INPUT -i eth0 -j limit-1342 + inet/filter/limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1342 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1342 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1344 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1343 + inet6/filter/INPUT -i eth0 -j limit-1343 + inet/filter/limit-1343 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1343 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1343 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1343 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1345 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1344 + inet6/filter/INPUT -i eth0 -j limit-1344 + inet/filter/limit-1344 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1344 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1344 -j ACCEPT + inet6/filter/limit-1344 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1346 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1347 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1346 + inet6/filter/INPUT -i eth0 -j limit-1346 + inet/filter/limit-1346 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1346 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1346 -m limit --limit 1/second -j LOG + inet6/filter/limit-1346 -m limit --limit 1/second -j LOG + inet/filter/limit-1346 -j ACCEPT + inet6/filter/limit-1346 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1348 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1347 + inet6/filter/INPUT -i eth0 -j limit-1347 + inet/filter/limit-1347 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1347 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1347 -m limit --limit 1/second -j LOG + inet6/filter/limit-1347 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1349 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1348 + inet6/filter/INPUT -i eth0 -j limit-1348 + inet/filter/limit-1348 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1348 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1348 -j ACCEPT + inet6/filter/limit-1348 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1350 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1351 {"flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1350 + inet6/filter/INPUT -i eth0 -j limit-1350 + inet/filter/limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1352 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1351 + inet6/filter/INPUT -i eth0 -j limit-1351 + inet/filter/limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1353 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1352 + inet6/filter/INPUT -i eth0 -j limit-1352 + inet/filter/limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1352 -m limit --limit 1/second -j LOG + inet6/filter/limit-1352 -m limit --limit 1/second -j LOG + inet/filter/limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1354 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1353 + inet6/filter/INPUT -i eth0 -j limit-1353 + inet/filter/limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1355 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1354 + inet6/filter/INPUT -i eth0 -j limit-1354 + inet/filter/limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1356 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1355 + inet6/filter/INPUT -i eth0 -j limit-1355 + inet/filter/limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1357 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1356 + inet6/filter/INPUT -i eth0 -j limit-1356 + inet/filter/limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1358 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1357 + inet6/filter/INPUT -i eth0 -j limit-1357 + inet/filter/limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1359 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1358 + inet6/filter/INPUT -i eth0 -j limit-1358 + inet/filter/limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1358 -m limit --limit 1/second -j LOG + inet6/filter/limit-1358 -m limit --limit 1/second -j LOG + inet/filter/limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1360 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1359 + inet6/filter/INPUT -i eth0 -j limit-1359 + inet/filter/limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1361 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1360 + inet6/filter/INPUT -i eth0 -j limit-1360 + inet/filter/limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1362 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1361 + inet6/filter/INPUT -i eth0 -j limit-1361 + inet/filter/limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1363 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1362 + inet6/filter/INPUT -i eth0 -j limit-1362 + inet/filter/limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1362 -j ACCEPT + inet6/filter/limit-1362 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1364 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1365 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1364 + inet6/filter/INPUT -i eth0 -j limit-1364 + inet/filter/limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1364 -m limit --limit 1/second -j LOG + inet6/filter/limit-1364 -m limit --limit 1/second -j LOG + inet/filter/limit-1364 -j ACCEPT + inet6/filter/limit-1364 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1366 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1365 + inet6/filter/INPUT -i eth0 -j limit-1365 + inet/filter/limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1365 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1365 -m limit --limit 1/second -j LOG + inet6/filter/limit-1365 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1367 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1366 + inet6/filter/INPUT -i eth0 -j limit-1366 + inet/filter/limit-1366 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1366 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1366 -j ACCEPT + inet6/filter/limit-1366 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1368 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1369 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1368 + inet6/filter/INPUT -i eth0 -j limit-1368 + inet/filter/limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1370 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1369 + inet6/filter/INPUT -i eth0 -j limit-1369 + inet/filter/limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1371 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1370 + inet6/filter/INPUT -i eth0 -j limit-1370 + inet/filter/limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1370 -m limit --limit 1/second -j LOG + inet6/filter/limit-1370 -m limit --limit 1/second -j LOG + inet/filter/limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1372 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1371 + inet6/filter/INPUT -i eth0 -j limit-1371 + inet/filter/limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1373 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1372 + inet6/filter/INPUT -i eth0 -j limit-1372 + inet/filter/limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1374 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1373 + inet6/filter/INPUT -i eth0 -j limit-1373 + inet/filter/limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1375 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1374 + inet6/filter/INPUT -i eth0 -j limit-1374 + inet/filter/limit-1374 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1374 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1374 -j ACCEPT + inet6/filter/limit-1374 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1376 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1377 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1376 + inet6/filter/INPUT -i eth0 -j limit-1376 + inet/filter/limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1376 -m limit --limit 1/second -j LOG + inet6/filter/limit-1376 -m limit --limit 1/second -j LOG + inet/filter/limit-1376 -j ACCEPT + inet6/filter/limit-1376 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1378 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1377 + inet6/filter/INPUT -i eth0 -j limit-1377 + inet/filter/limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1377 -m limit --limit 1/second -j LOG + inet6/filter/limit-1377 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1379 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1378 + inet6/filter/INPUT -i eth0 -j limit-1378 + inet/filter/limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1378 -j ACCEPT + inet6/filter/limit-1378 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1380 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1381 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1380 + inet6/filter/INPUT -i eth0 -j limit-1380 + inet/filter/limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1380 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1380 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1382 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1381 + inet6/filter/INPUT -i eth0 -j limit-1381 + inet/filter/limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1381 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1381 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1383 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1382 + inet6/filter/INPUT -i eth0 -j limit-1382 + inet/filter/limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1382 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1382 -m limit --limit 1/second -j LOG + inet6/filter/limit-1382 -m limit --limit 1/second -j LOG + inet/filter/limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1382 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1384 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1383 + inet6/filter/INPUT -i eth0 -j limit-1383 + inet/filter/limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1383 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1383 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1385 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1384 + inet6/filter/INPUT -i eth0 -j limit-1384 + inet/filter/limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1384 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1384 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1386 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1385 + inet6/filter/INPUT -i eth0 -j limit-1385 + inet/filter/limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1385 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1385 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1387 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1386 + inet6/filter/INPUT -i eth0 -j limit-1386 + inet/filter/limit-1386 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1386 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1386 -j ACCEPT + inet6/filter/limit-1386 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1388 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1389 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1388 + inet6/filter/INPUT -i eth0 -j limit-1388 + inet/filter/limit-1388 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1388 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1388 -m limit --limit 1/second -j LOG + inet6/filter/limit-1388 -m limit --limit 1/second -j LOG + inet/filter/limit-1388 -j ACCEPT + inet6/filter/limit-1388 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1390 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1389 + inet6/filter/INPUT -i eth0 -j limit-1389 + inet/filter/limit-1389 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1389 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1389 -m limit --limit 1/second -j LOG + inet6/filter/limit-1389 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1391 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1390 + inet6/filter/INPUT -i eth0 -j limit-1390 + inet/filter/limit-1390 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1390 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1390 -j ACCEPT + inet6/filter/limit-1390 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1392 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1393 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1392 + inet6/filter/INPUT -i eth0 -j limit-1392 + inet/filter/limit-1392 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1392 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1392 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1392 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1394 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1393 + inet6/filter/INPUT -i eth0 -j limit-1393 + inet/filter/limit-1393 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1393 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1393 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1393 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1395 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1394 + inet6/filter/INPUT -i eth0 -j limit-1394 + inet/filter/limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1394 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1394 -m limit --limit 1/second -j LOG + inet6/filter/limit-1394 -m limit --limit 1/second -j LOG + inet/filter/limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1394 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1396 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1395 + inet6/filter/INPUT -i eth0 -j limit-1395 + inet/filter/limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1395 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1395 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1397 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1396 + inet6/filter/INPUT -i eth0 -j limit-1396 + inet/filter/limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1396 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1396 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1398 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1397 + inet6/filter/INPUT -i eth0 -j limit-1397 + inet/filter/limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1397 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1397 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1399 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1398 + inet6/filter/INPUT -i eth0 -j limit-1398 + inet/filter/limit-1398 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1398 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1398 -j ACCEPT + inet6/filter/limit-1398 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1400 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1401 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1400 + inet6/filter/INPUT -i eth0 -j limit-1400 + inet/filter/limit-1400 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1400 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1400 -m limit --limit 1/second -j LOG + inet6/filter/limit-1400 -m limit --limit 1/second -j LOG + inet/filter/limit-1400 -j ACCEPT + inet6/filter/limit-1400 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1402 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1401 + inet6/filter/INPUT -i eth0 -j limit-1401 + inet/filter/limit-1401 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1401 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1401 -m limit --limit 1/second -j LOG + inet6/filter/limit-1401 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1403 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1402 + inet6/filter/INPUT -i eth0 -j limit-1402 + inet/filter/limit-1402 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1402 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1402 -j ACCEPT + inet6/filter/limit-1402 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1404 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1405 {"flow-limit":150,"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1404 + inet6/filter/INPUT -i eth0 -j limit-1404 + inet/filter/limit-1404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1404 -j ACCEPT + inet6/filter/limit-1404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1404 -j ACCEPT + inet/filter/limit-1404 -m limit --limit 1/second -j LOG + inet6/filter/limit-1404 -m limit --limit 1/second -j LOG + inet/filter/limit-1404 -j DROP + inet6/filter/limit-1404 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1406 {"action":"pass","flow-limit":150,"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1405 + inet6/filter/INPUT -i eth0 -j limit-1405 + inet/filter/limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1405 -j RETURN + inet6/filter/limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1405 -j RETURN + inet/filter/limit-1405 -m limit --limit 1/second -j LOG + inet6/filter/limit-1405 -m limit --limit 1/second -j LOG + inet/filter/limit-1405 -j DROP + inet6/filter/limit-1405 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1407 {"flow-limit":150,"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1406 + inet6/filter/INPUT -i eth0 -j limit-1406 + inet/filter/limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1406 -j logaccept-14 + inet6/filter/limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1406 -j logaccept-14 + inet/filter/logaccept-14 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-14 -m limit --limit 1/second -j LOG + inet/filter/logaccept-14 -j ACCEPT + inet6/filter/logaccept-14 -j ACCEPT + inet/filter/limit-1406 -m limit --limit 1/second -j LOG + inet6/filter/limit-1406 -m limit --limit 1/second -j LOG + inet/filter/limit-1406 -j DROP + inet6/filter/limit-1406 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1408 {"flow-limit":150,"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1407 + inet6/filter/INPUT -i eth0 -j limit-1407 + inet/filter/limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1407 -j ACCEPT + inet6/filter/limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1407 -j ACCEPT + inet/filter/limit-1407 -m limit --limit 1/second -j LOG + inet6/filter/limit-1407 -m limit --limit 1/second -j LOG + inet/filter/limit-1407 -j DROP + inet6/filter/limit-1407 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1409 {"flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1408 + inet6/filter/INPUT -i eth0 -j limit-1408 + inet/filter/limit-1408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1408 -j ACCEPT + inet6/filter/limit-1408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1408 -j ACCEPT + inet/filter/limit-1408 -m limit --limit 1/second -j LOG + inet6/filter/limit-1408 -m limit --limit 1/second -j LOG + inet/filter/limit-1408 -j DROP + inet6/filter/limit-1408 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1410 {"action":"pass","flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1409 + inet6/filter/INPUT -i eth0 -j limit-1409 + inet/filter/limit-1409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1409 -j RETURN + inet6/filter/limit-1409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1409 -j RETURN + inet/filter/limit-1409 -m limit --limit 1/second -j LOG + inet6/filter/limit-1409 -m limit --limit 1/second -j LOG + inet/filter/limit-1409 -j DROP + inet6/filter/limit-1409 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1411 {"flow-limit":{"count":150},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1410 + inet6/filter/INPUT -i eth0 -j limit-1410 + inet/filter/limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1410 -j logaccept-15 + inet6/filter/limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1410 -j logaccept-15 + inet/filter/logaccept-15 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-15 -m limit --limit 1/second -j LOG + inet/filter/logaccept-15 -j ACCEPT + inet6/filter/logaccept-15 -j ACCEPT + inet/filter/limit-1410 -m limit --limit 1/second -j LOG + inet6/filter/limit-1410 -m limit --limit 1/second -j LOG + inet/filter/limit-1410 -j DROP + inet6/filter/limit-1410 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1412 {"flow-limit":{"count":150},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1411 + inet6/filter/INPUT -i eth0 -j limit-1411 + inet/filter/limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1411 -j ACCEPT + inet6/filter/limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1411 -j ACCEPT + inet/filter/limit-1411 -m limit --limit 1/second -j LOG + inet6/filter/limit-1411 -m limit --limit 1/second -j LOG + inet/filter/limit-1411 -j DROP + inet6/filter/limit-1411 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1413 {"flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1412 + inet6/filter/INPUT -i eth0 -j limit-1412 + inet/filter/limit-1412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1412 -j ACCEPT + inet6/filter/limit-1412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1412 -j ACCEPT + inet/filter/limit-1412 -j DROP + inet6/filter/limit-1412 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1414 {"action":"pass","flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1413 + inet6/filter/INPUT -i eth0 -j limit-1413 + inet/filter/limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1413 -j RETURN + inet6/filter/limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1413 -j RETURN + inet/filter/limit-1413 -j DROP + inet6/filter/limit-1413 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1415 {"flow-limit":{"count":150,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1414 + inet6/filter/INPUT -i eth0 -j limit-1414 + inet/filter/limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1414 -j logaccept-16 + inet6/filter/limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1414 -j logaccept-16 + inet/filter/logaccept-16 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-16 -m limit --limit 1/second -j LOG + inet/filter/logaccept-16 -j ACCEPT + inet6/filter/logaccept-16 -j ACCEPT + inet/filter/limit-1414 -j DROP + inet6/filter/limit-1414 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1416 {"flow-limit":{"count":150,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1415 + inet6/filter/INPUT -i eth0 -j limit-1415 + inet/filter/limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1415 -j ACCEPT + inet6/filter/limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1415 -j ACCEPT + inet/filter/limit-1415 -j DROP + inet6/filter/limit-1415 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1417 {"flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1416 + inet6/filter/INPUT -i eth0 -j limit-1416 + inet/filter/limit-1416 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1416 -j ACCEPT + inet6/filter/limit-1416 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1416 -j ACCEPT + inet/filter/limit-1416 -j DROP + inet6/filter/limit-1416 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1418 {"action":"pass","flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1417 + inet6/filter/INPUT -i eth0 -j limit-1417 + inet/filter/limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1417 -j RETURN + inet6/filter/limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1417 -j RETURN + inet/filter/limit-1417 -j DROP + inet6/filter/limit-1417 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1419 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1418 + inet6/filter/INPUT -i eth0 -j limit-1418 + inet/filter/limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1418 -j logaccept-17 + inet6/filter/limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1418 -j logaccept-17 + inet/filter/logaccept-17 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-17 -m limit --limit 1/second -j LOG + inet/filter/logaccept-17 -j ACCEPT + inet6/filter/logaccept-17 -j ACCEPT + inet/filter/limit-1418 -j DROP + inet6/filter/limit-1418 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1420 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1419 + inet6/filter/INPUT -i eth0 -j limit-1419 + inet/filter/limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1419 -j ACCEPT + inet6/filter/limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1419 -j ACCEPT + inet/filter/limit-1419 -j DROP + inet6/filter/limit-1419 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1421 {"flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1420 + inet6/filter/INPUT -i eth0 -j limit-1420 + inet/filter/limit-1420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1420 -j ACCEPT + inet6/filter/limit-1420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1420 -j ACCEPT + inet/filter/limit-1420 -m limit --limit 1/second -j LOG + inet6/filter/limit-1420 -m limit --limit 1/second -j LOG + inet/filter/limit-1420 -j DROP + inet6/filter/limit-1420 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1422 {"action":"pass","flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1421 + inet6/filter/INPUT -i eth0 -j limit-1421 + inet/filter/limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1421 -j RETURN + inet6/filter/limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1421 -j RETURN + inet/filter/limit-1421 -m limit --limit 1/second -j LOG + inet6/filter/limit-1421 -m limit --limit 1/second -j LOG + inet/filter/limit-1421 -j DROP + inet6/filter/limit-1421 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1423 {"flow-limit":{"count":150,"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1422 + inet6/filter/INPUT -i eth0 -j limit-1422 + inet/filter/limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1422 -j logaccept-18 + inet6/filter/limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1422 -j logaccept-18 + inet/filter/logaccept-18 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-18 -m limit --limit 1/second -j LOG + inet/filter/logaccept-18 -j ACCEPT + inet6/filter/logaccept-18 -j ACCEPT + inet/filter/limit-1422 -m limit --limit 1/second -j LOG + inet6/filter/limit-1422 -m limit --limit 1/second -j LOG + inet/filter/limit-1422 -j DROP + inet6/filter/limit-1422 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1424 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1423 + inet6/filter/INPUT -i eth0 -j limit-1423 + inet/filter/limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1423 -j ACCEPT + inet6/filter/limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1423 -j ACCEPT + inet/filter/limit-1423 -m limit --limit 1/second -j LOG + inet6/filter/limit-1423 -m limit --limit 1/second -j LOG + inet/filter/limit-1423 -j DROP + inet6/filter/limit-1423 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1425 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1424 + inet6/filter/INPUT -i eth0 -j limit-1424 + inet/filter/limit-1424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1424 -j ACCEPT + inet6/filter/limit-1424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1424 -j ACCEPT + inet/filter/limit-1424 -j DROP + inet6/filter/limit-1424 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1426 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1425 + inet6/filter/INPUT -i eth0 -j limit-1425 + inet/filter/limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1425 -j RETURN + inet6/filter/limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1425 -j RETURN + inet/filter/limit-1425 -j DROP + inet6/filter/limit-1425 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1427 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1426 + inet6/filter/INPUT -i eth0 -j limit-1426 + inet/filter/limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1426 -j logaccept-19 + inet6/filter/limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1426 -j logaccept-19 + inet/filter/logaccept-19 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-19 -m limit --limit 1/second -j LOG + inet/filter/logaccept-19 -j ACCEPT + inet6/filter/logaccept-19 -j ACCEPT + inet/filter/limit-1426 -j DROP + inet6/filter/limit-1426 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1428 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1427 + inet6/filter/INPUT -i eth0 -j limit-1427 + inet/filter/limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1427 -j ACCEPT + inet6/filter/limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1427 -j ACCEPT + inet/filter/limit-1427 -j DROP + inet6/filter/limit-1427 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1429 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1428 + inet6/filter/INPUT -i eth0 -j limit-1428 + inet/filter/limit-1428 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1428 -j ACCEPT + inet6/filter/limit-1428 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1428 -j ACCEPT + inet/filter/limit-1428 -j DROP + inet6/filter/limit-1428 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1430 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1429 + inet6/filter/INPUT -i eth0 -j limit-1429 + inet/filter/limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1429 -j RETURN + inet6/filter/limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1429 -j RETURN + inet/filter/limit-1429 -j DROP + inet6/filter/limit-1429 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1431 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1430 + inet6/filter/INPUT -i eth0 -j limit-1430 + inet/filter/limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1430 -j logaccept-20 + inet6/filter/limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1430 -j logaccept-20 + inet/filter/logaccept-20 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-20 -m limit --limit 1/second -j LOG + inet/filter/logaccept-20 -j ACCEPT + inet6/filter/logaccept-20 -j ACCEPT + inet/filter/limit-1430 -j DROP + inet6/filter/limit-1430 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1432 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1431 + inet6/filter/INPUT -i eth0 -j limit-1431 + inet/filter/limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1431 -j ACCEPT + inet6/filter/limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1431 -j ACCEPT + inet/filter/limit-1431 -j DROP + inet6/filter/limit-1431 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1433 {"update-limit":"A"} +(filter-limit) + inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1434 {"update-limit":"B"} +(filter-limit) + inet/filter/FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1435 {"update-limit":"C"} +(filter-limit) + inet/filter/FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/INPUT -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/OUTPUT -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1436 {"update-limit":"D"} +(filter-limit) + inet/filter/FORWARD -m recent --name user:D --rsource --mask 255.255.252.0 --set + inet/filter/INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set + inet6/filter/FORWARD -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set + inet6/filter/INPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set + inet/filter/OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set + inet6/filter/OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set + +Filter 1437 {"update-limit":{"addr":"src","measure":"conn","name":"A"}} +(filter-limit) + inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1438 {"update-limit":{"addr":"dest","measure":"conn","name":"A"}} +(filter-limit) + inet/filter/FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1439 {"update-limit":{"addr":"src","measure":"flow","name":"A"}} +(filter-limit) + inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1440 {"update-limit":{"addr":"dest","measure":"flow","name":"A"}} +(filter-limit) + inet/filter/FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1441 {} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1442 {"action":"drop"} +(log) + inet/filter/FORWARD -j logdrop-456 + inet6/filter/FORWARD -j logdrop-456 + inet/filter/INPUT -j logdrop-456 + inet6/filter/INPUT -j logdrop-456 + inet/filter/OUTPUT -j logdrop-456 + inet6/filter/OUTPUT -j logdrop-456 + inet/filter/logdrop-456 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-456 -m limit --limit 1/second -j LOG + inet/filter/logdrop-456 -j DROP + inet6/filter/logdrop-456 -j DROP + +Filter 1443 {"action":"pass"} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 1444 {"log":false} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1445 {"action":"drop","log":false} +(log) + inet/filter/FORWARD -j DROP + inet6/filter/FORWARD -j DROP + inet/filter/INPUT -j DROP + inet6/filter/INPUT -j DROP + inet/filter/OUTPUT -j DROP + inet6/filter/OUTPUT -j DROP + +Filter 1446 {"action":"pass","log":false} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 1447 {"log":true} +(log) + inet/filter/FORWARD -j logaccept-21 + inet6/filter/FORWARD -j logaccept-21 + inet/filter/INPUT -j logaccept-21 + inet6/filter/INPUT -j logaccept-21 + inet/filter/OUTPUT -j logaccept-21 + inet6/filter/OUTPUT -j logaccept-21 + inet/filter/logaccept-21 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-21 -m limit --limit 1/second -j LOG + inet/filter/logaccept-21 -j ACCEPT + inet6/filter/logaccept-21 -j ACCEPT + +Filter 1448 {"action":"drop","log":true} +(log) + inet/filter/FORWARD -j logdrop-457 + inet6/filter/FORWARD -j logdrop-457 + inet/filter/INPUT -j logdrop-457 + inet6/filter/INPUT -j logdrop-457 + inet/filter/OUTPUT -j logdrop-457 + inet6/filter/OUTPUT -j logdrop-457 + inet/filter/logdrop-457 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-457 -m limit --limit 1/second -j LOG + inet/filter/logdrop-457 -j DROP + inet6/filter/logdrop-457 -j DROP + +Filter 1449 {"action":"pass","log":true} +(log) + inet/filter/FORWARD -j logpass-0 + inet6/filter/FORWARD -j logpass-0 + inet/filter/INPUT -j logpass-0 + inet6/filter/INPUT -j logpass-0 + inet/filter/OUTPUT -j logpass-0 + inet6/filter/OUTPUT -j logpass-0 + inet/filter/logpass-0 -m limit --limit 1/second -j LOG + inet6/filter/logpass-0 -m limit --limit 1/second -j LOG + +Filter 1450 {"log":"none"} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1451 {"action":"drop","log":"none"} +(log) + inet/filter/FORWARD -j DROP + inet6/filter/FORWARD -j DROP + inet/filter/INPUT -j DROP + inet6/filter/INPUT -j DROP + inet/filter/OUTPUT -j DROP + inet6/filter/OUTPUT -j DROP + +Filter 1452 {"action":"pass","log":"none"} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 1453 {"in":["_fw","A"]} +(zone) + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + inet/filter/FORWARD -i eth0 -j ACCEPT + inet6/filter/FORWARD -i eth0 -j ACCEPT + inet/filter/INPUT -i eth0 -j ACCEPT + inet6/filter/INPUT -i eth0 -j ACCEPT + +Filter 1454 {"in":"B","out":"C"} +(zone) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + +Filter 1455 {"out":["_fw","B"]} +(zone) + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT + +Filter 1456 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +(zone) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT + + +Ipset awall-masquerade {"family":"inet","type":"hash:net"} +(masquerade) + + +Limit B true +(limit) + +Limit C 7 +(limit) + +Limit D {"inet":22,"inet6":58} +(limit) + + +Log _default {"limit":1} +(defaults) + +Log none {"mode":"none"} +(log) + + +Mark 1 {"in":["_fw","A"],"mark":0} +(zone) + inet/mangle/OUTPUT -j MARK --set-mark 0 + inet6/mangle/OUTPUT -j MARK --set-mark 0 + inet/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 + inet6/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 + +Mark 2 {"in":"B","mark":1,"out":"C"} +(zone) + inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 + inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 + +Mark 3 {"mark":2,"out":["_fw","B"]} +(zone) + inet/mangle/INPUT -j MARK --set-mark 2 + inet6/mangle/INPUT -j MARK --set-mark 2 + inet/mangle/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 + inet6/mangle/POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 + + +No-track 1 {"in":["_fw","A"]} +(zone) + inet/raw/OUTPUT -j CT --notrack + inet6/raw/OUTPUT -j CT --notrack + inet/raw/PREROUTING -i eth0 -j CT --notrack + inet6/raw/PREROUTING -i eth0 -j CT --notrack + +No-track 2 {"in":"B"} +(zone) + inet/raw/PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack + inet6/raw/PREROUTING -i eth1 -s fc00::/7 -j CT --notrack + +No-track 3 {"out":"_fw"} +(zone) + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack + + +Service babel {"port":6697,"proto":"tcp"} +(services) + +Service bacula-dir {"port":9101,"proto":"tcp"} +(services) + +Service bacula-fd {"port":9102,"proto":"tcp"} +(services) + +Service bacula-sd {"port":9103,"proto":"tcp"} +(services) + +Service bgp {"port":179,"proto":"tcp"} +(services) + +Service dhcp {"family":"inet","port":[67,68],"proto":"udp"} +(services) + +Service discard [{"port":9,"proto":"udp"},{"port":9,"proto":"tcp"}] +(services) + +Service dns [{"port":53,"proto":"udp"},{"port":53,"proto":"tcp"}] +(services) + +Service epmap [{"port":135,"proto":"tcp"},{"port":135,"proto":"udp"}] +(services) + +Service ftp {"ct-helper":"ftp","port":21,"proto":"tcp"} +(services) + +Service gre {"proto":"gre"} +(services) + +Service hp-pdl {"port":9100,"proto":"tcp"} +(services) + +Service http {"port":80,"proto":"tcp"} +(services) + +Service http-alt {"port":8080,"proto":"tcp"} +(services) + +Service https {"port":443,"proto":"tcp"} +(services) + +Service icmp {"proto":"icmp"} +(services) + +Service igmp {"proto":"igmp"} +(services) + +Service imap {"port":143,"proto":"tcp"} +(services) + +Service imaps {"port":993,"proto":"tcp"} +(services) + +Service ipsec [{"proto":"esp"},{"port":[500,4500],"proto":"udp"}] +(services) + +Service irc {"ct-helper":"irc","port":6667,"proto":"tcp"} +(services) + +Service kerberos [{"port":88,"proto":"tcp"},{"port":88,"proto":"udp"}] +(services) + +Service kpasswd [{"port":464,"proto":"tcp"},{"port":464,"proto":"udp"}] +(services) + +Service l2tp {"port":1701,"proto":"udp"} +(services) + +Service ldap [{"port":389,"proto":"tcp"},{"port":389,"proto":"udp"}] +(services) + +Service ldaps [{"port":636,"proto":"tcp"},{"port":636,"proto":"udp"}] +(services) + +Service microsoft-ds [{"port":445,"proto":"tcp"},{"port":445,"proto":"udp"}] +(services) + +Service ms-sql-m {"port":1434,"proto":"tcp"} +(services) + +Service ms-sql-s {"port":1433,"proto":"tcp"} +(services) + +Service msft-gc [{"port":3268,"proto":"tcp"},{"port":3268,"proto":"udp"}] +(services) + +Service msft-gc-ssl [{"port":3269,"proto":"tcp"},{"port":3269,"proto":"udp"}] +(services) + +Service netbios-ds [{"port":138,"proto":"tcp"},{"port":138,"proto":"udp"}] +(services) + +Service netbios-ns [{"family":"inet","port":137,"proto":"tcp"},{"ct-helper":"netbios-ns","family":"inet","port":137,"proto":"udp"}] +(services) + +Service netbios-ssn [{"port":139,"proto":"tcp"},{"port":139,"proto":"udp"}] +(services) + +Service ntp {"port":123,"proto":"udp"} +(services) + +Service ospf {"proto":"ospf"} +(services) + +Service pgsql {"port":5432,"proto":"tcp"} +(services) + +Service ping [{"proto":"icmp","reply-type":0,"type":8},{"proto":"icmpv6","reply-type":129,"type":128}] +(services) + +Service pop3 {"port":110,"proto":"tcp"} +(services) + +Service pop3s {"port":995,"proto":"tcp"} +(services) + +Service radius [{"port":1812,"proto":"udp"},{"port":1812,"proto":"tcp"}] +(services) + +Service radius-acct [{"port":1813,"proto":"udp"},{"port":1813,"proto":"tcp"}] +(services) + +Service rdp {"port":3389,"proto":"tcp"} +(services) + +Service rsync {"port":873,"proto":"tcp"} +(services) + +Service rtmp {"port":1935,"proto":"tcp"} +(services) + +Service rtsp {"port":554,"proto":"tcp"} +(services) + +Service sieve {"port":4190,"proto":"tcp"} +(services) + +Service sip [{"ct-helper":"sip","port":5060,"proto":"udp"},{"ct-helper":"sip","port":5060,"proto":"tcp"}] +(services) + +Service sip-tls [{"port":5061,"proto":"udp"},{"port":5061,"proto":"tcp"}] +(services) + +Service smtp {"port":25,"proto":"tcp"} +(services) + +Service snmp {"port":161,"proto":"udp"} +(services) + +Service snmp-trap {"port":162,"proto":"udp"} +(services) + +Service ssh {"port":22,"proto":"tcp"} +(services) + +Service submission {"port":587,"proto":"tcp"} +(services) + +Service syslog {"port":514,"proto":"udp"} +(services) + +Service telnet {"port":23,"proto":"tcp"} +(services) + +Service teredo {"port":3544,"proto":"udp"} +(services) + +Service tftp {"port":69,"proto":"udp"} +(services) + +Service vnc {"port":5900,"proto":"tcp"} +(services) + + +Snat 1 {"out":["_fw","B"]} +(zone) + inet/nat/INPUT -j MASQUERADE + inet/nat/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE + + +Variable awall_tproxy_mark 1 +(defaults) + + +Zone A {"iface":"eth0"} +(zone) + +Zone B {"addr":["10.0.0.0\/12","fc00::\/7"],"iface":"eth1"} +(zone) + +Zone C {"addr":"10.1.0.0\/12","iface":["eth2","eth3"]} +(zone) + +Zone D {"iface":["eth4","eth5"],"route-back":true} +(zone) + +Zone E {"ipsec":true} +(zone) + + +# ipset awall-masquerade +hash:net family inet + + +# rules-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:limit-0 - [0:0] +:limit-1 - [0:0] +:limit-10 - [0:0] +:limit-100 - [0:0] +:limit-1000 - [0:0] +:limit-1001 - [0:0] +:limit-1002 - [0:0] +:limit-1003 - [0:0] +:limit-1004 - [0:0] +:limit-1005 - [0:0] +:limit-1006 - [0:0] +:limit-1007 - [0:0] +:limit-1008 - [0:0] +:limit-1009 - [0:0] +:limit-101 - [0:0] +:limit-1010 - [0:0] +:limit-1011 - [0:0] +:limit-1012 - [0:0] +:limit-1013 - [0:0] +:limit-1014 - [0:0] +:limit-1015 - [0:0] +:limit-1016 - [0:0] +:limit-1017 - [0:0] +:limit-1018 - [0:0] +:limit-1019 - [0:0] +:limit-102 - [0:0] +:limit-1020 - [0:0] +:limit-1021 - [0:0] +:limit-1022 - [0:0] +:limit-1023 - [0:0] +:limit-1024 - [0:0] +:limit-1025 - [0:0] +:limit-1026 - [0:0] +:limit-1027 - [0:0] +:limit-1028 - [0:0] +:limit-1029 - [0:0] +:limit-103 - [0:0] +:limit-1030 - [0:0] +:limit-1031 - [0:0] +:limit-1032 - [0:0] +:limit-1033 - [0:0] +:limit-1034 - [0:0] +:limit-1035 - [0:0] +:limit-1036 - [0:0] +:limit-1037 - [0:0] +:limit-1038 - [0:0] +:limit-1039 - [0:0] +:limit-104 - [0:0] +:limit-1040 - [0:0] +:limit-1041 - [0:0] +:limit-1042 - [0:0] +:limit-1043 - [0:0] +:limit-1044 - [0:0] +:limit-1045 - [0:0] +:limit-1046 - [0:0] +:limit-1047 - [0:0] +:limit-1048 - [0:0] +:limit-1049 - [0:0] +:limit-105 - [0:0] +:limit-1050 - [0:0] +:limit-1051 - [0:0] +:limit-1052 - [0:0] +:limit-1053 - [0:0] +:limit-1054 - [0:0] +:limit-1055 - [0:0] +:limit-1056 - [0:0] +:limit-1057 - [0:0] +:limit-1058 - [0:0] +:limit-1059 - [0:0] +:limit-106 - [0:0] +:limit-1060 - [0:0] +:limit-1061 - [0:0] +:limit-1062 - [0:0] +:limit-1063 - [0:0] +:limit-1064 - [0:0] +:limit-1065 - [0:0] +:limit-1066 - [0:0] +:limit-1067 - [0:0] +:limit-1068 - [0:0] +:limit-1069 - [0:0] +:limit-107 - [0:0] +:limit-1070 - [0:0] +:limit-1071 - [0:0] +:limit-1072 - [0:0] +:limit-1073 - [0:0] +:limit-1074 - [0:0] +:limit-1075 - [0:0] +:limit-1076 - [0:0] +:limit-1077 - [0:0] +:limit-1078 - [0:0] +:limit-1079 - [0:0] +:limit-108 - [0:0] +:limit-1080 - [0:0] +:limit-1081 - [0:0] +:limit-1082 - [0:0] +:limit-1083 - [0:0] +:limit-1084 - [0:0] +:limit-1085 - [0:0] +:limit-1086 - [0:0] +:limit-1087 - [0:0] +:limit-1088 - [0:0] +:limit-1089 - [0:0] +:limit-109 - [0:0] +:limit-1090 - [0:0] +:limit-1091 - [0:0] +:limit-1092 - [0:0] +:limit-1094 - [0:0] +:limit-1095 - [0:0] +:limit-1096 - [0:0] +:limit-1098 - [0:0] +:limit-1099 - [0:0] +:limit-11 - [0:0] +:limit-110 - [0:0] +:limit-1100 - [0:0] +:limit-1101 - [0:0] +:limit-1102 - [0:0] +:limit-1103 - [0:0] +:limit-1104 - [0:0] +:limit-1106 - [0:0] +:limit-1107 - [0:0] +:limit-1108 - [0:0] +:limit-111 - [0:0] +:limit-1110 - [0:0] +:limit-1111 - [0:0] +:limit-1112 - [0:0] +:limit-1113 - [0:0] +:limit-1114 - [0:0] +:limit-1115 - [0:0] +:limit-1116 - [0:0] +:limit-1118 - [0:0] +:limit-1119 - [0:0] +:limit-112 - [0:0] +:limit-1120 - [0:0] +:limit-1122 - [0:0] +:limit-1123 - [0:0] +:limit-1124 - [0:0] +:limit-1125 - [0:0] +:limit-1126 - [0:0] +:limit-1127 - [0:0] +:limit-1128 - [0:0] +:limit-113 - [0:0] +:limit-1130 - [0:0] +:limit-1131 - [0:0] +:limit-1132 - [0:0] +:limit-1134 - [0:0] +:limit-1135 - [0:0] +:limit-1136 - [0:0] +:limit-1137 - [0:0] +:limit-1138 - [0:0] +:limit-1139 - [0:0] +:limit-114 - [0:0] +:limit-1140 - [0:0] +:limit-1141 - [0:0] +:limit-1142 - [0:0] +:limit-1143 - [0:0] +:limit-1144 - [0:0] +:limit-1145 - [0:0] +:limit-1146 - [0:0] +:limit-1148 - [0:0] +:limit-1149 - [0:0] +:limit-115 - [0:0] +:limit-1150 - [0:0] +:limit-1152 - [0:0] +:limit-1153 - [0:0] +:limit-1154 - [0:0] +:limit-1155 - [0:0] +:limit-1156 - [0:0] +:limit-1157 - [0:0] +:limit-1158 - [0:0] +:limit-116 - [0:0] +:limit-1160 - [0:0] +:limit-1161 - [0:0] +:limit-1162 - [0:0] +:limit-1164 - [0:0] +:limit-1165 - [0:0] +:limit-1166 - [0:0] +:limit-1167 - [0:0] +:limit-1168 - [0:0] +:limit-1169 - [0:0] +:limit-117 - [0:0] +:limit-1170 - [0:0] +:limit-1172 - [0:0] +:limit-1173 - [0:0] +:limit-1174 - [0:0] +:limit-1176 - [0:0] +:limit-1177 - [0:0] +:limit-1178 - [0:0] +:limit-1179 - [0:0] +:limit-118 - [0:0] +:limit-1180 - [0:0] +:limit-1181 - [0:0] +:limit-1182 - [0:0] +:limit-1184 - [0:0] +:limit-1185 - [0:0] +:limit-1186 - [0:0] +:limit-1188 - [0:0] +:limit-1189 - [0:0] +:limit-119 - [0:0] +:limit-1190 - [0:0] +:limit-1191 - [0:0] +:limit-1192 - [0:0] +:limit-1193 - [0:0] +:limit-1194 - [0:0] +:limit-1195 - [0:0] +:limit-1196 - [0:0] +:limit-1197 - [0:0] +:limit-1198 - [0:0] +:limit-1199 - [0:0] +:limit-12 - [0:0] +:limit-120 - [0:0] +:limit-1200 - [0:0] +:limit-1202 - [0:0] +:limit-1203 - [0:0] +:limit-1204 - [0:0] +:limit-1206 - [0:0] +:limit-1207 - [0:0] +:limit-1208 - [0:0] +:limit-1209 - [0:0] +:limit-121 - [0:0] +:limit-1210 - [0:0] +:limit-1211 - [0:0] +:limit-1212 - [0:0] +:limit-1214 - [0:0] +:limit-1215 - [0:0] +:limit-1216 - [0:0] +:limit-1218 - [0:0] +:limit-1219 - [0:0] +:limit-122 - [0:0] +:limit-1220 - [0:0] +:limit-1221 - [0:0] +:limit-1222 - [0:0] +:limit-1223 - [0:0] +:limit-1224 - [0:0] +:limit-1226 - [0:0] +:limit-1227 - [0:0] +:limit-1228 - [0:0] +:limit-123 - [0:0] +:limit-1230 - [0:0] +:limit-1231 - [0:0] +:limit-1232 - [0:0] +:limit-1233 - [0:0] +:limit-1234 - [0:0] +:limit-1235 - [0:0] +:limit-1236 - [0:0] +:limit-1238 - [0:0] +:limit-1239 - [0:0] +:limit-124 - [0:0] +:limit-1240 - [0:0] +:limit-1242 - [0:0] +:limit-1243 - [0:0] +:limit-1244 - [0:0] +:limit-1245 - [0:0] +:limit-1246 - [0:0] +:limit-1247 - [0:0] +:limit-1248 - [0:0] +:limit-1249 - [0:0] +:limit-125 - [0:0] +:limit-1250 - [0:0] +:limit-1251 - [0:0] +:limit-1252 - [0:0] +:limit-1253 - [0:0] +:limit-1254 - [0:0] +:limit-1256 - [0:0] +:limit-1257 - [0:0] +:limit-1258 - [0:0] +:limit-126 - [0:0] +:limit-1260 - [0:0] +:limit-1261 - [0:0] +:limit-1262 - [0:0] +:limit-1263 - [0:0] +:limit-1264 - [0:0] +:limit-1265 - [0:0] +:limit-1266 - [0:0] +:limit-1268 - [0:0] +:limit-1269 - [0:0] +:limit-127 - [0:0] +:limit-1270 - [0:0] +:limit-1272 - [0:0] +:limit-1273 - [0:0] +:limit-1274 - [0:0] +:limit-1275 - [0:0] +:limit-1276 - [0:0] +:limit-1277 - [0:0] +:limit-1278 - [0:0] +:limit-128 - [0:0] +:limit-1280 - [0:0] +:limit-1281 - [0:0] +:limit-1282 - [0:0] +:limit-1284 - [0:0] +:limit-1285 - [0:0] +:limit-1286 - [0:0] +:limit-1287 - [0:0] +:limit-1288 - [0:0] +:limit-1289 - [0:0] +:limit-129 - [0:0] +:limit-1290 - [0:0] +:limit-1292 - [0:0] +:limit-1293 - [0:0] +:limit-1294 - [0:0] +:limit-1296 - [0:0] +:limit-1297 - [0:0] +:limit-1298 - [0:0] +:limit-1299 - [0:0] +:limit-13 - [0:0] +:limit-130 - [0:0] +:limit-1300 - [0:0] +:limit-1301 - [0:0] +:limit-1302 - [0:0] +:limit-1303 - [0:0] +:limit-1304 - [0:0] +:limit-1305 - [0:0] +:limit-1306 - [0:0] +:limit-1307 - [0:0] +:limit-1308 - [0:0] +:limit-131 - [0:0] +:limit-1310 - [0:0] +:limit-1311 - [0:0] +:limit-1312 - [0:0] +:limit-1314 - [0:0] +:limit-1315 - [0:0] +:limit-1316 - [0:0] +:limit-1317 - [0:0] +:limit-1318 - [0:0] +:limit-1319 - [0:0] +:limit-132 - [0:0] +:limit-1320 - [0:0] +:limit-1322 - [0:0] +:limit-1323 - [0:0] +:limit-1324 - [0:0] +:limit-1326 - [0:0] +:limit-1327 - [0:0] +:limit-1328 - [0:0] +:limit-1329 - [0:0] +:limit-133 - [0:0] +:limit-1330 - [0:0] +:limit-1331 - [0:0] +:limit-1332 - [0:0] +:limit-1334 - [0:0] +:limit-1335 - [0:0] +:limit-1336 - [0:0] +:limit-1338 - [0:0] +:limit-1339 - [0:0] +:limit-134 - [0:0] +:limit-1340 - [0:0] +:limit-1341 - [0:0] +:limit-1342 - [0:0] +:limit-1343 - [0:0] +:limit-1344 - [0:0] +:limit-1346 - [0:0] +:limit-1347 - [0:0] +:limit-1348 - [0:0] +:limit-135 - [0:0] +:limit-1350 - [0:0] +:limit-1351 - [0:0] +:limit-1352 - [0:0] +:limit-1353 - [0:0] +:limit-1354 - [0:0] +:limit-1355 - [0:0] +:limit-1356 - [0:0] +:limit-1357 - [0:0] +:limit-1358 - [0:0] +:limit-1359 - [0:0] +:limit-136 - [0:0] +:limit-1360 - [0:0] +:limit-1361 - [0:0] +:limit-1362 - [0:0] +:limit-1364 - [0:0] +:limit-1365 - [0:0] +:limit-1366 - [0:0] +:limit-1368 - [0:0] +:limit-1369 - [0:0] +:limit-137 - [0:0] +:limit-1370 - [0:0] +:limit-1371 - [0:0] +:limit-1372 - [0:0] +:limit-1373 - [0:0] +:limit-1374 - [0:0] +:limit-1376 - [0:0] +:limit-1377 - [0:0] +:limit-1378 - [0:0] +:limit-138 - [0:0] +:limit-1380 - [0:0] +:limit-1381 - [0:0] +:limit-1382 - [0:0] +:limit-1383 - [0:0] +:limit-1384 - [0:0] +:limit-1385 - [0:0] +:limit-1386 - [0:0] +:limit-1388 - [0:0] +:limit-1389 - [0:0] +:limit-139 - [0:0] +:limit-1390 - [0:0] +:limit-1392 - [0:0] +:limit-1393 - [0:0] +:limit-1394 - [0:0] +:limit-1395 - [0:0] +:limit-1396 - [0:0] +:limit-1397 - [0:0] +:limit-1398 - [0:0] +:limit-14 - [0:0] +:limit-140 - [0:0] +:limit-1400 - [0:0] +:limit-1401 - [0:0] +:limit-1402 - [0:0] +:limit-1404 - [0:0] +:limit-1405 - [0:0] +:limit-1406 - [0:0] +:limit-1407 - [0:0] +:limit-1408 - [0:0] +:limit-1409 - [0:0] +:limit-141 - [0:0] +:limit-1410 - [0:0] +:limit-1411 - [0:0] +:limit-1412 - [0:0] +:limit-1413 - [0:0] +:limit-1414 - [0:0] +:limit-1415 - [0:0] +:limit-1416 - [0:0] +:limit-1417 - [0:0] +:limit-1418 - [0:0] +:limit-1419 - [0:0] +:limit-142 - [0:0] +:limit-1420 - [0:0] +:limit-1421 - [0:0] +:limit-1422 - [0:0] +:limit-1423 - [0:0] +:limit-1424 - [0:0] +:limit-1425 - [0:0] +:limit-1426 - [0:0] +:limit-1427 - [0:0] +:limit-1428 - [0:0] +:limit-1429 - [0:0] +:limit-143 - [0:0] +:limit-1430 - [0:0] +:limit-1431 - [0:0] +:limit-144 - [0:0] +:limit-145 - [0:0] +:limit-146 - [0:0] +:limit-147 - [0:0] +:limit-148 - [0:0] +:limit-149 - [0:0] +:limit-15 - [0:0] +:limit-150 - [0:0] +:limit-151 - [0:0] +:limit-152 - [0:0] +:limit-153 - [0:0] +:limit-154 - [0:0] +:limit-155 - [0:0] +:limit-156 - [0:0] +:limit-157 - [0:0] +:limit-158 - [0:0] +:limit-159 - [0:0] +:limit-16 - [0:0] +:limit-160 - [0:0] +:limit-161 - [0:0] +:limit-162 - [0:0] +:limit-163 - [0:0] +:limit-164 - [0:0] +:limit-165 - [0:0] +:limit-166 - [0:0] +:limit-167 - [0:0] +:limit-168 - [0:0] +:limit-169 - [0:0] +:limit-17 - [0:0] +:limit-170 - [0:0] +:limit-171 - [0:0] +:limit-172 - [0:0] +:limit-173 - [0:0] +:limit-174 - [0:0] +:limit-175 - [0:0] +:limit-176 - [0:0] +:limit-177 - [0:0] +:limit-178 - [0:0] +:limit-179 - [0:0] +:limit-18 - [0:0] +:limit-180 - [0:0] +:limit-181 - [0:0] +:limit-182 - [0:0] +:limit-183 - [0:0] +:limit-184 - [0:0] +:limit-185 - [0:0] +:limit-186 - [0:0] +:limit-187 - [0:0] +:limit-188 - [0:0] +:limit-189 - [0:0] +:limit-19 - [0:0] +:limit-190 - [0:0] +:limit-191 - [0:0] +:limit-192 - [0:0] +:limit-193 - [0:0] +:limit-194 - [0:0] +:limit-195 - [0:0] +:limit-196 - [0:0] +:limit-197 - [0:0] +:limit-198 - [0:0] +:limit-199 - [0:0] +:limit-2 - [0:0] +:limit-20 - [0:0] +:limit-200 - [0:0] +:limit-201 - [0:0] +:limit-202 - [0:0] +:limit-203 - [0:0] +:limit-204 - [0:0] +:limit-205 - [0:0] +:limit-206 - [0:0] +:limit-207 - [0:0] +:limit-208 - [0:0] +:limit-209 - [0:0] +:limit-21 - [0:0] +:limit-210 - [0:0] +:limit-211 - [0:0] +:limit-212 - [0:0] +:limit-213 - [0:0] +:limit-214 - [0:0] +:limit-215 - [0:0] +:limit-216 - [0:0] +:limit-217 - [0:0] +:limit-218 - [0:0] +:limit-219 - [0:0] +:limit-22 - [0:0] +:limit-220 - [0:0] +:limit-221 - [0:0] +:limit-222 - [0:0] +:limit-223 - [0:0] +:limit-224 - [0:0] +:limit-225 - [0:0] +:limit-226 - [0:0] +:limit-227 - [0:0] +:limit-228 - [0:0] +:limit-229 - [0:0] +:limit-23 - [0:0] +:limit-230 - [0:0] +:limit-231 - [0:0] +:limit-232 - [0:0] +:limit-233 - [0:0] +:limit-234 - [0:0] +:limit-235 - [0:0] +:limit-236 - [0:0] +:limit-237 - [0:0] +:limit-238 - [0:0] +:limit-239 - [0:0] +:limit-24 - [0:0] +:limit-240 - [0:0] +:limit-241 - [0:0] +:limit-242 - [0:0] +:limit-243 - [0:0] +:limit-244 - [0:0] +:limit-245 - [0:0] +:limit-246 - [0:0] +:limit-247 - [0:0] +:limit-248 - [0:0] +:limit-249 - [0:0] +:limit-25 - [0:0] +:limit-250 - [0:0] +:limit-251 - [0:0] +:limit-252 - [0:0] +:limit-253 - [0:0] +:limit-254 - [0:0] +:limit-255 - [0:0] +:limit-256 - [0:0] +:limit-257 - [0:0] +:limit-258 - [0:0] +:limit-259 - [0:0] +:limit-26 - [0:0] +:limit-260 - [0:0] +:limit-261 - [0:0] +:limit-262 - [0:0] +:limit-263 - [0:0] +:limit-264 - [0:0] +:limit-265 - [0:0] +:limit-266 - [0:0] +:limit-267 - [0:0] +:limit-268 - [0:0] +:limit-269 - [0:0] +:limit-27 - [0:0] +:limit-270 - [0:0] +:limit-271 - [0:0] +:limit-272 - [0:0] +:limit-273 - [0:0] +:limit-274 - [0:0] +:limit-275 - [0:0] +:limit-276 - [0:0] +:limit-277 - [0:0] +:limit-278 - [0:0] +:limit-279 - [0:0] +:limit-28 - [0:0] +:limit-280 - [0:0] +:limit-281 - [0:0] +:limit-282 - [0:0] +:limit-283 - [0:0] +:limit-284 - [0:0] +:limit-285 - [0:0] +:limit-286 - [0:0] +:limit-287 - [0:0] +:limit-288 - [0:0] +:limit-289 - [0:0] +:limit-29 - [0:0] +:limit-290 - [0:0] +:limit-291 - [0:0] +:limit-292 - [0:0] +:limit-293 - [0:0] +:limit-294 - [0:0] +:limit-295 - [0:0] +:limit-296 - [0:0] +:limit-297 - [0:0] +:limit-298 - [0:0] +:limit-299 - [0:0] +:limit-3 - [0:0] +:limit-30 - [0:0] +:limit-300 - [0:0] +:limit-301 - [0:0] +:limit-302 - [0:0] +:limit-303 - [0:0] +:limit-304 - [0:0] +:limit-305 - [0:0] +:limit-306 - [0:0] +:limit-307 - [0:0] +:limit-308 - [0:0] +:limit-309 - [0:0] +:limit-31 - [0:0] +:limit-310 - [0:0] +:limit-311 - [0:0] +:limit-312 - [0:0] +:limit-313 - [0:0] +:limit-314 - [0:0] +:limit-315 - [0:0] +:limit-316 - [0:0] +:limit-317 - [0:0] +:limit-318 - [0:0] +:limit-319 - [0:0] +:limit-32 - [0:0] +:limit-320 - [0:0] +:limit-321 - [0:0] +:limit-322 - [0:0] +:limit-323 - [0:0] +:limit-324 - [0:0] +:limit-325 - [0:0] +:limit-326 - [0:0] +:limit-327 - [0:0] +:limit-328 - [0:0] +:limit-329 - [0:0] +:limit-33 - [0:0] +:limit-330 - [0:0] +:limit-331 - [0:0] +:limit-332 - [0:0] +:limit-333 - [0:0] +:limit-334 - [0:0] +:limit-335 - [0:0] +:limit-336 - [0:0] +:limit-337 - [0:0] +:limit-338 - [0:0] +:limit-339 - [0:0] +:limit-34 - [0:0] +:limit-340 - [0:0] +:limit-341 - [0:0] +:limit-342 - [0:0] +:limit-343 - [0:0] +:limit-344 - [0:0] +:limit-345 - [0:0] +:limit-346 - [0:0] +:limit-347 - [0:0] +:limit-348 - [0:0] +:limit-349 - [0:0] +:limit-35 - [0:0] +:limit-350 - [0:0] +:limit-351 - [0:0] +:limit-352 - [0:0] +:limit-353 - [0:0] +:limit-354 - [0:0] +:limit-355 - [0:0] +:limit-356 - [0:0] +:limit-357 - [0:0] +:limit-358 - [0:0] +:limit-359 - [0:0] +:limit-36 - [0:0] +:limit-360 - [0:0] +:limit-361 - [0:0] +:limit-362 - [0:0] +:limit-363 - [0:0] +:limit-364 - [0:0] +:limit-365 - [0:0] +:limit-366 - [0:0] +:limit-367 - [0:0] +:limit-368 - [0:0] +:limit-369 - [0:0] +:limit-37 - [0:0] +:limit-370 - [0:0] +:limit-371 - [0:0] +:limit-372 - [0:0] +:limit-373 - [0:0] +:limit-374 - [0:0] +:limit-375 - [0:0] +:limit-376 - [0:0] +:limit-378 - [0:0] +:limit-379 - [0:0] +:limit-38 - [0:0] +:limit-380 - [0:0] +:limit-382 - [0:0] +:limit-383 - [0:0] +:limit-384 - [0:0] +:limit-385 - [0:0] +:limit-386 - [0:0] +:limit-387 - [0:0] +:limit-388 - [0:0] +:limit-39 - [0:0] +:limit-390 - [0:0] +:limit-391 - [0:0] +:limit-392 - [0:0] +:limit-394 - [0:0] +:limit-395 - [0:0] +:limit-396 - [0:0] +:limit-397 - [0:0] +:limit-398 - [0:0] +:limit-399 - [0:0] +:limit-4 - [0:0] +:limit-40 - [0:0] +:limit-400 - [0:0] +:limit-402 - [0:0] +:limit-403 - [0:0] +:limit-404 - [0:0] +:limit-406 - [0:0] +:limit-407 - [0:0] +:limit-408 - [0:0] +:limit-409 - [0:0] +:limit-41 - [0:0] +:limit-410 - [0:0] +:limit-411 - [0:0] +:limit-412 - [0:0] +:limit-414 - [0:0] +:limit-415 - [0:0] +:limit-416 - [0:0] +:limit-418 - [0:0] +:limit-419 - [0:0] +:limit-42 - [0:0] +:limit-420 - [0:0] +:limit-421 - [0:0] +:limit-422 - [0:0] +:limit-423 - [0:0] +:limit-424 - [0:0] +:limit-425 - [0:0] +:limit-426 - [0:0] +:limit-427 - [0:0] +:limit-428 - [0:0] +:limit-429 - [0:0] +:limit-43 - [0:0] +:limit-430 - [0:0] +:limit-432 - [0:0] +:limit-433 - [0:0] +:limit-434 - [0:0] +:limit-436 - [0:0] +:limit-437 - [0:0] +:limit-438 - [0:0] +:limit-439 - [0:0] +:limit-44 - [0:0] +:limit-440 - [0:0] +:limit-441 - [0:0] +:limit-442 - [0:0] +:limit-444 - [0:0] +:limit-445 - [0:0] +:limit-446 - [0:0] +:limit-448 - [0:0] +:limit-449 - [0:0] +:limit-45 - [0:0] +:limit-450 - [0:0] +:limit-451 - [0:0] +:limit-452 - [0:0] +:limit-453 - [0:0] +:limit-454 - [0:0] +:limit-456 - [0:0] +:limit-457 - [0:0] +:limit-458 - [0:0] +:limit-46 - [0:0] +:limit-460 - [0:0] +:limit-461 - [0:0] +:limit-462 - [0:0] +:limit-463 - [0:0] +:limit-464 - [0:0] +:limit-465 - [0:0] +:limit-466 - [0:0] +:limit-468 - [0:0] +:limit-469 - [0:0] +:limit-47 - [0:0] +:limit-470 - [0:0] +:limit-472 - [0:0] +:limit-473 - [0:0] +:limit-474 - [0:0] +:limit-475 - [0:0] +:limit-476 - [0:0] +:limit-477 - [0:0] +:limit-478 - [0:0] +:limit-479 - [0:0] +:limit-48 - [0:0] +:limit-480 - [0:0] +:limit-481 - [0:0] +:limit-482 - [0:0] +:limit-483 - [0:0] +:limit-484 - [0:0] +:limit-486 - [0:0] +:limit-487 - [0:0] +:limit-488 - [0:0] +:limit-49 - [0:0] +:limit-490 - [0:0] +:limit-491 - [0:0] +:limit-492 - [0:0] +:limit-493 - [0:0] +:limit-494 - [0:0] +:limit-495 - [0:0] +:limit-496 - [0:0] +:limit-498 - [0:0] +:limit-499 - [0:0] +:limit-5 - [0:0] +:limit-50 - [0:0] +:limit-500 - [0:0] +:limit-502 - [0:0] +:limit-503 - [0:0] +:limit-504 - [0:0] +:limit-505 - [0:0] +:limit-506 - [0:0] +:limit-507 - [0:0] +:limit-508 - [0:0] +:limit-51 - [0:0] +:limit-510 - [0:0] +:limit-511 - [0:0] +:limit-512 - [0:0] +:limit-514 - [0:0] +:limit-515 - [0:0] +:limit-516 - [0:0] +:limit-517 - [0:0] +:limit-518 - [0:0] +:limit-519 - [0:0] +:limit-52 - [0:0] +:limit-520 - [0:0] +:limit-522 - [0:0] +:limit-523 - [0:0] +:limit-524 - [0:0] +:limit-526 - [0:0] +:limit-527 - [0:0] +:limit-528 - [0:0] +:limit-529 - [0:0] +:limit-53 - [0:0] +:limit-530 - [0:0] +:limit-531 - [0:0] +:limit-532 - [0:0] +:limit-533 - [0:0] +:limit-534 - [0:0] +:limit-535 - [0:0] +:limit-536 - [0:0] +:limit-537 - [0:0] +:limit-538 - [0:0] +:limit-54 - [0:0] +:limit-540 - [0:0] +:limit-541 - [0:0] +:limit-542 - [0:0] +:limit-544 - [0:0] +:limit-545 - [0:0] +:limit-546 - [0:0] +:limit-547 - [0:0] +:limit-548 - [0:0] +:limit-549 - [0:0] +:limit-55 - [0:0] +:limit-550 - [0:0] +:limit-552 - [0:0] +:limit-553 - [0:0] +:limit-554 - [0:0] +:limit-556 - [0:0] +:limit-557 - [0:0] +:limit-558 - [0:0] +:limit-559 - [0:0] +:limit-56 - [0:0] +:limit-560 - [0:0] +:limit-561 - [0:0] +:limit-562 - [0:0] +:limit-564 - [0:0] +:limit-565 - [0:0] +:limit-566 - [0:0] +:limit-568 - [0:0] +:limit-569 - [0:0] +:limit-57 - [0:0] +:limit-570 - [0:0] +:limit-571 - [0:0] +:limit-572 - [0:0] +:limit-573 - [0:0] +:limit-574 - [0:0] +:limit-576 - [0:0] +:limit-577 - [0:0] +:limit-578 - [0:0] +:limit-58 - [0:0] +:limit-580 - [0:0] +:limit-581 - [0:0] +:limit-582 - [0:0] +:limit-583 - [0:0] +:limit-584 - [0:0] +:limit-585 - [0:0] +:limit-586 - [0:0] +:limit-587 - [0:0] +:limit-588 - [0:0] +:limit-589 - [0:0] +:limit-59 - [0:0] +:limit-590 - [0:0] +:limit-591 - [0:0] +:limit-592 - [0:0] +:limit-594 - [0:0] +:limit-595 - [0:0] +:limit-596 - [0:0] +:limit-598 - [0:0] +:limit-599 - [0:0] +:limit-6 - [0:0] +:limit-60 - [0:0] +:limit-600 - [0:0] +:limit-601 - [0:0] +:limit-602 - [0:0] +:limit-603 - [0:0] +:limit-604 - [0:0] +:limit-606 - [0:0] +:limit-607 - [0:0] +:limit-608 - [0:0] +:limit-61 - [0:0] +:limit-610 - [0:0] +:limit-611 - [0:0] +:limit-612 - [0:0] +:limit-613 - [0:0] +:limit-614 - [0:0] +:limit-615 - [0:0] +:limit-616 - [0:0] +:limit-618 - [0:0] +:limit-619 - [0:0] +:limit-62 - [0:0] +:limit-620 - [0:0] +:limit-622 - [0:0] +:limit-623 - [0:0] +:limit-624 - [0:0] +:limit-625 - [0:0] +:limit-626 - [0:0] +:limit-627 - [0:0] +:limit-628 - [0:0] +:limit-63 - [0:0] +:limit-630 - [0:0] +:limit-631 - [0:0] +:limit-632 - [0:0] +:limit-634 - [0:0] +:limit-635 - [0:0] +:limit-636 - [0:0] +:limit-637 - [0:0] +:limit-638 - [0:0] +:limit-639 - [0:0] +:limit-64 - [0:0] +:limit-640 - [0:0] +:limit-641 - [0:0] +:limit-642 - [0:0] +:limit-643 - [0:0] +:limit-644 - [0:0] +:limit-645 - [0:0] +:limit-646 - [0:0] +:limit-648 - [0:0] +:limit-649 - [0:0] +:limit-65 - [0:0] +:limit-650 - [0:0] +:limit-652 - [0:0] +:limit-653 - [0:0] +:limit-654 - [0:0] +:limit-655 - [0:0] +:limit-656 - [0:0] +:limit-657 - [0:0] +:limit-658 - [0:0] +:limit-66 - [0:0] +:limit-660 - [0:0] +:limit-661 - [0:0] +:limit-662 - [0:0] +:limit-664 - [0:0] +:limit-665 - [0:0] +:limit-666 - [0:0] +:limit-667 - [0:0] +:limit-668 - [0:0] +:limit-669 - [0:0] +:limit-67 - [0:0] +:limit-670 - [0:0] +:limit-672 - [0:0] +:limit-673 - [0:0] +:limit-674 - [0:0] +:limit-676 - [0:0] +:limit-677 - [0:0] +:limit-678 - [0:0] +:limit-679 - [0:0] +:limit-68 - [0:0] +:limit-680 - [0:0] +:limit-681 - [0:0] +:limit-682 - [0:0] +:limit-684 - [0:0] +:limit-685 - [0:0] +:limit-686 - [0:0] +:limit-688 - [0:0] +:limit-689 - [0:0] +:limit-69 - [0:0] +:limit-690 - [0:0] +:limit-691 - [0:0] +:limit-692 - [0:0] +:limit-693 - [0:0] +:limit-694 - [0:0] +:limit-695 - [0:0] +:limit-696 - [0:0] +:limit-697 - [0:0] +:limit-698 - [0:0] +:limit-699 - [0:0] +:limit-7 - [0:0] +:limit-70 - [0:0] +:limit-700 - [0:0] +:limit-701 - [0:0] +:limit-702 - [0:0] +:limit-703 - [0:0] +:limit-704 - [0:0] +:limit-705 - [0:0] +:limit-706 - [0:0] +:limit-707 - [0:0] +:limit-708 - [0:0] +:limit-709 - [0:0] +:limit-71 - [0:0] +:limit-710 - [0:0] +:limit-711 - [0:0] +:limit-712 - [0:0] +:limit-713 - [0:0] +:limit-714 - [0:0] +:limit-715 - [0:0] +:limit-716 - [0:0] +:limit-717 - [0:0] +:limit-718 - [0:0] +:limit-719 - [0:0] +:limit-72 - [0:0] +:limit-720 - [0:0] +:limit-721 - [0:0] +:limit-722 - [0:0] +:limit-723 - [0:0] +:limit-724 - [0:0] +:limit-725 - [0:0] +:limit-726 - [0:0] +:limit-727 - [0:0] +:limit-728 - [0:0] +:limit-729 - [0:0] +:limit-73 - [0:0] +:limit-730 - [0:0] +:limit-731 - [0:0] +:limit-732 - [0:0] +:limit-733 - [0:0] +:limit-734 - [0:0] +:limit-735 - [0:0] +:limit-736 - [0:0] +:limit-737 - [0:0] +:limit-738 - [0:0] +:limit-739 - [0:0] +:limit-74 - [0:0] +:limit-740 - [0:0] +:limit-741 - [0:0] +:limit-742 - [0:0] +:limit-743 - [0:0] +:limit-744 - [0:0] +:limit-745 - [0:0] +:limit-746 - [0:0] +:limit-747 - [0:0] +:limit-748 - [0:0] +:limit-749 - [0:0] +:limit-75 - [0:0] +:limit-750 - [0:0] +:limit-751 - [0:0] +:limit-752 - [0:0] +:limit-753 - [0:0] +:limit-754 - [0:0] +:limit-755 - [0:0] +:limit-756 - [0:0] +:limit-757 - [0:0] +:limit-758 - [0:0] +:limit-759 - [0:0] +:limit-76 - [0:0] +:limit-760 - [0:0] +:limit-761 - [0:0] +:limit-762 - [0:0] +:limit-763 - [0:0] +:limit-764 - [0:0] +:limit-765 - [0:0] +:limit-766 - [0:0] +:limit-767 - [0:0] +:limit-768 - [0:0] +:limit-769 - [0:0] +:limit-77 - [0:0] +:limit-770 - [0:0] +:limit-771 - [0:0] +:limit-772 - [0:0] +:limit-773 - [0:0] +:limit-774 - [0:0] +:limit-775 - [0:0] +:limit-776 - [0:0] +:limit-777 - [0:0] +:limit-778 - [0:0] +:limit-779 - [0:0] +:limit-78 - [0:0] +:limit-780 - [0:0] +:limit-781 - [0:0] +:limit-782 - [0:0] +:limit-783 - [0:0] +:limit-784 - [0:0] +:limit-785 - [0:0] +:limit-786 - [0:0] +:limit-787 - [0:0] +:limit-788 - [0:0] +:limit-789 - [0:0] +:limit-79 - [0:0] +:limit-790 - [0:0] +:limit-791 - [0:0] +:limit-792 - [0:0] +:limit-793 - [0:0] +:limit-794 - [0:0] +:limit-795 - [0:0] +:limit-796 - [0:0] +:limit-797 - [0:0] +:limit-798 - [0:0] +:limit-799 - [0:0] +:limit-8 - [0:0] +:limit-80 - [0:0] +:limit-800 - [0:0] +:limit-801 - [0:0] +:limit-802 - [0:0] +:limit-803 - [0:0] +:limit-804 - [0:0] +:limit-805 - [0:0] +:limit-806 - [0:0] +:limit-807 - [0:0] +:limit-808 - [0:0] +:limit-809 - [0:0] +:limit-81 - [0:0] +:limit-810 - [0:0] +:limit-811 - [0:0] +:limit-812 - [0:0] +:limit-813 - [0:0] +:limit-814 - [0:0] +:limit-815 - [0:0] +:limit-816 - [0:0] +:limit-817 - [0:0] +:limit-818 - [0:0] +:limit-819 - [0:0] +:limit-82 - [0:0] +:limit-820 - [0:0] +:limit-821 - [0:0] +:limit-822 - [0:0] +:limit-823 - [0:0] +:limit-824 - [0:0] +:limit-825 - [0:0] +:limit-826 - [0:0] +:limit-827 - [0:0] +:limit-828 - [0:0] +:limit-829 - [0:0] +:limit-83 - [0:0] +:limit-830 - [0:0] +:limit-831 - [0:0] +:limit-832 - [0:0] +:limit-833 - [0:0] +:limit-834 - [0:0] +:limit-835 - [0:0] +:limit-836 - [0:0] +:limit-837 - [0:0] +:limit-838 - [0:0] +:limit-839 - [0:0] +:limit-84 - [0:0] +:limit-840 - [0:0] +:limit-841 - [0:0] +:limit-842 - [0:0] +:limit-843 - [0:0] +:limit-844 - [0:0] +:limit-845 - [0:0] +:limit-846 - [0:0] +:limit-847 - [0:0] +:limit-848 - [0:0] +:limit-849 - [0:0] +:limit-85 - [0:0] +:limit-850 - [0:0] +:limit-851 - [0:0] +:limit-852 - [0:0] +:limit-853 - [0:0] +:limit-854 - [0:0] +:limit-855 - [0:0] +:limit-856 - [0:0] +:limit-857 - [0:0] +:limit-858 - [0:0] +:limit-859 - [0:0] +:limit-86 - [0:0] +:limit-860 - [0:0] +:limit-861 - [0:0] +:limit-862 - [0:0] +:limit-863 - [0:0] +:limit-864 - [0:0] +:limit-865 - [0:0] +:limit-866 - [0:0] +:limit-867 - [0:0] +:limit-868 - [0:0] +:limit-869 - [0:0] +:limit-87 - [0:0] +:limit-870 - [0:0] +:limit-871 - [0:0] +:limit-872 - [0:0] +:limit-873 - [0:0] +:limit-874 - [0:0] +:limit-875 - [0:0] +:limit-876 - [0:0] +:limit-877 - [0:0] +:limit-878 - [0:0] +:limit-879 - [0:0] +:limit-88 - [0:0] +:limit-880 - [0:0] +:limit-881 - [0:0] +:limit-882 - [0:0] +:limit-883 - [0:0] +:limit-884 - [0:0] +:limit-885 - [0:0] +:limit-886 - [0:0] +:limit-887 - [0:0] +:limit-888 - [0:0] +:limit-889 - [0:0] +:limit-89 - [0:0] +:limit-890 - [0:0] +:limit-891 - [0:0] +:limit-892 - [0:0] +:limit-893 - [0:0] +:limit-894 - [0:0] +:limit-895 - [0:0] +:limit-896 - [0:0] +:limit-897 - [0:0] +:limit-898 - [0:0] +:limit-899 - [0:0] +:limit-9 - [0:0] +:limit-90 - [0:0] +:limit-900 - [0:0] +:limit-901 - [0:0] +:limit-902 - [0:0] +:limit-903 - [0:0] +:limit-904 - [0:0] +:limit-905 - [0:0] +:limit-906 - [0:0] +:limit-907 - [0:0] +:limit-908 - [0:0] +:limit-909 - [0:0] +:limit-91 - [0:0] +:limit-910 - [0:0] +:limit-911 - [0:0] +:limit-912 - [0:0] +:limit-913 - [0:0] +:limit-914 - [0:0] +:limit-915 - [0:0] +:limit-916 - [0:0] +:limit-917 - [0:0] +:limit-918 - [0:0] +:limit-919 - [0:0] +:limit-92 - [0:0] +:limit-920 - [0:0] +:limit-921 - [0:0] +:limit-922 - [0:0] +:limit-923 - [0:0] +:limit-924 - [0:0] +:limit-925 - [0:0] +:limit-926 - [0:0] +:limit-927 - [0:0] +:limit-928 - [0:0] +:limit-929 - [0:0] +:limit-93 - [0:0] +:limit-930 - [0:0] +:limit-931 - [0:0] +:limit-932 - [0:0] +:limit-933 - [0:0] +:limit-934 - [0:0] +:limit-935 - [0:0] +:limit-936 - [0:0] +:limit-937 - [0:0] +:limit-938 - [0:0] +:limit-939 - [0:0] +:limit-94 - [0:0] +:limit-940 - [0:0] +:limit-941 - [0:0] +:limit-942 - [0:0] +:limit-943 - [0:0] +:limit-944 - [0:0] +:limit-945 - [0:0] +:limit-946 - [0:0] +:limit-947 - [0:0] +:limit-948 - [0:0] +:limit-949 - [0:0] +:limit-95 - [0:0] +:limit-950 - [0:0] +:limit-951 - [0:0] +:limit-952 - [0:0] +:limit-953 - [0:0] +:limit-954 - [0:0] +:limit-955 - [0:0] +:limit-956 - [0:0] +:limit-957 - [0:0] +:limit-958 - [0:0] +:limit-959 - [0:0] +:limit-96 - [0:0] +:limit-960 - [0:0] +:limit-961 - [0:0] +:limit-962 - [0:0] +:limit-963 - [0:0] +:limit-964 - [0:0] +:limit-965 - [0:0] +:limit-966 - [0:0] +:limit-967 - [0:0] +:limit-968 - [0:0] +:limit-969 - [0:0] +:limit-97 - [0:0] +:limit-970 - [0:0] +:limit-971 - [0:0] +:limit-972 - [0:0] +:limit-973 - [0:0] +:limit-974 - [0:0] +:limit-975 - [0:0] +:limit-976 - [0:0] +:limit-977 - [0:0] +:limit-978 - [0:0] +:limit-979 - [0:0] +:limit-98 - [0:0] +:limit-980 - [0:0] +:limit-981 - [0:0] +:limit-982 - [0:0] +:limit-983 - [0:0] +:limit-984 - [0:0] +:limit-985 - [0:0] +:limit-986 - [0:0] +:limit-987 - [0:0] +:limit-988 - [0:0] +:limit-989 - [0:0] +:limit-99 - [0:0] +:limit-990 - [0:0] +:limit-991 - [0:0] +:limit-992 - [0:0] +:limit-993 - [0:0] +:limit-994 - [0:0] +:limit-995 - [0:0] +:limit-996 - [0:0] +:limit-997 - [0:0] +:limit-998 - [0:0] +:limit-999 - [0:0] +:logaccept-0 - [0:0] +:logaccept-1 - [0:0] +:logaccept-10 - [0:0] +:logaccept-11 - [0:0] +:logaccept-12 - [0:0] +:logaccept-13 - [0:0] +:logaccept-14 - [0:0] +:logaccept-15 - [0:0] +:logaccept-16 - [0:0] +:logaccept-17 - [0:0] +:logaccept-18 - [0:0] +:logaccept-19 - [0:0] +:logaccept-2 - [0:0] +:logaccept-20 - [0:0] +:logaccept-21 - [0:0] +:logaccept-3 - [0:0] +:logaccept-4 - [0:0] +:logaccept-5 - [0:0] +:logaccept-6 - [0:0] +:logaccept-7 - [0:0] +:logaccept-8 - [0:0] +:logaccept-9 - [0:0] +:logaccept-final-0 - [0:0] +:logaccept-final-1 - [0:0] +:logaccept-final-10 - [0:0] +:logaccept-final-11 - [0:0] +:logaccept-final-12 - [0:0] +:logaccept-final-13 - [0:0] +:logaccept-final-14 - [0:0] +:logaccept-final-15 - [0:0] +:logaccept-final-16 - [0:0] +:logaccept-final-17 - [0:0] +:logaccept-final-18 - [0:0] +:logaccept-final-19 - [0:0] +:logaccept-final-2 - [0:0] +:logaccept-final-20 - [0:0] +:logaccept-final-21 - [0:0] +:logaccept-final-22 - [0:0] +:logaccept-final-23 - [0:0] +:logaccept-final-24 - [0:0] +:logaccept-final-25 - [0:0] +:logaccept-final-26 - [0:0] +:logaccept-final-27 - [0:0] +:logaccept-final-28 - [0:0] +:logaccept-final-29 - [0:0] +:logaccept-final-3 - [0:0] +:logaccept-final-30 - [0:0] +:logaccept-final-31 - [0:0] +:logaccept-final-32 - [0:0] +:logaccept-final-33 - [0:0] +:logaccept-final-34 - [0:0] +:logaccept-final-35 - [0:0] +:logaccept-final-36 - [0:0] +:logaccept-final-37 - [0:0] +:logaccept-final-38 - [0:0] +:logaccept-final-39 - [0:0] +:logaccept-final-4 - [0:0] +:logaccept-final-40 - [0:0] +:logaccept-final-41 - [0:0] +:logaccept-final-42 - [0:0] +:logaccept-final-43 - [0:0] +:logaccept-final-44 - [0:0] +:logaccept-final-45 - [0:0] +:logaccept-final-46 - [0:0] +:logaccept-final-47 - [0:0] +:logaccept-final-48 - [0:0] +:logaccept-final-49 - [0:0] +:logaccept-final-5 - [0:0] +:logaccept-final-50 - [0:0] +:logaccept-final-51 - [0:0] +:logaccept-final-52 - [0:0] +:logaccept-final-53 - [0:0] +:logaccept-final-54 - [0:0] +:logaccept-final-55 - [0:0] +:logaccept-final-56 - [0:0] +:logaccept-final-57 - [0:0] +:logaccept-final-58 - [0:0] +:logaccept-final-59 - [0:0] +:logaccept-final-6 - [0:0] +:logaccept-final-60 - [0:0] +:logaccept-final-61 - [0:0] +:logaccept-final-7 - [0:0] +:logaccept-final-8 - [0:0] +:logaccept-final-9 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logdrop-10 - [0:0] +:logdrop-100 - [0:0] +:logdrop-101 - [0:0] +:logdrop-102 - [0:0] +:logdrop-103 - [0:0] +:logdrop-104 - [0:0] +:logdrop-105 - [0:0] +:logdrop-106 - [0:0] +:logdrop-107 - [0:0] +:logdrop-108 - [0:0] +:logdrop-109 - [0:0] +:logdrop-11 - [0:0] +:logdrop-110 - [0:0] +:logdrop-111 - [0:0] +:logdrop-112 - [0:0] +:logdrop-113 - [0:0] +:logdrop-114 - [0:0] +:logdrop-115 - [0:0] +:logdrop-116 - [0:0] +:logdrop-117 - [0:0] +:logdrop-118 - [0:0] +:logdrop-119 - [0:0] +:logdrop-12 - [0:0] +:logdrop-120 - [0:0] +:logdrop-121 - [0:0] +:logdrop-122 - [0:0] +:logdrop-123 - [0:0] +:logdrop-124 - [0:0] +:logdrop-125 - [0:0] +:logdrop-126 - [0:0] +:logdrop-127 - [0:0] +:logdrop-128 - [0:0] +:logdrop-129 - [0:0] +:logdrop-13 - [0:0] +:logdrop-130 - [0:0] +:logdrop-131 - [0:0] +:logdrop-132 - [0:0] +:logdrop-133 - [0:0] +:logdrop-134 - [0:0] +:logdrop-135 - [0:0] +:logdrop-136 - [0:0] +:logdrop-137 - [0:0] +:logdrop-138 - [0:0] +:logdrop-139 - [0:0] +:logdrop-14 - [0:0] +:logdrop-140 - [0:0] +:logdrop-141 - [0:0] +:logdrop-142 - [0:0] +:logdrop-143 - [0:0] +:logdrop-144 - [0:0] +:logdrop-145 - [0:0] +:logdrop-146 - [0:0] +:logdrop-147 - [0:0] +:logdrop-148 - [0:0] +:logdrop-149 - [0:0] +:logdrop-15 - [0:0] +:logdrop-150 - [0:0] +:logdrop-151 - [0:0] +:logdrop-152 - [0:0] +:logdrop-153 - [0:0] +:logdrop-154 - [0:0] +:logdrop-155 - [0:0] +:logdrop-156 - [0:0] +:logdrop-157 - [0:0] +:logdrop-158 - [0:0] +:logdrop-159 - [0:0] +:logdrop-16 - [0:0] +:logdrop-160 - [0:0] +:logdrop-161 - [0:0] +:logdrop-162 - [0:0] +:logdrop-163 - [0:0] +:logdrop-164 - [0:0] +:logdrop-165 - [0:0] +:logdrop-166 - [0:0] +:logdrop-167 - [0:0] +:logdrop-168 - [0:0] +:logdrop-169 - [0:0] +:logdrop-17 - [0:0] +:logdrop-170 - [0:0] +:logdrop-171 - [0:0] +:logdrop-172 - [0:0] +:logdrop-173 - [0:0] +:logdrop-174 - [0:0] +:logdrop-175 - [0:0] +:logdrop-176 - [0:0] +:logdrop-177 - [0:0] +:logdrop-178 - [0:0] +:logdrop-179 - [0:0] +:logdrop-18 - [0:0] +:logdrop-180 - [0:0] +:logdrop-181 - [0:0] +:logdrop-182 - [0:0] +:logdrop-183 - [0:0] +:logdrop-184 - [0:0] +:logdrop-185 - [0:0] +:logdrop-186 - [0:0] +:logdrop-187 - [0:0] +:logdrop-188 - [0:0] +:logdrop-189 - [0:0] +:logdrop-19 - [0:0] +:logdrop-190 - [0:0] +:logdrop-191 - [0:0] +:logdrop-192 - [0:0] +:logdrop-193 - [0:0] +:logdrop-194 - [0:0] +:logdrop-195 - [0:0] +:logdrop-196 - [0:0] +:logdrop-197 - [0:0] +:logdrop-198 - [0:0] +:logdrop-199 - [0:0] +:logdrop-2 - [0:0] +:logdrop-20 - [0:0] +:logdrop-200 - [0:0] +:logdrop-201 - [0:0] +:logdrop-202 - [0:0] +:logdrop-203 - [0:0] +:logdrop-204 - [0:0] +:logdrop-205 - [0:0] +:logdrop-206 - [0:0] +:logdrop-207 - [0:0] +:logdrop-208 - [0:0] +:logdrop-209 - [0:0] +:logdrop-21 - [0:0] +:logdrop-210 - [0:0] +:logdrop-211 - [0:0] +:logdrop-212 - [0:0] +:logdrop-213 - [0:0] +:logdrop-214 - [0:0] +:logdrop-215 - [0:0] +:logdrop-216 - [0:0] +:logdrop-217 - [0:0] +:logdrop-218 - [0:0] +:logdrop-219 - [0:0] +:logdrop-22 - [0:0] +:logdrop-220 - [0:0] +:logdrop-221 - [0:0] +:logdrop-222 - [0:0] +:logdrop-223 - [0:0] +:logdrop-224 - [0:0] +:logdrop-225 - [0:0] +:logdrop-226 - [0:0] +:logdrop-227 - [0:0] +:logdrop-228 - [0:0] +:logdrop-229 - [0:0] +:logdrop-23 - [0:0] +:logdrop-230 - [0:0] +:logdrop-231 - [0:0] +:logdrop-232 - [0:0] +:logdrop-233 - [0:0] +:logdrop-234 - [0:0] +:logdrop-235 - [0:0] +:logdrop-236 - [0:0] +:logdrop-237 - [0:0] +:logdrop-238 - [0:0] +:logdrop-239 - [0:0] +:logdrop-24 - [0:0] +:logdrop-240 - [0:0] +:logdrop-241 - [0:0] +:logdrop-242 - [0:0] +:logdrop-243 - [0:0] +:logdrop-244 - [0:0] +:logdrop-245 - [0:0] +:logdrop-246 - [0:0] +:logdrop-247 - [0:0] +:logdrop-248 - [0:0] +:logdrop-249 - [0:0] +:logdrop-25 - [0:0] +:logdrop-250 - [0:0] +:logdrop-251 - [0:0] +:logdrop-252 - [0:0] +:logdrop-253 - [0:0] +:logdrop-254 - [0:0] +:logdrop-255 - [0:0] +:logdrop-256 - [0:0] +:logdrop-257 - [0:0] +:logdrop-258 - [0:0] +:logdrop-259 - [0:0] +:logdrop-26 - [0:0] +:logdrop-260 - [0:0] +:logdrop-261 - [0:0] +:logdrop-262 - [0:0] +:logdrop-263 - [0:0] +:logdrop-264 - [0:0] +:logdrop-265 - [0:0] +:logdrop-266 - [0:0] +:logdrop-267 - [0:0] +:logdrop-268 - [0:0] +:logdrop-269 - [0:0] +:logdrop-27 - [0:0] +:logdrop-270 - [0:0] +:logdrop-271 - [0:0] +:logdrop-272 - [0:0] +:logdrop-273 - [0:0] +:logdrop-274 - [0:0] +:logdrop-275 - [0:0] +:logdrop-276 - [0:0] +:logdrop-277 - [0:0] +:logdrop-278 - [0:0] +:logdrop-279 - [0:0] +:logdrop-28 - [0:0] +:logdrop-280 - [0:0] +:logdrop-281 - [0:0] +:logdrop-282 - [0:0] +:logdrop-283 - [0:0] +:logdrop-284 - [0:0] +:logdrop-285 - [0:0] +:logdrop-286 - [0:0] +:logdrop-287 - [0:0] +:logdrop-288 - [0:0] +:logdrop-289 - [0:0] +:logdrop-29 - [0:0] +:logdrop-290 - [0:0] +:logdrop-291 - [0:0] +:logdrop-292 - [0:0] +:logdrop-293 - [0:0] +:logdrop-294 - [0:0] +:logdrop-295 - [0:0] +:logdrop-296 - [0:0] +:logdrop-297 - [0:0] +:logdrop-298 - [0:0] +:logdrop-299 - [0:0] +:logdrop-3 - [0:0] +:logdrop-30 - [0:0] +:logdrop-300 - [0:0] +:logdrop-301 - [0:0] +:logdrop-302 - [0:0] +:logdrop-303 - [0:0] +:logdrop-304 - [0:0] +:logdrop-305 - [0:0] +:logdrop-306 - [0:0] +:logdrop-307 - [0:0] +:logdrop-308 - [0:0] +:logdrop-309 - [0:0] +:logdrop-31 - [0:0] +:logdrop-310 - [0:0] +:logdrop-311 - [0:0] +:logdrop-312 - [0:0] +:logdrop-313 - [0:0] +:logdrop-314 - [0:0] +:logdrop-315 - [0:0] +:logdrop-316 - [0:0] +:logdrop-317 - [0:0] +:logdrop-318 - [0:0] +:logdrop-319 - [0:0] +:logdrop-32 - [0:0] +:logdrop-320 - [0:0] +:logdrop-321 - [0:0] +:logdrop-322 - [0:0] +:logdrop-323 - [0:0] +:logdrop-324 - [0:0] +:logdrop-325 - [0:0] +:logdrop-326 - [0:0] +:logdrop-327 - [0:0] +:logdrop-328 - [0:0] +:logdrop-329 - [0:0] +:logdrop-33 - [0:0] +:logdrop-330 - [0:0] +:logdrop-331 - [0:0] +:logdrop-332 - [0:0] +:logdrop-333 - [0:0] +:logdrop-334 - [0:0] +:logdrop-335 - [0:0] +:logdrop-336 - [0:0] +:logdrop-337 - [0:0] +:logdrop-338 - [0:0] +:logdrop-339 - [0:0] +:logdrop-34 - [0:0] +:logdrop-340 - [0:0] +:logdrop-341 - [0:0] +:logdrop-342 - [0:0] +:logdrop-343 - [0:0] +:logdrop-344 - [0:0] +:logdrop-345 - [0:0] +:logdrop-346 - [0:0] +:logdrop-347 - [0:0] +:logdrop-348 - [0:0] +:logdrop-349 - [0:0] +:logdrop-35 - [0:0] +:logdrop-350 - [0:0] +:logdrop-351 - [0:0] +:logdrop-352 - [0:0] +:logdrop-353 - [0:0] +:logdrop-354 - [0:0] +:logdrop-355 - [0:0] +:logdrop-356 - [0:0] +:logdrop-357 - [0:0] +:logdrop-358 - [0:0] +:logdrop-359 - [0:0] +:logdrop-36 - [0:0] +:logdrop-360 - [0:0] +:logdrop-361 - [0:0] +:logdrop-362 - [0:0] +:logdrop-363 - [0:0] +:logdrop-364 - [0:0] +:logdrop-365 - [0:0] +:logdrop-366 - [0:0] +:logdrop-367 - [0:0] +:logdrop-368 - [0:0] +:logdrop-369 - [0:0] +:logdrop-37 - [0:0] +:logdrop-370 - [0:0] +:logdrop-371 - [0:0] +:logdrop-372 - [0:0] +:logdrop-373 - [0:0] +:logdrop-374 - [0:0] +:logdrop-375 - [0:0] +:logdrop-376 - [0:0] +:logdrop-377 - [0:0] +:logdrop-378 - [0:0] +:logdrop-379 - [0:0] +:logdrop-38 - [0:0] +:logdrop-380 - [0:0] +:logdrop-381 - [0:0] +:logdrop-382 - [0:0] +:logdrop-383 - [0:0] +:logdrop-384 - [0:0] +:logdrop-385 - [0:0] +:logdrop-386 - [0:0] +:logdrop-387 - [0:0] +:logdrop-388 - [0:0] +:logdrop-389 - [0:0] +:logdrop-39 - [0:0] +:logdrop-390 - [0:0] +:logdrop-391 - [0:0] +:logdrop-392 - [0:0] +:logdrop-393 - [0:0] +:logdrop-394 - [0:0] +:logdrop-395 - [0:0] +:logdrop-396 - [0:0] +:logdrop-397 - [0:0] +:logdrop-398 - [0:0] +:logdrop-399 - [0:0] +:logdrop-4 - [0:0] +:logdrop-40 - [0:0] +:logdrop-400 - [0:0] +:logdrop-401 - [0:0] +:logdrop-402 - [0:0] +:logdrop-403 - [0:0] +:logdrop-404 - [0:0] +:logdrop-405 - [0:0] +:logdrop-406 - [0:0] +:logdrop-407 - [0:0] +:logdrop-408 - [0:0] +:logdrop-409 - [0:0] +:logdrop-41 - [0:0] +:logdrop-410 - [0:0] +:logdrop-411 - [0:0] +:logdrop-412 - [0:0] +:logdrop-413 - [0:0] +:logdrop-414 - [0:0] +:logdrop-415 - [0:0] +:logdrop-416 - [0:0] +:logdrop-417 - [0:0] +:logdrop-418 - [0:0] +:logdrop-419 - [0:0] +:logdrop-42 - [0:0] +:logdrop-420 - [0:0] +:logdrop-421 - [0:0] +:logdrop-422 - [0:0] +:logdrop-423 - [0:0] +:logdrop-424 - [0:0] +:logdrop-425 - [0:0] +:logdrop-426 - [0:0] +:logdrop-427 - [0:0] +:logdrop-428 - [0:0] +:logdrop-429 - [0:0] +:logdrop-43 - [0:0] +:logdrop-430 - [0:0] +:logdrop-431 - [0:0] +:logdrop-432 - [0:0] +:logdrop-433 - [0:0] +:logdrop-434 - [0:0] +:logdrop-435 - [0:0] +:logdrop-436 - [0:0] +:logdrop-437 - [0:0] +:logdrop-438 - [0:0] +:logdrop-439 - [0:0] +:logdrop-44 - [0:0] +:logdrop-440 - [0:0] +:logdrop-441 - [0:0] +:logdrop-442 - [0:0] +:logdrop-443 - [0:0] +:logdrop-444 - [0:0] +:logdrop-445 - [0:0] +:logdrop-446 - [0:0] +:logdrop-447 - [0:0] +:logdrop-448 - [0:0] +:logdrop-449 - [0:0] +:logdrop-45 - [0:0] +:logdrop-450 - [0:0] +:logdrop-451 - [0:0] +:logdrop-452 - [0:0] +:logdrop-453 - [0:0] +:logdrop-454 - [0:0] +:logdrop-455 - [0:0] +:logdrop-456 - [0:0] +:logdrop-457 - [0:0] +:logdrop-46 - [0:0] +:logdrop-47 - [0:0] +:logdrop-48 - [0:0] +:logdrop-49 - [0:0] +:logdrop-5 - [0:0] +:logdrop-50 - [0:0] +:logdrop-51 - [0:0] +:logdrop-52 - [0:0] +:logdrop-53 - [0:0] +:logdrop-54 - [0:0] +:logdrop-55 - [0:0] +:logdrop-56 - [0:0] +:logdrop-57 - [0:0] +:logdrop-58 - [0:0] +:logdrop-59 - [0:0] +:logdrop-6 - [0:0] +:logdrop-60 - [0:0] +:logdrop-61 - [0:0] +:logdrop-62 - [0:0] +:logdrop-63 - [0:0] +:logdrop-64 - [0:0] +:logdrop-65 - [0:0] +:logdrop-66 - [0:0] +:logdrop-67 - [0:0] +:logdrop-68 - [0:0] +:logdrop-69 - [0:0] +:logdrop-7 - [0:0] +:logdrop-70 - [0:0] +:logdrop-71 - [0:0] +:logdrop-72 - [0:0] +:logdrop-73 - [0:0] +:logdrop-74 - [0:0] +:logdrop-75 - [0:0] +:logdrop-76 - [0:0] +:logdrop-77 - [0:0] +:logdrop-78 - [0:0] +:logdrop-79 - [0:0] +:logdrop-8 - [0:0] +:logdrop-80 - [0:0] +:logdrop-81 - [0:0] +:logdrop-82 - [0:0] +:logdrop-83 - [0:0] +:logdrop-84 - [0:0] +:logdrop-85 - [0:0] +:logdrop-86 - [0:0] +:logdrop-87 - [0:0] +:logdrop-88 - [0:0] +:logdrop-89 - [0:0] +:logdrop-9 - [0:0] +:logdrop-90 - [0:0] +:logdrop-91 - [0:0] +:logdrop-92 - [0:0] +:logdrop-93 - [0:0] +:logdrop-94 - [0:0] +:logdrop-95 - [0:0] +:logdrop-96 - [0:0] +:logdrop-97 - [0:0] +:logdrop-98 - [0:0] +:logdrop-99 - [0:0] +:logpass-0 - [0:0] +-A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A FORWARD -j limit-1073 +-A FORWARD -j limit-1072 +-A FORWARD -j limit-1071 +-A FORWARD -j limit-1070 +-A FORWARD -j limit-1069 +-A FORWARD -j limit-1068 +-A FORWARD -j limit-1067 +-A FORWARD -j limit-1066 +-A FORWARD -j limit-1065 +-A FORWARD -j limit-1064 +-A FORWARD -j limit-1063 +-A FORWARD -j limit-1062 +-A FORWARD -j limit-1061 +-A FORWARD -j limit-1060 +-A FORWARD -j limit-1059 +-A FORWARD -j limit-1058 +-A FORWARD -j limit-1057 +-A FORWARD -j limit-1056 +-A FORWARD -j limit-1055 +-A FORWARD -j limit-1054 +-A FORWARD -j limit-1053 +-A FORWARD -j limit-1052 +-A FORWARD -j limit-1051 +-A FORWARD -j limit-1050 +-A FORWARD -j limit-1049 +-A FORWARD -j limit-1048 +-A FORWARD -j limit-1047 +-A FORWARD -j limit-1046 +-A FORWARD -j limit-1045 +-A FORWARD -j limit-1044 +-A FORWARD -j limit-1043 +-A FORWARD -j limit-1042 +-A FORWARD -j limit-1041 +-A FORWARD -j limit-1040 +-A FORWARD -j limit-1039 +-A FORWARD -j limit-1038 +-A FORWARD -j limit-1037 +-A FORWARD -j limit-1036 +-A FORWARD -j limit-1035 +-A FORWARD -j limit-1034 +-A FORWARD -j limit-1033 +-A FORWARD -j limit-1032 +-A FORWARD -j limit-1031 +-A FORWARD -j limit-1030 +-A FORWARD -j limit-1029 +-A FORWARD -j limit-1028 +-A FORWARD -j limit-1027 +-A FORWARD -j limit-1026 +-A FORWARD -j limit-1025 +-A FORWARD -j limit-1024 +-A FORWARD -j limit-1023 +-A FORWARD -j limit-1022 +-A FORWARD -j limit-1021 +-A FORWARD -j limit-1020 +-A FORWARD -j limit-1019 +-A FORWARD -j limit-1018 +-A FORWARD -j limit-1017 +-A FORWARD -j limit-1016 +-A FORWARD -j limit-1015 +-A FORWARD -j limit-1014 +-A FORWARD -j limit-1013 +-A FORWARD -j limit-1012 +-A FORWARD -j limit-1011 +-A FORWARD -j limit-1010 +-A FORWARD -j limit-1009 +-A FORWARD -j limit-1008 +-A FORWARD -j limit-1007 +-A FORWARD -j limit-1006 +-A FORWARD -j limit-1005 +-A FORWARD -j limit-1004 +-A FORWARD -j limit-1003 +-A FORWARD -j limit-1002 +-A FORWARD -j limit-1001 +-A FORWARD -j limit-1000 +-A FORWARD -j limit-999 +-A FORWARD -j limit-998 +-A FORWARD -j limit-997 +-A FORWARD -j limit-996 +-A FORWARD -j limit-995 +-A FORWARD -j limit-994 +-A FORWARD -j limit-993 +-A FORWARD -j limit-992 +-A FORWARD -j limit-991 +-A FORWARD -j limit-990 +-A FORWARD -j limit-989 +-A FORWARD -j limit-988 +-A FORWARD -j limit-987 +-A FORWARD -j limit-986 +-A FORWARD -j limit-985 +-A FORWARD -j limit-984 +-A FORWARD -j limit-983 +-A FORWARD -j limit-982 +-A FORWARD -j limit-981 +-A FORWARD -j limit-980 +-A FORWARD -j limit-979 +-A FORWARD -j limit-978 +-A FORWARD -j limit-977 +-A FORWARD -j limit-976 +-A FORWARD -j limit-975 +-A FORWARD -j limit-974 +-A FORWARD -j limit-973 +-A FORWARD -j limit-972 +-A FORWARD -j limit-971 +-A FORWARD -j limit-970 +-A FORWARD -j limit-969 +-A FORWARD -j limit-968 +-A FORWARD -j limit-967 +-A FORWARD -j limit-966 +-A FORWARD -j limit-965 +-A FORWARD -j limit-964 +-A FORWARD -j limit-963 +-A FORWARD -j limit-962 +-A FORWARD -j limit-961 +-A FORWARD -j limit-960 +-A FORWARD -j limit-959 +-A FORWARD -j limit-958 +-A FORWARD -j limit-957 +-A FORWARD -j limit-956 +-A FORWARD -j limit-955 +-A FORWARD -j limit-954 +-A FORWARD -j limit-953 +-A FORWARD -j limit-952 +-A FORWARD -j limit-951 +-A FORWARD -j limit-950 +-A FORWARD -j limit-949 +-A FORWARD -j limit-948 +-A FORWARD -j limit-947 +-A FORWARD -j limit-946 +-A FORWARD -j limit-945 +-A FORWARD -j limit-944 +-A FORWARD -j limit-943 +-A FORWARD -j limit-942 +-A FORWARD -j limit-941 +-A FORWARD -j limit-940 +-A FORWARD -j limit-939 +-A FORWARD -j limit-938 +-A FORWARD -j limit-937 +-A FORWARD -j limit-936 +-A FORWARD -j limit-935 +-A FORWARD -j limit-934 +-A FORWARD -j limit-933 +-A FORWARD -j limit-932 +-A FORWARD -j limit-931 +-A FORWARD -j limit-930 +-A FORWARD -j limit-929 +-A FORWARD -j limit-928 +-A FORWARD -j limit-927 +-A FORWARD -j limit-926 +-A FORWARD -j limit-925 +-A FORWARD -j limit-924 +-A FORWARD -j limit-923 +-A FORWARD -j limit-922 +-A FORWARD -j limit-921 +-A FORWARD -j limit-920 +-A FORWARD -j limit-919 +-A FORWARD -j limit-918 +-A FORWARD -j limit-917 +-A FORWARD -j limit-916 +-A FORWARD -j limit-915 +-A FORWARD -j limit-914 +-A FORWARD -j limit-913 +-A FORWARD -j limit-912 +-A FORWARD -j limit-911 +-A FORWARD -j limit-910 +-A FORWARD -j limit-909 +-A FORWARD -j limit-908 +-A FORWARD -j limit-907 +-A FORWARD -j limit-906 +-A FORWARD -j limit-905 +-A FORWARD -j limit-904 +-A FORWARD -j limit-903 +-A FORWARD -j limit-902 +-A FORWARD -j limit-901 +-A FORWARD -j limit-900 +-A FORWARD -j limit-899 +-A FORWARD -j limit-898 +-A FORWARD -j limit-897 +-A FORWARD -j limit-896 +-A FORWARD -j limit-895 +-A FORWARD -j limit-894 +-A FORWARD -j limit-893 +-A FORWARD -j limit-892 +-A FORWARD -j limit-891 +-A FORWARD -j limit-890 +-A FORWARD -j limit-889 +-A FORWARD -j limit-888 +-A FORWARD -j limit-887 +-A FORWARD -j limit-886 +-A FORWARD -j limit-885 +-A FORWARD -j limit-884 +-A FORWARD -j limit-883 +-A FORWARD -j limit-882 +-A FORWARD -j limit-881 +-A FORWARD -j limit-880 +-A FORWARD -j limit-879 +-A FORWARD -j limit-878 +-A FORWARD -j limit-877 +-A FORWARD -j limit-876 +-A FORWARD -j limit-875 +-A FORWARD -j limit-874 +-A FORWARD -j limit-873 +-A FORWARD -j limit-872 +-A FORWARD -j limit-871 +-A FORWARD -j limit-870 +-A FORWARD -j limit-869 +-A FORWARD -j limit-868 +-A FORWARD -j limit-867 +-A FORWARD -j limit-866 +-A FORWARD -j limit-865 +-A FORWARD -j limit-864 +-A FORWARD -j limit-863 +-A FORWARD -j limit-862 +-A FORWARD -j limit-861 +-A FORWARD -j limit-860 +-A FORWARD -j limit-859 +-A FORWARD -j limit-858 +-A FORWARD -j limit-857 +-A FORWARD -j limit-856 +-A FORWARD -j limit-855 +-A FORWARD -j limit-854 +-A FORWARD -j limit-853 +-A FORWARD -j limit-852 +-A FORWARD -j limit-851 +-A FORWARD -j limit-850 +-A FORWARD -j limit-849 +-A FORWARD -j limit-848 +-A FORWARD -j limit-847 +-A FORWARD -j limit-846 +-A FORWARD -j limit-845 +-A FORWARD -j limit-844 +-A FORWARD -j limit-843 +-A FORWARD -j limit-842 +-A FORWARD -j limit-841 +-A FORWARD -j limit-840 +-A FORWARD -j limit-839 +-A FORWARD -j limit-838 +-A FORWARD -j limit-837 +-A FORWARD -j limit-836 +-A FORWARD -j limit-835 +-A FORWARD -j limit-834 +-A FORWARD -j limit-833 +-A FORWARD -j limit-832 +-A FORWARD -j limit-831 +-A FORWARD -j limit-830 +-A FORWARD -j limit-829 +-A FORWARD -j limit-828 +-A FORWARD -j limit-827 +-A FORWARD -j limit-826 +-A FORWARD -j limit-825 +-A FORWARD -j limit-824 +-A FORWARD -j limit-823 +-A FORWARD -j limit-822 +-A FORWARD -j limit-821 +-A FORWARD -j limit-820 +-A FORWARD -j limit-819 +-A FORWARD -j limit-818 +-A FORWARD -j limit-817 +-A FORWARD -j limit-816 +-A FORWARD -j limit-815 +-A FORWARD -j limit-814 +-A FORWARD -j limit-813 +-A FORWARD -j limit-812 +-A FORWARD -j limit-811 +-A FORWARD -j limit-810 +-A FORWARD -j limit-809 +-A FORWARD -j limit-808 +-A FORWARD -j limit-807 +-A FORWARD -j limit-806 +-A FORWARD -j limit-805 +-A FORWARD -j limit-804 +-A FORWARD -j limit-803 +-A FORWARD -j limit-802 +-A FORWARD -j limit-801 +-A FORWARD -j limit-800 +-A FORWARD -j limit-799 +-A FORWARD -j limit-798 +-A FORWARD -j limit-797 +-A FORWARD -j limit-796 +-A FORWARD -j limit-795 +-A FORWARD -j limit-794 +-A FORWARD -j limit-793 +-A FORWARD -j limit-792 +-A FORWARD -j limit-791 +-A FORWARD -j limit-790 +-A FORWARD -j limit-789 +-A FORWARD -j limit-788 +-A FORWARD -j limit-787 +-A FORWARD -j limit-786 +-A FORWARD -j limit-785 +-A FORWARD -j limit-784 +-A FORWARD -j limit-783 +-A FORWARD -j limit-782 +-A FORWARD -j limit-781 +-A FORWARD -j limit-780 +-A FORWARD -j limit-779 +-A FORWARD -j limit-778 +-A FORWARD -j limit-777 +-A FORWARD -j limit-776 +-A FORWARD -j limit-775 +-A FORWARD -j limit-774 +-A FORWARD -j limit-773 +-A FORWARD -j limit-772 +-A FORWARD -j limit-771 +-A FORWARD -j limit-770 +-A FORWARD -j limit-769 +-A FORWARD -j limit-768 +-A FORWARD -j limit-767 +-A FORWARD -j limit-766 +-A FORWARD -j limit-765 +-A FORWARD -j limit-764 +-A FORWARD -j limit-763 +-A FORWARD -j limit-762 +-A FORWARD -j limit-761 +-A FORWARD -j limit-760 +-A FORWARD -j limit-759 +-A FORWARD -j limit-758 +-A FORWARD -j limit-757 +-A FORWARD -j limit-756 +-A FORWARD -j limit-755 +-A FORWARD -j limit-754 +-A FORWARD -j limit-753 +-A FORWARD -j limit-752 +-A FORWARD -j limit-751 +-A FORWARD -j limit-750 +-A FORWARD -j limit-749 +-A FORWARD -j limit-748 +-A FORWARD -j limit-747 +-A FORWARD -j limit-746 +-A FORWARD -j limit-745 +-A FORWARD -j limit-744 +-A FORWARD -j limit-743 +-A FORWARD -j limit-742 +-A FORWARD -j limit-741 +-A FORWARD -j limit-740 +-A FORWARD -j limit-739 +-A FORWARD -j limit-738 +-A FORWARD -j limit-737 +-A FORWARD -j limit-736 +-A FORWARD -j limit-735 +-A FORWARD -j limit-734 +-A FORWARD -j limit-733 +-A FORWARD -j limit-732 +-A FORWARD -j limit-731 +-A FORWARD -j limit-730 +-A FORWARD -j limit-729 +-A FORWARD -j limit-728 +-A FORWARD -j limit-727 +-A FORWARD -j limit-726 +-A FORWARD -j limit-725 +-A FORWARD -j limit-724 +-A FORWARD -j limit-723 +-A FORWARD -j limit-722 +-A FORWARD -j limit-721 +-A FORWARD -j limit-720 +-A FORWARD -j limit-719 +-A FORWARD -j limit-718 +-A FORWARD -j limit-717 +-A FORWARD -j limit-716 +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-0 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-2 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-3 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-4 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-5 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-6 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-7 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-8 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-10 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-14 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-16 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-17 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-18 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-19 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-20 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-21 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-22 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-23 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-24 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-25 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-26 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-27 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-28 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-29 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-30 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-31 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-32 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-33 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-34 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-35 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-36 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-37 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-38 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-39 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-43 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-47 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-55 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-59 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-69 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-73 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-77 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-85 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-89 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-97 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-101 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-105 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-109 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-113 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-117 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-127 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-131 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-135 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-139 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-143 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-147 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-151 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-155 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-159 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-163 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-167 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-177 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-181 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-185 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-189 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-193 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-197 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-201 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-205 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-209 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-217 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-221 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-235 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-239 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-247 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-251 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-259 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-263 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-271 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-275 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-289 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-293 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-301 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-305 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-313 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-317 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-325 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-329 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-0 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-1 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-2 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-3 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-4 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-5 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-6 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-7 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-8 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-9 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-10 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-11 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-12 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-13 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-14 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-15 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-16 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-17 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-18 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-19 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-20 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-21 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-22 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-23 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-24 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-25 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-26 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-27 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-28 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-29 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-30 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-31 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-32 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-33 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-34 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-35 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-36 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-37 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-38 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-39 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-40 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-41 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-42 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-43 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-44 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-45 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-46 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-47 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-48 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-49 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-50 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-51 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-52 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-53 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-54 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-55 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-56 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-57 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-58 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-59 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-60 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-61 +-A FORWARD -j ACCEPT +-A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A FORWARD -m recent --name user:D --rsource --mask 255.255.252.0 --set +-A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-456 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-21 +-A FORWARD -j logdrop-457 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmp -j icmp-routing +-A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A INPUT -j limit-1073 +-A INPUT -j limit-1072 +-A INPUT -j limit-1071 +-A INPUT -j limit-1070 +-A INPUT -j limit-1069 +-A INPUT -j limit-1068 +-A INPUT -j limit-1067 +-A INPUT -j limit-1066 +-A INPUT -j limit-1065 +-A INPUT -j limit-1064 +-A INPUT -j limit-1063 +-A INPUT -j limit-1062 +-A INPUT -j limit-1061 +-A INPUT -j limit-1060 +-A INPUT -j limit-1059 +-A INPUT -j limit-1058 +-A INPUT -j limit-1057 +-A INPUT -j limit-1056 +-A INPUT -j limit-1055 +-A INPUT -j limit-1054 +-A INPUT -j limit-1053 +-A INPUT -j limit-1052 +-A INPUT -j limit-1051 +-A INPUT -j limit-1050 +-A INPUT -j limit-1049 +-A INPUT -j limit-1048 +-A INPUT -j limit-1047 +-A INPUT -j limit-1046 +-A INPUT -j limit-1045 +-A INPUT -j limit-1044 +-A INPUT -j limit-1043 +-A INPUT -j limit-1042 +-A INPUT -j limit-1041 +-A INPUT -j limit-1040 +-A INPUT -j limit-1039 +-A INPUT -j limit-1038 +-A INPUT -j limit-1037 +-A INPUT -j limit-1036 +-A INPUT -j limit-1035 +-A INPUT -j limit-1034 +-A INPUT -j limit-1033 +-A INPUT -j limit-1032 +-A INPUT -j limit-1031 +-A INPUT -j limit-1030 +-A INPUT -j limit-1029 +-A INPUT -j limit-1028 +-A INPUT -j limit-1027 +-A INPUT -j limit-1026 +-A INPUT -j limit-1025 +-A INPUT -j limit-1024 +-A INPUT -j limit-1023 +-A INPUT -j limit-1022 +-A INPUT -j limit-1021 +-A INPUT -j limit-1020 +-A INPUT -j limit-1019 +-A INPUT -j limit-1018 +-A INPUT -j limit-1017 +-A INPUT -j limit-1016 +-A INPUT -j limit-1015 +-A INPUT -j limit-1014 +-A INPUT -j limit-1013 +-A INPUT -j limit-1012 +-A INPUT -j limit-1011 +-A INPUT -j limit-1010 +-A INPUT -j limit-1009 +-A INPUT -j limit-1008 +-A INPUT -j limit-1007 +-A INPUT -j limit-1006 +-A INPUT -j limit-1005 +-A INPUT -j limit-1004 +-A INPUT -j limit-1003 +-A INPUT -j limit-1002 +-A INPUT -j limit-1001 +-A INPUT -j limit-1000 +-A INPUT -j limit-999 +-A INPUT -j limit-998 +-A INPUT -j limit-997 +-A INPUT -j limit-996 +-A INPUT -j limit-995 +-A INPUT -j limit-994 +-A INPUT -j limit-993 +-A INPUT -j limit-992 +-A INPUT -j limit-991 +-A INPUT -j limit-990 +-A INPUT -j limit-989 +-A INPUT -j limit-988 +-A INPUT -j limit-987 +-A INPUT -j limit-986 +-A INPUT -j limit-985 +-A INPUT -j limit-984 +-A INPUT -j limit-983 +-A INPUT -j limit-982 +-A INPUT -j limit-981 +-A INPUT -j limit-980 +-A INPUT -j limit-979 +-A INPUT -j limit-978 +-A INPUT -j limit-977 +-A INPUT -j limit-976 +-A INPUT -j limit-975 +-A INPUT -j limit-974 +-A INPUT -j limit-973 +-A INPUT -j limit-972 +-A INPUT -j limit-971 +-A INPUT -j limit-970 +-A INPUT -j limit-969 +-A INPUT -j limit-968 +-A INPUT -j limit-967 +-A INPUT -j limit-966 +-A INPUT -j limit-965 +-A INPUT -j limit-964 +-A INPUT -j limit-963 +-A INPUT -j limit-962 +-A INPUT -j limit-961 +-A INPUT -j limit-960 +-A INPUT -j limit-959 +-A INPUT -j limit-958 +-A INPUT -j limit-957 +-A INPUT -j limit-956 +-A INPUT -j limit-955 +-A INPUT -j limit-954 +-A INPUT -j limit-953 +-A INPUT -j limit-952 +-A INPUT -j limit-951 +-A INPUT -j limit-950 +-A INPUT -j limit-949 +-A INPUT -j limit-948 +-A INPUT -j limit-947 +-A INPUT -j limit-946 +-A INPUT -j limit-945 +-A INPUT -j limit-944 +-A INPUT -j limit-943 +-A INPUT -j limit-942 +-A INPUT -j limit-941 +-A INPUT -j limit-940 +-A INPUT -j limit-939 +-A INPUT -j limit-938 +-A INPUT -j limit-937 +-A INPUT -j limit-936 +-A INPUT -j limit-935 +-A INPUT -j limit-934 +-A INPUT -j limit-933 +-A INPUT -j limit-932 +-A INPUT -j limit-931 +-A INPUT -j limit-930 +-A INPUT -j limit-929 +-A INPUT -j limit-928 +-A INPUT -j limit-927 +-A INPUT -j limit-926 +-A INPUT -j limit-925 +-A INPUT -j limit-924 +-A INPUT -j limit-923 +-A INPUT -j limit-922 +-A INPUT -j limit-921 +-A INPUT -j limit-920 +-A INPUT -j limit-919 +-A INPUT -j limit-918 +-A INPUT -j limit-917 +-A INPUT -j limit-916 +-A INPUT -j limit-915 +-A INPUT -j limit-914 +-A INPUT -j limit-913 +-A INPUT -j limit-912 +-A INPUT -j limit-911 +-A INPUT -j limit-910 +-A INPUT -j limit-909 +-A INPUT -j limit-908 +-A INPUT -j limit-907 +-A INPUT -j limit-906 +-A INPUT -j limit-905 +-A INPUT -j limit-904 +-A INPUT -j limit-903 +-A INPUT -j limit-902 +-A INPUT -j limit-901 +-A INPUT -j limit-900 +-A INPUT -j limit-899 +-A INPUT -j limit-898 +-A INPUT -j limit-897 +-A INPUT -j limit-896 +-A INPUT -j limit-895 +-A INPUT -j limit-894 +-A INPUT -j limit-893 +-A INPUT -j limit-892 +-A INPUT -j limit-891 +-A INPUT -j limit-890 +-A INPUT -j limit-889 +-A INPUT -j limit-888 +-A INPUT -j limit-887 +-A INPUT -j limit-886 +-A INPUT -j limit-885 +-A INPUT -j limit-884 +-A INPUT -j limit-883 +-A INPUT -j limit-882 +-A INPUT -j limit-881 +-A INPUT -j limit-880 +-A INPUT -j limit-879 +-A INPUT -j limit-878 +-A INPUT -j limit-877 +-A INPUT -j limit-876 +-A INPUT -j limit-875 +-A INPUT -j limit-874 +-A INPUT -j limit-873 +-A INPUT -j limit-872 +-A INPUT -j limit-871 +-A INPUT -j limit-870 +-A INPUT -j limit-869 +-A INPUT -j limit-868 +-A INPUT -j limit-867 +-A INPUT -j limit-866 +-A INPUT -j limit-865 +-A INPUT -j limit-864 +-A INPUT -j limit-863 +-A INPUT -j limit-862 +-A INPUT -j limit-861 +-A INPUT -j limit-860 +-A INPUT -j limit-859 +-A INPUT -j limit-858 +-A INPUT -j limit-857 +-A INPUT -j limit-856 +-A INPUT -j limit-855 +-A INPUT -j limit-854 +-A INPUT -j limit-853 +-A INPUT -j limit-852 +-A INPUT -j limit-851 +-A INPUT -j limit-850 +-A INPUT -j limit-849 +-A INPUT -j limit-848 +-A INPUT -j limit-847 +-A INPUT -j limit-846 +-A INPUT -j limit-845 +-A INPUT -j limit-844 +-A INPUT -j limit-843 +-A INPUT -j limit-842 +-A INPUT -j limit-841 +-A INPUT -j limit-840 +-A INPUT -j limit-839 +-A INPUT -j limit-838 +-A INPUT -j limit-837 +-A INPUT -j limit-836 +-A INPUT -j limit-835 +-A INPUT -j limit-834 +-A INPUT -j limit-833 +-A INPUT -j limit-832 +-A INPUT -j limit-831 +-A INPUT -j limit-830 +-A INPUT -j limit-829 +-A INPUT -j limit-828 +-A INPUT -j limit-827 +-A INPUT -j limit-826 +-A INPUT -j limit-825 +-A INPUT -j limit-824 +-A INPUT -j limit-823 +-A INPUT -j limit-822 +-A INPUT -j limit-821 +-A INPUT -j limit-820 +-A INPUT -j limit-819 +-A INPUT -j limit-818 +-A INPUT -j limit-817 +-A INPUT -j limit-816 +-A INPUT -j limit-815 +-A INPUT -j limit-814 +-A INPUT -j limit-813 +-A INPUT -j limit-812 +-A INPUT -j limit-811 +-A INPUT -j limit-810 +-A INPUT -j limit-809 +-A INPUT -j limit-808 +-A INPUT -j limit-807 +-A INPUT -j limit-806 +-A INPUT -j limit-805 +-A INPUT -j limit-804 +-A INPUT -j limit-803 +-A INPUT -j limit-802 +-A INPUT -j limit-801 +-A INPUT -j limit-800 +-A INPUT -j limit-799 +-A INPUT -j limit-798 +-A INPUT -j limit-797 +-A INPUT -j limit-796 +-A INPUT -j limit-795 +-A INPUT -j limit-794 +-A INPUT -j limit-793 +-A INPUT -j limit-792 +-A INPUT -j limit-791 +-A INPUT -j limit-790 +-A INPUT -j limit-789 +-A INPUT -j limit-788 +-A INPUT -j limit-787 +-A INPUT -j limit-786 +-A INPUT -j limit-785 +-A INPUT -j limit-784 +-A INPUT -j limit-783 +-A INPUT -j limit-782 +-A INPUT -j limit-781 +-A INPUT -j limit-780 +-A INPUT -j limit-779 +-A INPUT -j limit-778 +-A INPUT -j limit-777 +-A INPUT -j limit-776 +-A INPUT -j limit-775 +-A INPUT -j limit-774 +-A INPUT -j limit-773 +-A INPUT -j limit-772 +-A INPUT -j limit-771 +-A INPUT -j limit-770 +-A INPUT -j limit-769 +-A INPUT -j limit-768 +-A INPUT -j limit-767 +-A INPUT -j limit-766 +-A INPUT -j limit-765 +-A INPUT -j limit-764 +-A INPUT -j limit-763 +-A INPUT -j limit-762 +-A INPUT -j limit-761 +-A INPUT -j limit-760 +-A INPUT -j limit-759 +-A INPUT -j limit-758 +-A INPUT -j limit-757 +-A INPUT -j limit-756 +-A INPUT -j limit-755 +-A INPUT -j limit-754 +-A INPUT -j limit-753 +-A INPUT -j limit-752 +-A INPUT -j limit-751 +-A INPUT -j limit-750 +-A INPUT -j limit-749 +-A INPUT -j limit-748 +-A INPUT -j limit-747 +-A INPUT -j limit-746 +-A INPUT -j limit-745 +-A INPUT -j limit-744 +-A INPUT -j limit-743 +-A INPUT -j limit-742 +-A INPUT -j limit-741 +-A INPUT -j limit-740 +-A INPUT -j limit-739 +-A INPUT -j limit-738 +-A INPUT -j limit-737 +-A INPUT -j limit-736 +-A INPUT -j limit-735 +-A INPUT -j limit-734 +-A INPUT -j limit-733 +-A INPUT -j limit-732 +-A INPUT -j limit-731 +-A INPUT -j limit-730 +-A INPUT -j limit-729 +-A INPUT -j limit-728 +-A INPUT -j limit-727 +-A INPUT -j limit-726 +-A INPUT -j limit-725 +-A INPUT -j limit-724 +-A INPUT -j limit-723 +-A INPUT -j limit-722 +-A INPUT -j limit-721 +-A INPUT -j limit-720 +-A INPUT -j limit-719 +-A INPUT -j limit-718 +-A INPUT -j limit-717 +-A INPUT -j limit-716 +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-0 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-1 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-2 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-3 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-4 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-5 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-6 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-7 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-8 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-9 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-10 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-11 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-12 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-13 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-14 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-15 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-16 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-17 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-18 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-19 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-20 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-21 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-22 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-23 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-24 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-25 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-26 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-27 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-28 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-29 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-30 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-31 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-32 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-33 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-34 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-35 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-36 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-37 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-38 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-39 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-40 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-41 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-42 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-43 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-44 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-45 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-46 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-47 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-48 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-49 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-50 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-51 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-52 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-53 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-54 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-55 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-56 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-57 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-58 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-59 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-60 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-61 +-A INPUT -j ACCEPT +-A INPUT -i eth0 -j limit-1074 +-A INPUT -i eth0 -j limit-1075 +-A INPUT -i eth0 -j limit-1076 +-A INPUT -i eth0 -j limit-1077 +-A INPUT -i eth0 -j limit-1078 +-A INPUT -i eth0 -j limit-1079 +-A INPUT -i eth0 -j limit-1080 +-A INPUT -i eth0 -j limit-1081 +-A INPUT -i eth0 -j limit-1082 +-A INPUT -i eth0 -j limit-1083 +-A INPUT -i eth0 -j limit-1084 +-A INPUT -i eth0 -j limit-1085 +-A INPUT -i eth0 -j limit-1086 +-A INPUT -i eth0 -j limit-1087 +-A INPUT -i eth0 -j limit-1088 +-A INPUT -i eth0 -j limit-1089 +-A INPUT -i eth0 -j limit-1090 +-A INPUT -i eth0 -j limit-1091 +-A INPUT -i eth0 -j limit-1092 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-361 +-A INPUT -i eth0 -j limit-1094 +-A INPUT -i eth0 -j limit-1095 +-A INPUT -i eth0 -j limit-1096 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-365 +-A INPUT -i eth0 -j limit-1098 +-A INPUT -i eth0 -j limit-1099 +-A INPUT -i eth0 -j limit-1100 +-A INPUT -i eth0 -j limit-1101 +-A INPUT -i eth0 -j limit-1102 +-A INPUT -i eth0 -j limit-1103 +-A INPUT -i eth0 -j limit-1104 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 +-A INPUT -i eth0 -j limit-1106 +-A INPUT -i eth0 -j limit-1107 +-A INPUT -i eth0 -j limit-1108 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-377 +-A INPUT -i eth0 -j limit-1110 +-A INPUT -i eth0 -j limit-1111 +-A INPUT -i eth0 -j limit-1112 +-A INPUT -i eth0 -j limit-1113 +-A INPUT -i eth0 -j limit-1114 +-A INPUT -i eth0 -j limit-1115 +-A INPUT -i eth0 -j limit-1116 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-385 +-A INPUT -i eth0 -j limit-1118 +-A INPUT -i eth0 -j limit-1119 +-A INPUT -i eth0 -j limit-1120 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-389 +-A INPUT -i eth0 -j limit-1122 +-A INPUT -i eth0 -j limit-1123 +-A INPUT -i eth0 -j limit-1124 +-A INPUT -i eth0 -j limit-1125 +-A INPUT -i eth0 -j limit-1126 +-A INPUT -i eth0 -j limit-1127 +-A INPUT -i eth0 -j limit-1128 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 +-A INPUT -i eth0 -j limit-1130 +-A INPUT -i eth0 -j limit-1131 +-A INPUT -i eth0 -j limit-1132 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-401 +-A INPUT -i eth0 -j limit-1134 +-A INPUT -i eth0 -j limit-1135 +-A INPUT -i eth0 -j limit-1136 +-A INPUT -i eth0 -j limit-1137 +-A INPUT -i eth0 -j limit-1138 +-A INPUT -i eth0 -j limit-1139 +-A INPUT -i eth0 -j limit-1140 +-A INPUT -i eth0 -j limit-1141 +-A INPUT -i eth0 -j limit-1142 +-A INPUT -i eth0 -j limit-1143 +-A INPUT -i eth0 -j limit-1144 +-A INPUT -i eth0 -j limit-1145 +-A INPUT -i eth0 -j limit-1146 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1148 +-A INPUT -i eth0 -j limit-1149 +-A INPUT -i eth0 -j limit-1150 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1152 +-A INPUT -i eth0 -j limit-1153 +-A INPUT -i eth0 -j limit-1154 +-A INPUT -i eth0 -j limit-1155 +-A INPUT -i eth0 -j limit-1156 +-A INPUT -i eth0 -j limit-1157 +-A INPUT -i eth0 -j limit-1158 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1160 +-A INPUT -i eth0 -j limit-1161 +-A INPUT -i eth0 -j limit-1162 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1164 +-A INPUT -i eth0 -j limit-1165 +-A INPUT -i eth0 -j limit-1166 +-A INPUT -i eth0 -j limit-1167 +-A INPUT -i eth0 -j limit-1168 +-A INPUT -i eth0 -j limit-1169 +-A INPUT -i eth0 -j limit-1170 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1172 +-A INPUT -i eth0 -j limit-1173 +-A INPUT -i eth0 -j limit-1174 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1176 +-A INPUT -i eth0 -j limit-1177 +-A INPUT -i eth0 -j limit-1178 +-A INPUT -i eth0 -j limit-1179 +-A INPUT -i eth0 -j limit-1180 +-A INPUT -i eth0 -j limit-1181 +-A INPUT -i eth0 -j limit-1182 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1184 +-A INPUT -i eth0 -j limit-1185 +-A INPUT -i eth0 -j limit-1186 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1188 +-A INPUT -i eth0 -j limit-1189 +-A INPUT -i eth0 -j limit-1190 +-A INPUT -i eth0 -j limit-1191 +-A INPUT -i eth0 -j limit-1192 +-A INPUT -i eth0 -j limit-1193 +-A INPUT -i eth0 -j limit-1194 +-A INPUT -i eth0 -j limit-1195 +-A INPUT -i eth0 -j limit-1196 +-A INPUT -i eth0 -j limit-1197 +-A INPUT -i eth0 -j limit-1198 +-A INPUT -i eth0 -j limit-1199 +-A INPUT -i eth0 -j limit-1200 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1202 +-A INPUT -i eth0 -j limit-1203 +-A INPUT -i eth0 -j limit-1204 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1206 +-A INPUT -i eth0 -j limit-1207 +-A INPUT -i eth0 -j limit-1208 +-A INPUT -i eth0 -j limit-1209 +-A INPUT -i eth0 -j limit-1210 +-A INPUT -i eth0 -j limit-1211 +-A INPUT -i eth0 -j limit-1212 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1214 +-A INPUT -i eth0 -j limit-1215 +-A INPUT -i eth0 -j limit-1216 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1218 +-A INPUT -i eth0 -j limit-1219 +-A INPUT -i eth0 -j limit-1220 +-A INPUT -i eth0 -j limit-1221 +-A INPUT -i eth0 -j limit-1222 +-A INPUT -i eth0 -j limit-1223 +-A INPUT -i eth0 -j limit-1224 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1226 +-A INPUT -i eth0 -j limit-1227 +-A INPUT -i eth0 -j limit-1228 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1230 +-A INPUT -i eth0 -j limit-1231 +-A INPUT -i eth0 -j limit-1232 +-A INPUT -i eth0 -j limit-1233 +-A INPUT -i eth0 -j limit-1234 +-A INPUT -i eth0 -j limit-1235 +-A INPUT -i eth0 -j limit-1236 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1238 +-A INPUT -i eth0 -j limit-1239 +-A INPUT -i eth0 -j limit-1240 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1242 +-A INPUT -i eth0 -j limit-1243 +-A INPUT -i eth0 -j limit-1244 +-A INPUT -i eth0 -j limit-1245 +-A INPUT -i eth0 -j limit-1246 +-A INPUT -i eth0 -j limit-1247 +-A INPUT -i eth0 -j limit-1248 +-A INPUT -i eth0 -j limit-1249 +-A INPUT -i eth0 -j limit-1250 +-A INPUT -i eth0 -j limit-1251 +-A INPUT -i eth0 -j limit-1252 +-A INPUT -i eth0 -j limit-1253 +-A INPUT -i eth0 -j limit-1254 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 +-A INPUT -i eth0 -j limit-1256 +-A INPUT -i eth0 -j limit-1257 +-A INPUT -i eth0 -j limit-1258 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 +-A INPUT -i eth0 -j limit-1260 +-A INPUT -i eth0 -j limit-1261 +-A INPUT -i eth0 -j limit-1262 +-A INPUT -i eth0 -j limit-1263 +-A INPUT -i eth0 -j limit-1264 +-A INPUT -i eth0 -j limit-1265 +-A INPUT -i eth0 -j limit-1266 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-427 +-A INPUT -i eth0 -j limit-1268 +-A INPUT -i eth0 -j limit-1269 +-A INPUT -i eth0 -j limit-1270 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 +-A INPUT -i eth0 -j limit-1272 +-A INPUT -i eth0 -j limit-1273 +-A INPUT -i eth0 -j limit-1274 +-A INPUT -i eth0 -j limit-1275 +-A INPUT -i eth0 -j limit-1276 +-A INPUT -i eth0 -j limit-1277 +-A INPUT -i eth0 -j limit-1278 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 +-A INPUT -i eth0 -j limit-1280 +-A INPUT -i eth0 -j limit-1281 +-A INPUT -i eth0 -j limit-1282 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-443 +-A INPUT -i eth0 -j limit-1284 +-A INPUT -i eth0 -j limit-1285 +-A INPUT -i eth0 -j limit-1286 +-A INPUT -i eth0 -j limit-1287 +-A INPUT -i eth0 -j limit-1288 +-A INPUT -i eth0 -j limit-1289 +-A INPUT -i eth0 -j limit-1290 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 +-A INPUT -i eth0 -j limit-1292 +-A INPUT -i eth0 -j limit-1293 +-A INPUT -i eth0 -j limit-1294 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 +-A INPUT -i eth0 -j limit-1296 +-A INPUT -i eth0 -j limit-1297 +-A INPUT -i eth0 -j limit-1298 +-A INPUT -i eth0 -j limit-1299 +-A INPUT -i eth0 -j limit-1300 +-A INPUT -i eth0 -j limit-1301 +-A INPUT -i eth0 -j limit-1302 +-A INPUT -i eth0 -j limit-1303 +-A INPUT -i eth0 -j limit-1304 +-A INPUT -i eth0 -j limit-1305 +-A INPUT -i eth0 -j limit-1306 +-A INPUT -i eth0 -j limit-1307 +-A INPUT -i eth0 -j limit-1308 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1310 +-A INPUT -i eth0 -j limit-1311 +-A INPUT -i eth0 -j limit-1312 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1314 +-A INPUT -i eth0 -j limit-1315 +-A INPUT -i eth0 -j limit-1316 +-A INPUT -i eth0 -j limit-1317 +-A INPUT -i eth0 -j limit-1318 +-A INPUT -i eth0 -j limit-1319 +-A INPUT -i eth0 -j limit-1320 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1322 +-A INPUT -i eth0 -j limit-1323 +-A INPUT -i eth0 -j limit-1324 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1326 +-A INPUT -i eth0 -j limit-1327 +-A INPUT -i eth0 -j limit-1328 +-A INPUT -i eth0 -j limit-1329 +-A INPUT -i eth0 -j limit-1330 +-A INPUT -i eth0 -j limit-1331 +-A INPUT -i eth0 -j limit-1332 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1334 +-A INPUT -i eth0 -j limit-1335 +-A INPUT -i eth0 -j limit-1336 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1338 +-A INPUT -i eth0 -j limit-1339 +-A INPUT -i eth0 -j limit-1340 +-A INPUT -i eth0 -j limit-1341 +-A INPUT -i eth0 -j limit-1342 +-A INPUT -i eth0 -j limit-1343 +-A INPUT -i eth0 -j limit-1344 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1346 +-A INPUT -i eth0 -j limit-1347 +-A INPUT -i eth0 -j limit-1348 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1350 +-A INPUT -i eth0 -j limit-1351 +-A INPUT -i eth0 -j limit-1352 +-A INPUT -i eth0 -j limit-1353 +-A INPUT -i eth0 -j limit-1354 +-A INPUT -i eth0 -j limit-1355 +-A INPUT -i eth0 -j limit-1356 +-A INPUT -i eth0 -j limit-1357 +-A INPUT -i eth0 -j limit-1358 +-A INPUT -i eth0 -j limit-1359 +-A INPUT -i eth0 -j limit-1360 +-A INPUT -i eth0 -j limit-1361 +-A INPUT -i eth0 -j limit-1362 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1364 +-A INPUT -i eth0 -j limit-1365 +-A INPUT -i eth0 -j limit-1366 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1368 +-A INPUT -i eth0 -j limit-1369 +-A INPUT -i eth0 -j limit-1370 +-A INPUT -i eth0 -j limit-1371 +-A INPUT -i eth0 -j limit-1372 +-A INPUT -i eth0 -j limit-1373 +-A INPUT -i eth0 -j limit-1374 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1376 +-A INPUT -i eth0 -j limit-1377 +-A INPUT -i eth0 -j limit-1378 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1380 +-A INPUT -i eth0 -j limit-1381 +-A INPUT -i eth0 -j limit-1382 +-A INPUT -i eth0 -j limit-1383 +-A INPUT -i eth0 -j limit-1384 +-A INPUT -i eth0 -j limit-1385 +-A INPUT -i eth0 -j limit-1386 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1388 +-A INPUT -i eth0 -j limit-1389 +-A INPUT -i eth0 -j limit-1390 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1392 +-A INPUT -i eth0 -j limit-1393 +-A INPUT -i eth0 -j limit-1394 +-A INPUT -i eth0 -j limit-1395 +-A INPUT -i eth0 -j limit-1396 +-A INPUT -i eth0 -j limit-1397 +-A INPUT -i eth0 -j limit-1398 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1400 +-A INPUT -i eth0 -j limit-1401 +-A INPUT -i eth0 -j limit-1402 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1404 +-A INPUT -i eth0 -j limit-1405 +-A INPUT -i eth0 -j limit-1406 +-A INPUT -i eth0 -j limit-1407 +-A INPUT -i eth0 -j limit-1408 +-A INPUT -i eth0 -j limit-1409 +-A INPUT -i eth0 -j limit-1410 +-A INPUT -i eth0 -j limit-1411 +-A INPUT -i eth0 -j limit-1412 +-A INPUT -i eth0 -j limit-1413 +-A INPUT -i eth0 -j limit-1414 +-A INPUT -i eth0 -j limit-1415 +-A INPUT -i eth0 -j limit-1416 +-A INPUT -i eth0 -j limit-1417 +-A INPUT -i eth0 -j limit-1418 +-A INPUT -i eth0 -j limit-1419 +-A INPUT -i eth0 -j limit-1420 +-A INPUT -i eth0 -j limit-1421 +-A INPUT -i eth0 -j limit-1422 +-A INPUT -i eth0 -j limit-1423 +-A INPUT -i eth0 -j limit-1424 +-A INPUT -i eth0 -j limit-1425 +-A INPUT -i eth0 -j limit-1426 +-A INPUT -i eth0 -j limit-1427 +-A INPUT -i eth0 -j limit-1428 +-A INPUT -i eth0 -j limit-1429 +-A INPUT -i eth0 -j limit-1430 +-A INPUT -i eth0 -j limit-1431 +-A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set +-A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A INPUT -j ACCEPT +-A INPUT -j logdrop-456 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-21 +-A INPUT -j logdrop-457 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A OUTPUT -j limit-1073 +-A OUTPUT -j limit-1072 +-A OUTPUT -j limit-1071 +-A OUTPUT -j limit-1070 +-A OUTPUT -j limit-1069 +-A OUTPUT -j limit-1068 +-A OUTPUT -j limit-1067 +-A OUTPUT -j limit-1066 +-A OUTPUT -j limit-1065 +-A OUTPUT -j limit-1064 +-A OUTPUT -j limit-1063 +-A OUTPUT -j limit-1062 +-A OUTPUT -j limit-1061 +-A OUTPUT -j limit-1060 +-A OUTPUT -j limit-1059 +-A OUTPUT -j limit-1058 +-A OUTPUT -j limit-1057 +-A OUTPUT -j limit-1056 +-A OUTPUT -j limit-1055 +-A OUTPUT -j limit-1054 +-A OUTPUT -j limit-1053 +-A OUTPUT -j limit-1052 +-A OUTPUT -j limit-1051 +-A OUTPUT -j limit-1050 +-A OUTPUT -j limit-1049 +-A OUTPUT -j limit-1048 +-A OUTPUT -j limit-1047 +-A OUTPUT -j limit-1046 +-A OUTPUT -j limit-1045 +-A OUTPUT -j limit-1044 +-A OUTPUT -j limit-1043 +-A OUTPUT -j limit-1042 +-A OUTPUT -j limit-1041 +-A OUTPUT -j limit-1040 +-A OUTPUT -j limit-1039 +-A OUTPUT -j limit-1038 +-A OUTPUT -j limit-1037 +-A OUTPUT -j limit-1036 +-A OUTPUT -j limit-1035 +-A OUTPUT -j limit-1034 +-A OUTPUT -j limit-1033 +-A OUTPUT -j limit-1032 +-A OUTPUT -j limit-1031 +-A OUTPUT -j limit-1030 +-A OUTPUT -j limit-1029 +-A OUTPUT -j limit-1028 +-A OUTPUT -j limit-1027 +-A OUTPUT -j limit-1026 +-A OUTPUT -j limit-1025 +-A OUTPUT -j limit-1024 +-A OUTPUT -j limit-1023 +-A OUTPUT -j limit-1022 +-A OUTPUT -j limit-1021 +-A OUTPUT -j limit-1020 +-A OUTPUT -j limit-1019 +-A OUTPUT -j limit-1018 +-A OUTPUT -j limit-1017 +-A OUTPUT -j limit-1016 +-A OUTPUT -j limit-1015 +-A OUTPUT -j limit-1014 +-A OUTPUT -j limit-1013 +-A OUTPUT -j limit-1012 +-A OUTPUT -j limit-1011 +-A OUTPUT -j limit-1010 +-A OUTPUT -j limit-1009 +-A OUTPUT -j limit-1008 +-A OUTPUT -j limit-1007 +-A OUTPUT -j limit-1006 +-A OUTPUT -j limit-1005 +-A OUTPUT -j limit-1004 +-A OUTPUT -j limit-1003 +-A OUTPUT -j limit-1002 +-A OUTPUT -j limit-1001 +-A OUTPUT -j limit-1000 +-A OUTPUT -j limit-999 +-A OUTPUT -j limit-998 +-A OUTPUT -j limit-997 +-A OUTPUT -j limit-996 +-A OUTPUT -j limit-995 +-A OUTPUT -j limit-994 +-A OUTPUT -j limit-993 +-A OUTPUT -j limit-992 +-A OUTPUT -j limit-991 +-A OUTPUT -j limit-990 +-A OUTPUT -j limit-989 +-A OUTPUT -j limit-988 +-A OUTPUT -j limit-987 +-A OUTPUT -j limit-986 +-A OUTPUT -j limit-985 +-A OUTPUT -j limit-984 +-A OUTPUT -j limit-983 +-A OUTPUT -j limit-982 +-A OUTPUT -j limit-981 +-A OUTPUT -j limit-980 +-A OUTPUT -j limit-979 +-A OUTPUT -j limit-978 +-A OUTPUT -j limit-977 +-A OUTPUT -j limit-976 +-A OUTPUT -j limit-975 +-A OUTPUT -j limit-974 +-A OUTPUT -j limit-973 +-A OUTPUT -j limit-972 +-A OUTPUT -j limit-971 +-A OUTPUT -j limit-970 +-A OUTPUT -j limit-969 +-A OUTPUT -j limit-968 +-A OUTPUT -j limit-967 +-A OUTPUT -j limit-966 +-A OUTPUT -j limit-965 +-A OUTPUT -j limit-964 +-A OUTPUT -j limit-963 +-A OUTPUT -j limit-962 +-A OUTPUT -j limit-961 +-A OUTPUT -j limit-960 +-A OUTPUT -j limit-959 +-A OUTPUT -j limit-958 +-A OUTPUT -j limit-957 +-A OUTPUT -j limit-956 +-A OUTPUT -j limit-955 +-A OUTPUT -j limit-954 +-A OUTPUT -j limit-953 +-A OUTPUT -j limit-952 +-A OUTPUT -j limit-951 +-A OUTPUT -j limit-950 +-A OUTPUT -j limit-949 +-A OUTPUT -j limit-948 +-A OUTPUT -j limit-947 +-A OUTPUT -j limit-946 +-A OUTPUT -j limit-945 +-A OUTPUT -j limit-944 +-A OUTPUT -j limit-943 +-A OUTPUT -j limit-942 +-A OUTPUT -j limit-941 +-A OUTPUT -j limit-940 +-A OUTPUT -j limit-939 +-A OUTPUT -j limit-938 +-A OUTPUT -j limit-937 +-A OUTPUT -j limit-936 +-A OUTPUT -j limit-935 +-A OUTPUT -j limit-934 +-A OUTPUT -j limit-933 +-A OUTPUT -j limit-932 +-A OUTPUT -j limit-931 +-A OUTPUT -j limit-930 +-A OUTPUT -j limit-929 +-A OUTPUT -j limit-928 +-A OUTPUT -j limit-927 +-A OUTPUT -j limit-926 +-A OUTPUT -j limit-925 +-A OUTPUT -j limit-924 +-A OUTPUT -j limit-923 +-A OUTPUT -j limit-922 +-A OUTPUT -j limit-921 +-A OUTPUT -j limit-920 +-A OUTPUT -j limit-919 +-A OUTPUT -j limit-918 +-A OUTPUT -j limit-917 +-A OUTPUT -j limit-916 +-A OUTPUT -j limit-915 +-A OUTPUT -j limit-914 +-A OUTPUT -j limit-913 +-A OUTPUT -j limit-912 +-A OUTPUT -j limit-911 +-A OUTPUT -j limit-910 +-A OUTPUT -j limit-909 +-A OUTPUT -j limit-908 +-A OUTPUT -j limit-907 +-A OUTPUT -j limit-906 +-A OUTPUT -j limit-905 +-A OUTPUT -j limit-904 +-A OUTPUT -j limit-903 +-A OUTPUT -j limit-902 +-A OUTPUT -j limit-901 +-A OUTPUT -j limit-900 +-A OUTPUT -j limit-899 +-A OUTPUT -j limit-898 +-A OUTPUT -j limit-897 +-A OUTPUT -j limit-896 +-A OUTPUT -j limit-895 +-A OUTPUT -j limit-894 +-A OUTPUT -j limit-893 +-A OUTPUT -j limit-892 +-A OUTPUT -j limit-891 +-A OUTPUT -j limit-890 +-A OUTPUT -j limit-889 +-A OUTPUT -j limit-888 +-A OUTPUT -j limit-887 +-A OUTPUT -j limit-886 +-A OUTPUT -j limit-885 +-A OUTPUT -j limit-884 +-A OUTPUT -j limit-883 +-A OUTPUT -j limit-882 +-A OUTPUT -j limit-881 +-A OUTPUT -j limit-880 +-A OUTPUT -j limit-879 +-A OUTPUT -j limit-878 +-A OUTPUT -j limit-877 +-A OUTPUT -j limit-876 +-A OUTPUT -j limit-875 +-A OUTPUT -j limit-874 +-A OUTPUT -j limit-873 +-A OUTPUT -j limit-872 +-A OUTPUT -j limit-871 +-A OUTPUT -j limit-870 +-A OUTPUT -j limit-869 +-A OUTPUT -j limit-868 +-A OUTPUT -j limit-867 +-A OUTPUT -j limit-866 +-A OUTPUT -j limit-865 +-A OUTPUT -j limit-864 +-A OUTPUT -j limit-863 +-A OUTPUT -j limit-862 +-A OUTPUT -j limit-861 +-A OUTPUT -j limit-860 +-A OUTPUT -j limit-859 +-A OUTPUT -j limit-858 +-A OUTPUT -j limit-857 +-A OUTPUT -j limit-856 +-A OUTPUT -j limit-855 +-A OUTPUT -j limit-854 +-A OUTPUT -j limit-853 +-A OUTPUT -j limit-852 +-A OUTPUT -j limit-851 +-A OUTPUT -j limit-850 +-A OUTPUT -j limit-849 +-A OUTPUT -j limit-848 +-A OUTPUT -j limit-847 +-A OUTPUT -j limit-846 +-A OUTPUT -j limit-845 +-A OUTPUT -j limit-844 +-A OUTPUT -j limit-843 +-A OUTPUT -j limit-842 +-A OUTPUT -j limit-841 +-A OUTPUT -j limit-840 +-A OUTPUT -j limit-839 +-A OUTPUT -j limit-838 +-A OUTPUT -j limit-837 +-A OUTPUT -j limit-836 +-A OUTPUT -j limit-835 +-A OUTPUT -j limit-834 +-A OUTPUT -j limit-833 +-A OUTPUT -j limit-832 +-A OUTPUT -j limit-831 +-A OUTPUT -j limit-830 +-A OUTPUT -j limit-829 +-A OUTPUT -j limit-828 +-A OUTPUT -j limit-827 +-A OUTPUT -j limit-826 +-A OUTPUT -j limit-825 +-A OUTPUT -j limit-824 +-A OUTPUT -j limit-823 +-A OUTPUT -j limit-822 +-A OUTPUT -j limit-821 +-A OUTPUT -j limit-820 +-A OUTPUT -j limit-819 +-A OUTPUT -j limit-818 +-A OUTPUT -j limit-817 +-A OUTPUT -j limit-816 +-A OUTPUT -j limit-815 +-A OUTPUT -j limit-814 +-A OUTPUT -j limit-813 +-A OUTPUT -j limit-812 +-A OUTPUT -j limit-811 +-A OUTPUT -j limit-810 +-A OUTPUT -j limit-809 +-A OUTPUT -j limit-808 +-A OUTPUT -j limit-807 +-A OUTPUT -j limit-806 +-A OUTPUT -j limit-805 +-A OUTPUT -j limit-804 +-A OUTPUT -j limit-803 +-A OUTPUT -j limit-802 +-A OUTPUT -j limit-801 +-A OUTPUT -j limit-800 +-A OUTPUT -j limit-799 +-A OUTPUT -j limit-798 +-A OUTPUT -j limit-797 +-A OUTPUT -j limit-796 +-A OUTPUT -j limit-795 +-A OUTPUT -j limit-794 +-A OUTPUT -j limit-793 +-A OUTPUT -j limit-792 +-A OUTPUT -j limit-791 +-A OUTPUT -j limit-790 +-A OUTPUT -j limit-789 +-A OUTPUT -j limit-788 +-A OUTPUT -j limit-787 +-A OUTPUT -j limit-786 +-A OUTPUT -j limit-785 +-A OUTPUT -j limit-784 +-A OUTPUT -j limit-783 +-A OUTPUT -j limit-782 +-A OUTPUT -j limit-781 +-A OUTPUT -j limit-780 +-A OUTPUT -j limit-779 +-A OUTPUT -j limit-778 +-A OUTPUT -j limit-777 +-A OUTPUT -j limit-776 +-A OUTPUT -j limit-775 +-A OUTPUT -j limit-774 +-A OUTPUT -j limit-773 +-A OUTPUT -j limit-772 +-A OUTPUT -j limit-771 +-A OUTPUT -j limit-770 +-A OUTPUT -j limit-769 +-A OUTPUT -j limit-768 +-A OUTPUT -j limit-767 +-A OUTPUT -j limit-766 +-A OUTPUT -j limit-765 +-A OUTPUT -j limit-764 +-A OUTPUT -j limit-763 +-A OUTPUT -j limit-762 +-A OUTPUT -j limit-761 +-A OUTPUT -j limit-760 +-A OUTPUT -j limit-759 +-A OUTPUT -j limit-758 +-A OUTPUT -j limit-757 +-A OUTPUT -j limit-756 +-A OUTPUT -j limit-755 +-A OUTPUT -j limit-754 +-A OUTPUT -j limit-753 +-A OUTPUT -j limit-752 +-A OUTPUT -j limit-751 +-A OUTPUT -j limit-750 +-A OUTPUT -j limit-749 +-A OUTPUT -j limit-748 +-A OUTPUT -j limit-747 +-A OUTPUT -j limit-746 +-A OUTPUT -j limit-745 +-A OUTPUT -j limit-744 +-A OUTPUT -j limit-743 +-A OUTPUT -j limit-742 +-A OUTPUT -j limit-741 +-A OUTPUT -j limit-740 +-A OUTPUT -j limit-739 +-A OUTPUT -j limit-738 +-A OUTPUT -j limit-737 +-A OUTPUT -j limit-736 +-A OUTPUT -j limit-735 +-A OUTPUT -j limit-734 +-A OUTPUT -j limit-733 +-A OUTPUT -j limit-732 +-A OUTPUT -j limit-731 +-A OUTPUT -j limit-730 +-A OUTPUT -j limit-729 +-A OUTPUT -j limit-728 +-A OUTPUT -j limit-727 +-A OUTPUT -j limit-726 +-A OUTPUT -j limit-725 +-A OUTPUT -j limit-724 +-A OUTPUT -j limit-723 +-A OUTPUT -j limit-722 +-A OUTPUT -j limit-721 +-A OUTPUT -j limit-720 +-A OUTPUT -j limit-719 +-A OUTPUT -j limit-718 +-A OUTPUT -j limit-717 +-A OUTPUT -j limit-716 +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-0 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-2 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-3 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-4 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-5 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-6 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-7 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-8 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-10 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-14 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-16 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-17 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-18 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-19 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-20 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-21 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-22 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-23 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-24 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-25 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-26 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-27 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-28 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-29 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-30 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-31 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-32 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-33 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-34 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-35 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-36 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-37 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-38 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-39 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-43 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-47 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-55 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-59 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-69 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-73 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-77 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-85 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-89 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-97 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-101 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-105 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-109 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-113 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-117 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-127 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-131 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-135 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-139 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-143 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-147 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-151 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-155 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-159 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-163 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-167 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-177 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-181 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-185 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-189 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-193 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-197 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-201 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-205 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-209 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-217 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-221 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-235 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-239 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-247 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-251 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-259 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-263 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-271 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-275 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-289 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-293 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-301 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-305 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-313 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-317 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-325 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-329 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-358 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-359 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-360 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-361 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-362 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-363 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-364 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-365 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-366 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-367 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-368 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-369 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-370 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-371 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-372 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-373 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-374 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-375 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-376 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-378 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-379 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-380 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-382 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-383 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-384 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-385 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-386 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-387 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-388 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-390 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-391 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-392 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-394 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-395 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-396 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-397 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-398 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-399 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-400 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-402 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-403 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-404 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-406 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-407 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-408 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-409 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-410 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-411 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-412 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-414 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-415 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-416 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-418 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-419 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-420 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-421 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-422 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-423 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-424 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-425 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-426 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-427 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-428 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-429 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-430 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-432 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-433 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-434 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-436 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-437 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-438 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-439 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-440 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-441 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-442 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-444 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-445 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-446 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-448 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-449 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-450 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-451 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-452 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-453 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-454 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-456 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-457 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-458 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-460 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-461 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-462 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-463 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-464 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-465 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-466 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-468 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-469 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-470 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-472 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-473 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-474 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-475 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-476 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-477 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-478 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-479 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-480 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-481 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-482 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-483 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-484 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-486 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-487 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-488 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-490 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-491 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-492 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-493 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-494 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-495 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-496 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-498 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-499 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-500 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-502 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-503 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-504 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-505 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-506 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-507 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-508 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-510 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-511 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-512 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-514 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-515 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-516 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-517 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-518 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-519 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-520 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-522 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-523 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-524 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-526 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-527 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-528 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-529 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-530 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-531 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-532 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-533 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-534 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-535 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-536 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-537 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-538 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-540 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-541 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-542 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-544 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-545 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-546 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-547 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-548 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-549 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-550 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-552 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-553 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-554 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-556 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-557 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-558 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-559 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-560 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-561 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-562 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-564 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-565 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-566 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-568 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-569 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-570 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-571 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-572 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-573 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-574 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-576 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-577 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-578 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-580 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-581 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-582 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-583 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-584 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-585 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-586 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-587 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-588 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-589 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-590 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-591 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-592 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-594 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-595 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-596 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-598 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-599 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-600 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-601 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-602 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-603 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-604 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-606 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-607 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-608 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-610 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-611 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-612 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-613 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-614 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-615 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-616 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-618 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-619 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-620 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-622 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-623 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-624 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-625 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-626 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-627 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-628 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-630 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-631 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-632 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-634 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-635 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-636 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-637 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-638 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-639 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-640 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-641 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-642 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-643 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-644 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-645 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-646 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-648 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-649 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-650 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-652 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-653 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-654 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-655 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-656 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-657 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-658 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-660 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-661 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-662 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-664 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-665 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-666 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-667 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-668 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-669 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-670 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-672 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-673 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-674 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-676 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-677 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-678 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-679 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-680 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-681 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-682 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-684 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-685 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-686 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-688 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-689 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-690 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-691 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-692 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-693 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-694 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-695 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-696 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-697 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-698 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-699 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-700 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-701 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-702 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-703 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-704 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-705 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-706 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-707 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-708 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-709 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-710 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-711 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-712 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-713 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-714 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-715 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-1 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-2 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-3 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-4 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-5 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-6 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-7 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-8 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-9 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-10 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-11 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-12 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-13 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-14 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-15 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-16 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-17 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-18 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-19 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-20 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-21 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-22 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-23 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-24 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-25 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-26 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-27 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-28 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-29 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-30 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-31 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-32 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-33 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-34 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-35 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-36 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-37 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-38 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-39 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-40 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-41 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-42 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-43 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-44 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-45 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-46 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-47 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-48 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-49 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-51 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-52 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-53 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-54 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-55 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-56 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-57 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-58 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-59 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-60 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-61 +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set +-A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-456 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-21 +-A OUTPUT -j logdrop-457 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-0 +-A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 +-A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set +-A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-100 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-100 -j ACCEPT +-A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1007 -m limit --limit 1/second -j LOG +-A limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-101 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1019 -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1029 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1031 -m limit --limit 1/second -j LOG +-A limit-1032 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1033 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-104 -m limit --limit 1/second -j LOG +-A limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1040 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1041 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1043 -m limit --limit 1/second -j LOG +-A limit-1044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1045 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1046 -j RETURN +-A limit-1046 -m limit --limit 1/second -j LOG +-A limit-1046 -j DROP +-A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1047 -j RETURN +-A limit-1047 -m limit --limit 1/second -j LOG +-A limit-1047 -j DROP +-A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j RETURN +-A limit-1048 -m limit --limit 1/second -j LOG +-A limit-1048 -j DROP +-A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1049 -j RETURN +-A limit-1049 -m limit --limit 1/second -j LOG +-A limit-1049 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1050 -j RETURN +-A limit-1050 -m limit --limit 1/second -j LOG +-A limit-1050 -j DROP +-A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1051 -j RETURN +-A limit-1051 -m limit --limit 1/second -j LOG +-A limit-1051 -j DROP +-A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j RETURN +-A limit-1052 -m limit --limit 1/second -j LOG +-A limit-1052 -j DROP +-A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1053 -j RETURN +-A limit-1053 -m limit --limit 1/second -j LOG +-A limit-1053 -j DROP +-A limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1054 -j RETURN +-A limit-1054 -j DROP +-A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1055 -j RETURN +-A limit-1055 -j DROP +-A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j RETURN +-A limit-1056 -j DROP +-A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1057 -j RETURN +-A limit-1057 -j DROP +-A limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1058 -j RETURN +-A limit-1058 -j DROP +-A limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1059 -j RETURN +-A limit-1059 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j RETURN +-A limit-1060 -j DROP +-A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1061 -j RETURN +-A limit-1061 -j DROP +-A limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1062 -j RETURN +-A limit-1062 -m limit --limit 1/second -j LOG +-A limit-1062 -j DROP +-A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1063 -j RETURN +-A limit-1063 -m limit --limit 1/second -j LOG +-A limit-1063 -j DROP +-A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j RETURN +-A limit-1064 -m limit --limit 1/second -j LOG +-A limit-1064 -j DROP +-A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1065 -j RETURN +-A limit-1065 -m limit --limit 1/second -j LOG +-A limit-1065 -j DROP +-A limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1066 -j RETURN +-A limit-1066 -j DROP +-A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1067 -j RETURN +-A limit-1067 -j DROP +-A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j RETURN +-A limit-1068 -j DROP +-A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1069 -j RETURN +-A limit-1069 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1070 -j RETURN +-A limit-1070 -j DROP +-A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1071 -j RETURN +-A limit-1071 -j DROP +-A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j RETURN +-A limit-1072 -j DROP +-A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1073 -j RETURN +-A limit-1073 -j DROP +-A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-342 +-A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-343 +-A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --set +-A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-344 +-A limit-1076 -m limit --limit 1/second -j LOG +-A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-345 +-A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-346 +-A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-347 +-A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set +-A limit-108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-108 -j ACCEPT +-A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-348 +-A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-349 +-A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set +-A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-350 +-A limit-1082 -m limit --limit 1/second -j LOG +-A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-351 +-A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-352 +-A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-353 +-A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set +-A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-354 +-A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-355 +-A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-356 +-A limit-1088 -m limit --limit 1/second -j LOG +-A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-357 +-A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-109 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-358 +-A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-359 +-A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-360 +-A limit-1092 -j ACCEPT +-A limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-362 +-A limit-1094 -m limit --limit 1/second -j LOG +-A limit-1094 -j ACCEPT +-A limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-363 +-A limit-1095 -m limit --limit 1/second -j LOG +-A limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-364 +-A limit-1096 -j ACCEPT +-A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-366 +-A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-367 +-A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 +-A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set +-A limit-110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-110 -m limit --limit 1/second -j LOG +-A limit-110 -j ACCEPT +-A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-368 +-A limit-1100 -m limit --limit 1/second -j LOG +-A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-369 +-A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-370 +-A limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-371 +-A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-372 +-A limit-1104 -j ACCEPT +-A limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 +-A limit-1106 -m limit --limit 1/second -j LOG +-A limit-1106 -j ACCEPT +-A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 +-A limit-1107 -m limit --limit 1/second -j LOG +-A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-376 +-A limit-1108 -j ACCEPT +-A limit-111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-111 -m limit --limit 1/second -j LOG +-A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-378 +-A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-379 +-A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-380 +-A limit-1112 -m limit --limit 1/second -j LOG +-A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-381 +-A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-382 +-A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-383 +-A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-384 +-A limit-1116 -j ACCEPT +-A limit-1118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-386 +-A limit-1118 -m limit --limit 1/second -j LOG +-A limit-1118 -j ACCEPT +-A limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-387 +-A limit-1119 -m limit --limit 1/second -j LOG +-A limit-112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-112 -j ACCEPT +-A limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-388 +-A limit-1120 -j ACCEPT +-A limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-390 +-A limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-391 +-A limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-392 +-A limit-1124 -m limit --limit 1/second -j LOG +-A limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-393 +-A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-394 +-A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-395 +-A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-396 +-A limit-1128 -j ACCEPT +-A limit-113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 +-A limit-1130 -m limit --limit 1/second -j LOG +-A limit-1130 -j ACCEPT +-A limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 +-A limit-1131 -m limit --limit 1/second -j LOG +-A limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-400 +-A limit-1132 -j ACCEPT +-A limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1135 -m recent --name limit-1135 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1135 -m recent --name limit-1135 --rsource --mask 255.255.255.255 --set +-A limit-1136 -m recent --name limit-1136 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1136 -m limit --limit 1/second -j LOG +-A limit-1136 -m recent --name limit-1136 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1137 -m recent --name limit-1137 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1137 -m recent --name limit-1137 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1138 -m recent --name limit-1138 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1138 -m recent --name limit-1138 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1139 -m recent --name limit-1139 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1139 -m recent --name limit-1139 --rsource --mask 255.255.255.255 --set +-A limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1140 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1140 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1141 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1141 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1142 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1142 -m limit --limit 1/second -j LOG +-A limit-1142 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1143 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1143 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1144 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1144 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1145 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1145 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1146 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1146 -j ACCEPT +-A limit-1148 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1148 -m limit --limit 1/second -j LOG +-A limit-1148 -j ACCEPT +-A limit-1149 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1149 -m limit --limit 1/second -j LOG +-A limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --set +-A limit-1150 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1150 -j ACCEPT +-A limit-1152 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1152 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1153 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1153 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1154 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1154 -m limit --limit 1/second -j LOG +-A limit-1154 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1155 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1155 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1156 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1156 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1157 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1157 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1158 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1158 -j ACCEPT +-A limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-116 -m limit --limit 1/second -j LOG +-A limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1160 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1160 -m limit --limit 1/second -j LOG +-A limit-1160 -j ACCEPT +-A limit-1161 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1161 -m limit --limit 1/second -j LOG +-A limit-1162 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1162 -j ACCEPT +-A limit-1164 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1164 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1165 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1165 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1166 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1166 -m limit --limit 1/second -j LOG +-A limit-1166 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1167 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1167 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1168 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1168 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1169 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1169 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1170 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1170 -j ACCEPT +-A limit-1172 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1172 -m limit --limit 1/second -j LOG +-A limit-1172 -j ACCEPT +-A limit-1173 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1173 -m limit --limit 1/second -j LOG +-A limit-1174 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1174 -j ACCEPT +-A limit-1176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1177 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1178 -m limit --limit 1/second -j LOG +-A limit-1178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1180 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1180 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1181 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1181 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1182 -j ACCEPT +-A limit-1184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1184 -m limit --limit 1/second -j LOG +-A limit-1184 -j ACCEPT +-A limit-1185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1185 -m limit --limit 1/second -j LOG +-A limit-1186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1186 -j ACCEPT +-A limit-1188 -m recent --name limit-1188 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1188 -m recent --name limit-1188 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1189 -m recent --name limit-1189 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1189 -m recent --name limit-1189 --rsource --mask 255.255.255.255 --set +-A limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --set +-A limit-1190 -m recent --name limit-1190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1190 -m limit --limit 1/second -j LOG +-A limit-1190 -m recent --name limit-1190 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1191 -m recent --name limit-1191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1191 -m recent --name limit-1191 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1192 -m recent --name limit-1192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1192 -m recent --name limit-1192 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1193 -m recent --name limit-1193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1193 -m recent --name limit-1193 --rsource --mask 255.255.255.255 --set +-A limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1196 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1196 -m limit --limit 1/second -j LOG +-A limit-1196 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1197 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1197 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1198 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1198 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 +-A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1200 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1200 -j ACCEPT +-A limit-1202 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1202 -m limit --limit 1/second -j LOG +-A limit-1202 -j ACCEPT +-A limit-1203 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1203 -m limit --limit 1/second -j LOG +-A limit-1204 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1204 -j ACCEPT +-A limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1207 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1207 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1208 -m limit --limit 1/second -j LOG +-A limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1212 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1212 -j ACCEPT +-A limit-1214 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1214 -m limit --limit 1/second -j LOG +-A limit-1214 -j ACCEPT +-A limit-1215 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1215 -m limit --limit 1/second -j LOG +-A limit-1216 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1216 -j ACCEPT +-A limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-122 -m limit --limit 1/second -j LOG +-A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1220 -m limit --limit 1/second -j LOG +-A limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1224 -j ACCEPT +-A limit-1226 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1226 -m limit --limit 1/second -j LOG +-A limit-1226 -j ACCEPT +-A limit-1227 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1227 -m limit --limit 1/second -j LOG +-A limit-1228 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1228 -j ACCEPT +-A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1230 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1230 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1231 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1231 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1232 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1232 -m limit --limit 1/second -j LOG +-A limit-1232 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1233 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1233 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1234 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1234 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1235 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1235 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1236 -j ACCEPT +-A limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1238 -m limit --limit 1/second -j LOG +-A limit-1238 -j ACCEPT +-A limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1239 -m limit --limit 1/second -j LOG +-A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1240 -j ACCEPT +-A limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-402 +-A limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 +-A limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --set +-A limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 +-A limit-1244 -m limit --limit 1/second -j LOG +-A limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 +-A limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 +-A limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 +-A limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --set +-A limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 +-A limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 +-A limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-410 +-A limit-1250 -m limit --limit 1/second -j LOG +-A limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-411 +-A limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-412 +-A limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-413 +-A limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-414 +-A limit-1254 -j ACCEPT +-A limit-1256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 +-A limit-1256 -m limit --limit 1/second -j LOG +-A limit-1256 -j ACCEPT +-A limit-1257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 +-A limit-1257 -m limit --limit 1/second -j LOG +-A limit-1258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 +-A limit-1258 -j ACCEPT +-A limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-126 -j ACCEPT +-A limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-420 +-A limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-421 +-A limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-422 +-A limit-1262 -m limit --limit 1/second -j LOG +-A limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-423 +-A limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-424 +-A limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-425 +-A limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1266 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-426 +-A limit-1266 -j ACCEPT +-A limit-1268 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-428 +-A limit-1268 -m limit --limit 1/second -j LOG +-A limit-1268 -j ACCEPT +-A limit-1269 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-429 +-A limit-1269 -m limit --limit 1/second -j LOG +-A limit-127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1270 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 +-A limit-1270 -j ACCEPT +-A limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-432 +-A limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-433 +-A limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-434 +-A limit-1274 -m limit --limit 1/second -j LOG +-A limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-435 +-A limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-436 +-A limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-437 +-A limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-438 +-A limit-1278 -j ACCEPT +-A limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-128 -m limit --limit 1/second -j LOG +-A limit-128 -j ACCEPT +-A limit-1280 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-440 +-A limit-1280 -m limit --limit 1/second -j LOG +-A limit-1280 -j ACCEPT +-A limit-1281 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-441 +-A limit-1281 -m limit --limit 1/second -j LOG +-A limit-1282 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-442 +-A limit-1282 -j ACCEPT +-A limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-444 +-A limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 +-A limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 +-A limit-1286 -m limit --limit 1/second -j LOG +-A limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 +-A limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 +-A limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 +-A limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-129 -m limit --limit 1/second -j LOG +-A limit-1290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-450 +-A limit-1290 -j ACCEPT +-A limit-1292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 +-A limit-1292 -m limit --limit 1/second -j LOG +-A limit-1292 -j ACCEPT +-A limit-1293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 +-A limit-1293 -m limit --limit 1/second -j LOG +-A limit-1294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 +-A limit-1294 -j ACCEPT +-A limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1297 -m recent --name limit-1297 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1297 -m recent --name limit-1297 --rsource --mask 255.255.255.255 --set +-A limit-1298 -m recent --name limit-1298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1298 -m limit --limit 1/second -j LOG +-A limit-1298 -m recent --name limit-1298 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 +-A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-130 -j ACCEPT +-A limit-1300 -m recent --name limit-1300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1300 -m recent --name limit-1300 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1301 -m recent --name limit-1301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1301 -m recent --name limit-1301 --rsource --mask 255.255.255.255 --set +-A limit-1302 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1302 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1303 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1303 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1304 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1304 -m limit --limit 1/second -j LOG +-A limit-1304 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1305 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1305 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1306 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1306 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1307 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1307 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1308 -j ACCEPT +-A limit-131 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1310 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1310 -m limit --limit 1/second -j LOG +-A limit-1310 -j ACCEPT +-A limit-1311 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1311 -m limit --limit 1/second -j LOG +-A limit-1312 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1312 -j ACCEPT +-A limit-1314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1315 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1316 -m limit --limit 1/second -j LOG +-A limit-1316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1317 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1319 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1320 -j ACCEPT +-A limit-1322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1322 -m limit --limit 1/second -j LOG +-A limit-1322 -j ACCEPT +-A limit-1323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1323 -m limit --limit 1/second -j LOG +-A limit-1324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1324 -j ACCEPT +-A limit-1326 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1326 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1327 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1327 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1328 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1328 -m limit --limit 1/second -j LOG +-A limit-1328 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1329 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1329 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1331 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1332 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1332 -j ACCEPT +-A limit-1334 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1334 -m limit --limit 1/second -j LOG +-A limit-1334 -j ACCEPT +-A limit-1335 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1335 -m limit --limit 1/second -j LOG +-A limit-1336 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1336 -j ACCEPT +-A limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-134 -m limit --limit 1/second -j LOG +-A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1340 -m limit --limit 1/second -j LOG +-A limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1343 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1343 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1344 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1344 -j ACCEPT +-A limit-1346 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1346 -m limit --limit 1/second -j LOG +-A limit-1346 -j ACCEPT +-A limit-1347 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1347 -m limit --limit 1/second -j LOG +-A limit-1348 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1348 -j ACCEPT +-A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set +-A limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1352 -m limit --limit 1/second -j LOG +-A limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --set +-A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1358 -m limit --limit 1/second -j LOG +-A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1362 -j ACCEPT +-A limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1364 -m limit --limit 1/second -j LOG +-A limit-1364 -j ACCEPT +-A limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1365 -m limit --limit 1/second -j LOG +-A limit-1366 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1366 -j ACCEPT +-A limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1370 -m limit --limit 1/second -j LOG +-A limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1374 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1374 -j ACCEPT +-A limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1376 -m limit --limit 1/second -j LOG +-A limit-1376 -j ACCEPT +-A limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1377 -m limit --limit 1/second -j LOG +-A limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1378 -j ACCEPT +-A limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-138 -j ACCEPT +-A limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1382 -m limit --limit 1/second -j LOG +-A limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1386 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1386 -j ACCEPT +-A limit-1388 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1388 -m limit --limit 1/second -j LOG +-A limit-1388 -j ACCEPT +-A limit-1389 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1389 -m limit --limit 1/second -j LOG +-A limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1390 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1390 -j ACCEPT +-A limit-1392 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1392 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1393 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1393 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1394 -m limit --limit 1/second -j LOG +-A limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1398 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1398 -j ACCEPT +-A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 +-A limit-14 -m limit --limit 1/second -j LOG +-A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-140 -m limit --limit 1/second -j LOG +-A limit-140 -j ACCEPT +-A limit-1400 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1400 -m limit --limit 1/second -j LOG +-A limit-1400 -j ACCEPT +-A limit-1401 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1401 -m limit --limit 1/second -j LOG +-A limit-1402 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1402 -j ACCEPT +-A limit-1404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1404 -j ACCEPT +-A limit-1404 -m limit --limit 1/second -j LOG +-A limit-1404 -j DROP +-A limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1405 -j RETURN +-A limit-1405 -m limit --limit 1/second -j LOG +-A limit-1405 -j DROP +-A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1406 -j logaccept-14 +-A limit-1406 -m limit --limit 1/second -j LOG +-A limit-1406 -j DROP +-A limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1407 -j ACCEPT +-A limit-1407 -m limit --limit 1/second -j LOG +-A limit-1407 -j DROP +-A limit-1408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1408 -j ACCEPT +-A limit-1408 -m limit --limit 1/second -j LOG +-A limit-1408 -j DROP +-A limit-1409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1409 -j RETURN +-A limit-1409 -m limit --limit 1/second -j LOG +-A limit-1409 -j DROP +-A limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-141 -m limit --limit 1/second -j LOG +-A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1410 -j logaccept-15 +-A limit-1410 -m limit --limit 1/second -j LOG +-A limit-1410 -j DROP +-A limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1411 -j ACCEPT +-A limit-1411 -m limit --limit 1/second -j LOG +-A limit-1411 -j DROP +-A limit-1412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1412 -j ACCEPT +-A limit-1412 -j DROP +-A limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1413 -j RETURN +-A limit-1413 -j DROP +-A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1414 -j logaccept-16 +-A limit-1414 -j DROP +-A limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1415 -j ACCEPT +-A limit-1415 -j DROP +-A limit-1416 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1416 -j ACCEPT +-A limit-1416 -j DROP +-A limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1417 -j RETURN +-A limit-1417 -j DROP +-A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1418 -j logaccept-17 +-A limit-1418 -j DROP +-A limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1419 -j ACCEPT +-A limit-1419 -j DROP +-A limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-142 -j ACCEPT +-A limit-1420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1420 -j ACCEPT +-A limit-1420 -m limit --limit 1/second -j LOG +-A limit-1420 -j DROP +-A limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1421 -j RETURN +-A limit-1421 -m limit --limit 1/second -j LOG +-A limit-1421 -j DROP +-A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1422 -j logaccept-18 +-A limit-1422 -m limit --limit 1/second -j LOG +-A limit-1422 -j DROP +-A limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1423 -j ACCEPT +-A limit-1423 -m limit --limit 1/second -j LOG +-A limit-1423 -j DROP +-A limit-1424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1424 -j ACCEPT +-A limit-1424 -j DROP +-A limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1425 -j RETURN +-A limit-1425 -j DROP +-A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1426 -j logaccept-19 +-A limit-1426 -j DROP +-A limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1427 -j ACCEPT +-A limit-1427 -j DROP +-A limit-1428 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1428 -j ACCEPT +-A limit-1428 -j DROP +-A limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1429 -j RETURN +-A limit-1429 -j DROP +-A limit-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1430 -j logaccept-20 +-A limit-1430 -j DROP +-A limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1431 -j ACCEPT +-A limit-1431 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-146 -m limit --limit 1/second -j LOG +-A limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 +-A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-150 -j ACCEPT +-A limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-152 -m limit --limit 1/second -j LOG +-A limit-152 -j ACCEPT +-A limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-153 -m limit --limit 1/second -j LOG +-A limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-154 -j ACCEPT +-A limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-158 -m limit --limit 1/second -j LOG +-A limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 +-A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-162 -j ACCEPT +-A limit-163 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-164 -m limit --limit 1/second -j LOG +-A limit-164 -j ACCEPT +-A limit-165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-165 -m limit --limit 1/second -j LOG +-A limit-166 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-166 -j ACCEPT +-A limit-167 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-60 +-A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 +-A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --set +-A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 +-A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 +-A limit-170 -m limit --limit 1/second -j LOG +-A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 +-A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 +-A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 +-A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --set +-A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 +-A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 +-A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 +-A limit-176 -m limit --limit 1/second -j LOG +-A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 +-A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 +-A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 +-A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-18 +-A limit-18 -j ACCEPT +-A limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-72 +-A limit-180 -j ACCEPT +-A limit-181 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 +-A limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 +-A limit-182 -m limit --limit 1/second -j LOG +-A limit-182 -j ACCEPT +-A limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 +-A limit-183 -m limit --limit 1/second -j LOG +-A limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 +-A limit-184 -j ACCEPT +-A limit-185 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 +-A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-78 +-A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 +-A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 +-A limit-188 -m limit --limit 1/second -j LOG +-A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 +-A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 +-A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 +-A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-84 +-A limit-192 -j ACCEPT +-A limit-193 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 +-A limit-194 -m limit --limit 1/second -j LOG +-A limit-194 -j ACCEPT +-A limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 +-A limit-195 -m limit --limit 1/second -j LOG +-A limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 +-A limit-196 -j ACCEPT +-A limit-197 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-90 +-A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 +-A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 +-A limit-2 -m limit --limit 1/second -j LOG +-A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20 +-A limit-20 -m limit --limit 1/second -j LOG +-A limit-20 -j ACCEPT +-A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 +-A limit-200 -m limit --limit 1/second -j LOG +-A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 +-A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 +-A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 +-A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-96 +-A limit-204 -j ACCEPT +-A limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 +-A limit-206 -m limit --limit 1/second -j LOG +-A limit-206 -j ACCEPT +-A limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 +-A limit-207 -m limit --limit 1/second -j LOG +-A limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 +-A limit-208 -j ACCEPT +-A limit-209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-21 +-A limit-21 -m limit --limit 1/second -j LOG +-A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-102 +-A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 +-A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 +-A limit-212 -m limit --limit 1/second -j LOG +-A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 +-A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 +-A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 +-A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-108 +-A limit-216 -j ACCEPT +-A limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 +-A limit-218 -m limit --limit 1/second -j LOG +-A limit-218 -j ACCEPT +-A limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 +-A limit-219 -m limit --limit 1/second -j LOG +-A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-22 +-A limit-22 -j ACCEPT +-A limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 +-A limit-220 -j ACCEPT +-A limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 +-A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set +-A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-224 -m limit --limit 1/second -j LOG +-A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set +-A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-23 +-A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-230 -m limit --limit 1/second -j LOG +-A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-234 -j ACCEPT +-A limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-236 -m limit --limit 1/second -j LOG +-A limit-236 -j ACCEPT +-A limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-237 -m limit --limit 1/second -j LOG +-A limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-238 -j ACCEPT +-A limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-242 -m limit --limit 1/second -j LOG +-A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-246 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-246 -j ACCEPT +-A limit-247 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m limit --limit 1/second -j LOG +-A limit-248 -j ACCEPT +-A limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-249 -m limit --limit 1/second -j LOG +-A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 +-A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-250 -j ACCEPT +-A limit-251 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-254 -m limit --limit 1/second -j LOG +-A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-258 -j ACCEPT +-A limit-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 +-A limit-26 -m limit --limit 1/second -j LOG +-A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-260 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-260 -m limit --limit 1/second -j LOG +-A limit-260 -j ACCEPT +-A limit-261 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-261 -m limit --limit 1/second -j LOG +-A limit-262 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-262 -j ACCEPT +-A limit-263 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-266 -m limit --limit 1/second -j LOG +-A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 +-A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-270 -j ACCEPT +-A limit-271 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-272 -m limit --limit 1/second -j LOG +-A limit-272 -j ACCEPT +-A limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-273 -m limit --limit 1/second -j LOG +-A limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-274 -j ACCEPT +-A limit-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --set +-A limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-278 -m limit --limit 1/second -j LOG +-A limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 +-A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set +-A limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-284 -m limit --limit 1/second -j LOG +-A limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-288 -j ACCEPT +-A limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 +-A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-290 -m limit --limit 1/second -j LOG +-A limit-290 -j ACCEPT +-A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-291 -m limit --limit 1/second -j LOG +-A limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-292 -j ACCEPT +-A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-296 -m limit --limit 1/second -j LOG +-A limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 +-A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-30 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-30 +-A limit-30 -j ACCEPT +-A limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-300 -j ACCEPT +-A limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-302 -m limit --limit 1/second -j LOG +-A limit-302 -j ACCEPT +-A limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-303 -m limit --limit 1/second -j LOG +-A limit-304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-304 -j ACCEPT +-A limit-305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-308 -m limit --limit 1/second -j LOG +-A limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-31 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 +-A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-312 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-312 -j ACCEPT +-A limit-313 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-314 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-314 -m limit --limit 1/second -j LOG +-A limit-314 -j ACCEPT +-A limit-315 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-315 -m limit --limit 1/second -j LOG +-A limit-316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-316 -j ACCEPT +-A limit-317 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 +-A limit-32 -m limit --limit 1/second -j LOG +-A limit-32 -j ACCEPT +-A limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-320 -m limit --limit 1/second -j LOG +-A limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-324 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-324 -j ACCEPT +-A limit-325 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-326 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-326 -m limit --limit 1/second -j LOG +-A limit-326 -j ACCEPT +-A limit-327 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-327 -m limit --limit 1/second -j LOG +-A limit-328 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-328 -j ACCEPT +-A limit-329 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 +-A limit-33 -m limit --limit 1/second -j LOG +-A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-330 -j ACCEPT +-A limit-330 -m limit --limit 1/second -j LOG +-A limit-330 -j DROP +-A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-331 -j RETURN +-A limit-331 -m limit --limit 1/second -j LOG +-A limit-331 -j DROP +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-0 +-A limit-332 -m limit --limit 1/second -j LOG +-A limit-332 -j DROP +-A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-333 -j ACCEPT +-A limit-333 -m limit --limit 1/second -j LOG +-A limit-333 -j DROP +-A limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-334 -j ACCEPT +-A limit-334 -m limit --limit 1/second -j LOG +-A limit-334 -j DROP +-A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-335 -j RETURN +-A limit-335 -m limit --limit 1/second -j LOG +-A limit-335 -j DROP +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-1 +-A limit-336 -m limit --limit 1/second -j LOG +-A limit-336 -j DROP +-A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-337 -j ACCEPT +-A limit-337 -m limit --limit 1/second -j LOG +-A limit-337 -j DROP +-A limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-338 -j ACCEPT +-A limit-338 -j DROP +-A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-339 -j RETURN +-A limit-339 -j DROP +-A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 +-A limit-34 -j ACCEPT +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-2 +-A limit-340 -j DROP +-A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-341 -j ACCEPT +-A limit-341 -j DROP +-A limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-342 -j ACCEPT +-A limit-342 -j DROP +-A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-343 -j RETURN +-A limit-343 -j DROP +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-3 +-A limit-344 -j DROP +-A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-345 -j ACCEPT +-A limit-345 -j DROP +-A limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-346 -j ACCEPT +-A limit-346 -m limit --limit 1/second -j LOG +-A limit-346 -j DROP +-A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-347 -j RETURN +-A limit-347 -m limit --limit 1/second -j LOG +-A limit-347 -j DROP +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-4 +-A limit-348 -m limit --limit 1/second -j LOG +-A limit-348 -j DROP +-A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-349 -j ACCEPT +-A limit-349 -m limit --limit 1/second -j LOG +-A limit-349 -j DROP +-A limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 +-A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-350 -j ACCEPT +-A limit-350 -j DROP +-A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-351 -j RETURN +-A limit-351 -j DROP +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-5 +-A limit-352 -j DROP +-A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-353 -j ACCEPT +-A limit-353 -j DROP +-A limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-354 -j ACCEPT +-A limit-354 -j DROP +-A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-355 -j RETURN +-A limit-355 -j DROP +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-6 +-A limit-356 -j DROP +-A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-357 -j ACCEPT +-A limit-357 -j DROP +-A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-114 +-A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set +-A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-36 +-A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-360 -m limit --limit 1/second -j LOG +-A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set +-A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set +-A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-366 -m limit --limit 1/second -j LOG +-A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set +-A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 +-A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-372 -m limit --limit 1/second -j LOG +-A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-376 -j ACCEPT +-A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-378 -m limit --limit 1/second -j LOG +-A limit-378 -j ACCEPT +-A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-379 -m limit --limit 1/second -j LOG +-A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-38 -m limit --limit 1/second -j LOG +-A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-380 -j ACCEPT +-A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-384 -m limit --limit 1/second -j LOG +-A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-388 -j ACCEPT +-A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 +-A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A limit-390 -m limit --limit 1/second -j LOG +-A limit-390 -j ACCEPT +-A limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-391 -m limit --limit 1/second -j LOG +-A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 +-A limit-392 -j ACCEPT +-A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-150 +-A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 +-A limit-396 -m limit --limit 1/second -j LOG +-A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 +-A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-400 -j ACCEPT +-A limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 +-A limit-402 -m limit --limit 1/second -j LOG +-A limit-402 -j ACCEPT +-A limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-403 -m limit --limit 1/second -j LOG +-A limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 +-A limit-404 -j ACCEPT +-A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-162 +-A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-408 -m limit --limit 1/second -j LOG +-A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 +-A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-412 -j ACCEPT +-A limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 +-A limit-414 -m limit --limit 1/second -j LOG +-A limit-414 -j ACCEPT +-A limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-415 -m limit --limit 1/second -j LOG +-A limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-416 -j ACCEPT +-A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set +-A limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-42 -j ACCEPT +-A limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-420 -m limit --limit 1/second -j LOG +-A limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --set +-A limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-426 -m limit --limit 1/second -j LOG +-A limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-43 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-430 -j ACCEPT +-A limit-432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-432 -m limit --limit 1/second -j LOG +-A limit-432 -j ACCEPT +-A limit-433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-433 -m limit --limit 1/second -j LOG +-A limit-434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-434 -j ACCEPT +-A limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-438 -m limit --limit 1/second -j LOG +-A limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 +-A limit-44 -m limit --limit 1/second -j LOG +-A limit-44 -j ACCEPT +-A limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-442 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-442 -j ACCEPT +-A limit-444 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-444 -m limit --limit 1/second -j LOG +-A limit-444 -j ACCEPT +-A limit-445 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-445 -m limit --limit 1/second -j LOG +-A limit-446 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-446 -j ACCEPT +-A limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 +-A limit-45 -m limit --limit 1/second -j LOG +-A limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-450 -m limit --limit 1/second -j LOG +-A limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-454 -j ACCEPT +-A limit-456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-456 -m limit --limit 1/second -j LOG +-A limit-456 -j ACCEPT +-A limit-457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-457 -m limit --limit 1/second -j LOG +-A limit-458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-458 -j ACCEPT +-A limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-46 -j ACCEPT +-A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-462 -m limit --limit 1/second -j LOG +-A limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-466 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-466 -j ACCEPT +-A limit-468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-468 -m limit --limit 1/second -j LOG +-A limit-468 -j ACCEPT +-A limit-469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-469 -m limit --limit 1/second -j LOG +-A limit-47 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-470 -j ACCEPT +-A limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --set +-A limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-474 -m limit --limit 1/second -j LOG +-A limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --set +-A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-48 +-A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-480 -m limit --limit 1/second -j LOG +-A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-484 -j ACCEPT +-A limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-486 -m limit --limit 1/second -j LOG +-A limit-486 -j ACCEPT +-A limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-487 -m limit --limit 1/second -j LOG +-A limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-488 -j ACCEPT +-A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-492 -m limit --limit 1/second -j LOG +-A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-496 -j ACCEPT +-A limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-498 -m limit --limit 1/second -j LOG +-A limit-498 -j ACCEPT +-A limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-499 -m limit --limit 1/second -j LOG +-A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 +-A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set +-A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-50 -m limit --limit 1/second -j LOG +-A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-500 -j ACCEPT +-A limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-504 -m limit --limit 1/second -j LOG +-A limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-508 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-508 -j ACCEPT +-A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 +-A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-510 -m limit --limit 1/second -j LOG +-A limit-510 -j ACCEPT +-A limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-511 -m limit --limit 1/second -j LOG +-A limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-512 -j ACCEPT +-A limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-516 -m limit --limit 1/second -j LOG +-A limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-520 -j ACCEPT +-A limit-522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-522 -m limit --limit 1/second -j LOG +-A limit-522 -j ACCEPT +-A limit-523 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-523 -m limit --limit 1/second -j LOG +-A limit-524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-524 -j ACCEPT +-A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-174 +-A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 +-A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set +-A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 +-A limit-528 -m limit --limit 1/second -j LOG +-A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 +-A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 +-A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 +-A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set +-A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 +-A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 +-A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 +-A limit-534 -m limit --limit 1/second -j LOG +-A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 +-A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 +-A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 +-A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-538 -j ACCEPT +-A limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-54 -j ACCEPT +-A limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 +-A limit-540 -m limit --limit 1/second -j LOG +-A limit-540 -j ACCEPT +-A limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 +-A limit-541 -m limit --limit 1/second -j LOG +-A limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 +-A limit-542 -j ACCEPT +-A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-192 +-A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 +-A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 +-A limit-546 -m limit --limit 1/second -j LOG +-A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 +-A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 +-A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 +-A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-55 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-198 +-A limit-550 -j ACCEPT +-A limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A limit-552 -m limit --limit 1/second -j LOG +-A limit-552 -j ACCEPT +-A limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 +-A limit-553 -m limit --limit 1/second -j LOG +-A limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 +-A limit-554 -j ACCEPT +-A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-204 +-A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 +-A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 +-A limit-558 -m limit --limit 1/second -j LOG +-A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 +-A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 +-A limit-56 -m limit --limit 1/second -j LOG +-A limit-56 -j ACCEPT +-A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 +-A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 +-A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-210 +-A limit-562 -j ACCEPT +-A limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 +-A limit-564 -m limit --limit 1/second -j LOG +-A limit-564 -j ACCEPT +-A limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 +-A limit-565 -m limit --limit 1/second -j LOG +-A limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 +-A limit-566 -j ACCEPT +-A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-216 +-A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 +-A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-57 -m limit --limit 1/second -j LOG +-A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 +-A limit-570 -m limit --limit 1/second -j LOG +-A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 +-A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 +-A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-574 -j ACCEPT +-A limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 +-A limit-576 -m limit --limit 1/second -j LOG +-A limit-576 -j ACCEPT +-A limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 +-A limit-577 -m limit --limit 1/second -j LOG +-A limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 +-A limit-578 -j ACCEPT +-A limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-58 -j ACCEPT +-A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --set +-A limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-582 -m limit --limit 1/second -j LOG +-A limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --set +-A limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-588 -m limit --limit 1/second -j LOG +-A limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-59 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-592 -j ACCEPT +-A limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-594 -m limit --limit 1/second -j LOG +-A limit-594 -j ACCEPT +-A limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-595 -m limit --limit 1/second -j LOG +-A limit-596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-596 -j ACCEPT +-A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 +-A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-600 -m limit --limit 1/second -j LOG +-A limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-604 -j ACCEPT +-A limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-606 -m limit --limit 1/second -j LOG +-A limit-606 -j ACCEPT +-A limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-607 -m limit --limit 1/second -j LOG +-A limit-608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-608 -j ACCEPT +-A limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --set +-A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-612 -m limit --limit 1/second -j LOG +-A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-616 -j ACCEPT +-A limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-618 -m limit --limit 1/second -j LOG +-A limit-618 -j ACCEPT +-A limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-619 -m limit --limit 1/second -j LOG +-A limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-62 -m limit --limit 1/second -j LOG +-A limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-620 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-620 -j ACCEPT +-A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-624 -m limit --limit 1/second -j LOG +-A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-628 -j ACCEPT +-A limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-630 -m limit --limit 1/second -j LOG +-A limit-630 -j ACCEPT +-A limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-631 -m limit --limit 1/second -j LOG +-A limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-632 -j ACCEPT +-A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set +-A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-636 -m limit --limit 1/second -j LOG +-A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set +-A limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-642 -m limit --limit 1/second -j LOG +-A limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-646 -j ACCEPT +-A limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-648 -m limit --limit 1/second -j LOG +-A limit-648 -j ACCEPT +-A limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-649 -m limit --limit 1/second -j LOG +-A limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --set +-A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-650 -j ACCEPT +-A limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-654 -m limit --limit 1/second -j LOG +-A limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-658 -j ACCEPT +-A limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-660 -m limit --limit 1/second -j LOG +-A limit-660 -j ACCEPT +-A limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-661 -m limit --limit 1/second -j LOG +-A limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-662 -j ACCEPT +-A limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-666 -m limit --limit 1/second -j LOG +-A limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-670 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-670 -j ACCEPT +-A limit-672 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-672 -m limit --limit 1/second -j LOG +-A limit-672 -j ACCEPT +-A limit-673 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-673 -m limit --limit 1/second -j LOG +-A limit-674 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-674 -j ACCEPT +-A limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-678 -m limit --limit 1/second -j LOG +-A limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-68 -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-682 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-682 -j ACCEPT +-A limit-684 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-684 -m limit --limit 1/second -j LOG +-A limit-684 -j ACCEPT +-A limit-685 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-685 -m limit --limit 1/second -j LOG +-A limit-686 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-686 -j ACCEPT +-A limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-688 -j ACCEPT +-A limit-688 -m limit --limit 1/second -j LOG +-A limit-688 -j DROP +-A limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-689 -j RETURN +-A limit-689 -m limit --limit 1/second -j LOG +-A limit-689 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j logaccept-7 +-A limit-690 -m limit --limit 1/second -j LOG +-A limit-690 -j DROP +-A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-691 -j ACCEPT +-A limit-691 -m limit --limit 1/second -j LOG +-A limit-691 -j DROP +-A limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-692 -j ACCEPT +-A limit-692 -m limit --limit 1/second -j LOG +-A limit-692 -j DROP +-A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-693 -j RETURN +-A limit-693 -m limit --limit 1/second -j LOG +-A limit-693 -j DROP +-A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j logaccept-8 +-A limit-694 -m limit --limit 1/second -j LOG +-A limit-694 -j DROP +-A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-695 -j ACCEPT +-A limit-695 -m limit --limit 1/second -j LOG +-A limit-695 -j DROP +-A limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-696 -j ACCEPT +-A limit-696 -j DROP +-A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-697 -j RETURN +-A limit-697 -j DROP +-A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j logaccept-9 +-A limit-698 -j DROP +-A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-699 -j ACCEPT +-A limit-699 -j DROP +-A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 +-A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set +-A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-700 -j ACCEPT +-A limit-700 -j DROP +-A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-701 -j RETURN +-A limit-701 -j DROP +-A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j logaccept-10 +-A limit-702 -j DROP +-A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-703 -j ACCEPT +-A limit-703 -j DROP +-A limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-704 -j ACCEPT +-A limit-704 -m limit --limit 1/second -j LOG +-A limit-704 -j DROP +-A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-705 -j RETURN +-A limit-705 -m limit --limit 1/second -j LOG +-A limit-705 -j DROP +-A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j logaccept-11 +-A limit-706 -m limit --limit 1/second -j LOG +-A limit-706 -j DROP +-A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-707 -j ACCEPT +-A limit-707 -m limit --limit 1/second -j LOG +-A limit-707 -j DROP +-A limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-708 -j ACCEPT +-A limit-708 -j DROP +-A limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-709 -j RETURN +-A limit-709 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j logaccept-12 +-A limit-710 -j DROP +-A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-711 -j ACCEPT +-A limit-711 -j DROP +-A limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-712 -j ACCEPT +-A limit-712 -j DROP +-A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-713 -j RETURN +-A limit-713 -j DROP +-A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j logaccept-13 +-A limit-714 -j DROP +-A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-715 -j ACCEPT +-A limit-715 -j DROP +-A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-228 +-A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set +-A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set +-A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set +-A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-72 -j ACCEPT +-A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set +-A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set +-A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set +-A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set +-A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 +-A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set +-A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 +-A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set +-A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set +-A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 +-A limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 +-A limit-737 -m limit --limit 1/second -j LOG +-A limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-739 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 +-A limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-74 -m limit --limit 1/second -j LOG +-A limit-74 -j ACCEPT +-A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-252 +-A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 +-A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 +-A limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 +-A limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 +-A limit-749 -m limit --limit 1/second -j LOG +-A limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-75 -m limit --limit 1/second -j LOG +-A limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-264 +-A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 +-A limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-76 -j ACCEPT +-A limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 +-A limit-761 -m limit --limit 1/second -j LOG +-A limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-276 +-A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 +-A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 +-A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 +-A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 +-A limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 +-A limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 +-A limit-773 -m limit --limit 1/second -j LOG +-A limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 +-A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --set +-A limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --set +-A limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --set +-A limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --set +-A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --set +-A limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-788 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-789 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-791 -m limit --limit 1/second -j LOG +-A limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 +-A limit-8 -m limit --limit 1/second -j LOG +-A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m limit --limit 1/second -j LOG +-A limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-800 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-801 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-802 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-803 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-803 -m limit --limit 1/second -j LOG +-A limit-804 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-805 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-813 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-815 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-815 -m limit --limit 1/second -j LOG +-A limit-816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-817 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-824 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-825 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-826 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-827 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-827 -m limit --limit 1/second -j LOG +-A limit-828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-829 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --set +-A limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --set +-A limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --set +-A limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --set +-A limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --set +-A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-84 -j ACCEPT +-A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-845 -m limit --limit 1/second -j LOG +-A limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-847 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-857 -m limit --limit 1/second -j LOG +-A limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-86 -m limit --limit 1/second -j LOG +-A limit-86 -j ACCEPT +-A limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-866 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-867 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-868 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-869 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-869 -m limit --limit 1/second -j LOG +-A limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-87 -m limit --limit 1/second -j LOG +-A limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-879 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-88 -j ACCEPT +-A limit-880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-881 -m limit --limit 1/second -j LOG +-A limit-882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-883 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-288 +-A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --set +-A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --set +-A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --set +-A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 +-A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --set +-A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --set +-A limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-897 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 +-A limit-899 -m limit --limit 1/second -j LOG +-A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 +-A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-901 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-306 +-A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 +-A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-909 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 +-A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 +-A limit-911 -m limit --limit 1/second -j LOG +-A limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-913 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-318 +-A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-92 -m limit --limit 1/second -j LOG +-A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-921 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 +-A limit-923 -m limit --limit 1/second -j LOG +-A limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-925 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 +-A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-330 +-A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-933 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 +-A limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 +-A limit-935 -m limit --limit 1/second -j LOG +-A limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-937 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 +-A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --set +-A limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --set +-A limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --set +-A limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --set +-A limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --set +-A limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-950 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-951 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-952 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-953 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-953 -m limit --limit 1/second -j LOG +-A limit-954 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-955 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-96 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-96 -j ACCEPT +-A limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-962 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-963 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-964 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-965 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-965 -m limit --limit 1/second -j LOG +-A limit-966 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-967 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-97 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-974 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-975 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-976 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-977 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-977 -m limit --limit 1/second -j LOG +-A limit-978 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-979 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-98 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-98 -m limit --limit 1/second -j LOG +-A limit-98 -j ACCEPT +-A limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-987 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-989 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-989 -m limit --limit 1/second -j LOG +-A limit-99 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-99 -m limit --limit 1/second -j LOG +-A limit-990 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-991 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set +-A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set +-A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set +-A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --set +-A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --set +-A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logaccept-1 -m limit --limit 1/second -j LOG +-A logaccept-1 -j ACCEPT +-A logaccept-10 -m limit --limit 1/second -j LOG +-A logaccept-10 -j ACCEPT +-A logaccept-11 -m limit --limit 1/second -j LOG +-A logaccept-11 -j ACCEPT +-A logaccept-12 -m limit --limit 1/second -j LOG +-A logaccept-12 -j ACCEPT +-A logaccept-13 -m limit --limit 1/second -j LOG +-A logaccept-13 -j ACCEPT +-A logaccept-14 -m limit --limit 1/second -j LOG +-A logaccept-14 -j ACCEPT +-A logaccept-15 -m limit --limit 1/second -j LOG +-A logaccept-15 -j ACCEPT +-A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j ACCEPT +-A logaccept-17 -m limit --limit 1/second -j LOG +-A logaccept-17 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-19 -m limit --limit 1/second -j LOG +-A logaccept-19 -j ACCEPT +-A logaccept-2 -m limit --limit 1/second -j LOG +-A logaccept-2 -j ACCEPT +-A logaccept-20 -m limit --limit 1/second -j LOG +-A logaccept-20 -j ACCEPT +-A logaccept-21 -m limit --limit 1/second -j LOG +-A logaccept-21 -j ACCEPT +-A logaccept-3 -m limit --limit 1/second -j LOG +-A logaccept-3 -j ACCEPT +-A logaccept-4 -m limit --limit 1/second -j LOG +-A logaccept-4 -j ACCEPT +-A logaccept-5 -m limit --limit 1/second -j LOG +-A logaccept-5 -j ACCEPT +-A logaccept-6 -m limit --limit 1/second -j LOG +-A logaccept-6 -j ACCEPT +-A logaccept-7 -m limit --limit 1/second -j LOG +-A logaccept-7 -j ACCEPT +-A logaccept-8 -m limit --limit 1/second -j LOG +-A logaccept-8 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG +-A logaccept-9 -j ACCEPT +-A logaccept-final-0 -m limit --limit 1/second -j LOG +-A logaccept-final-0 -j ACCEPT +-A logaccept-final-1 -m limit --limit 1/second -j LOG +-A logaccept-final-1 -j ACCEPT +-A logaccept-final-10 -m limit --limit 1/second -j LOG +-A logaccept-final-10 -j ACCEPT +-A logaccept-final-11 -m limit --limit 1/second -j LOG +-A logaccept-final-11 -j ACCEPT +-A logaccept-final-12 -m limit --limit 1/second -j LOG +-A logaccept-final-12 -j ACCEPT +-A logaccept-final-13 -m limit --limit 1/second -j LOG +-A logaccept-final-13 -j ACCEPT +-A logaccept-final-14 -m limit --limit 1/second -j LOG +-A logaccept-final-14 -j ACCEPT +-A logaccept-final-15 -m limit --limit 1/second -j LOG +-A logaccept-final-15 -j ACCEPT +-A logaccept-final-16 -m limit --limit 1/second -j LOG +-A logaccept-final-16 -j ACCEPT +-A logaccept-final-17 -m limit --limit 1/second -j LOG +-A logaccept-final-17 -j ACCEPT +-A logaccept-final-18 -m limit --limit 1/second -j LOG +-A logaccept-final-18 -j ACCEPT +-A logaccept-final-19 -m limit --limit 1/second -j LOG +-A logaccept-final-19 -j ACCEPT +-A logaccept-final-2 -m limit --limit 1/second -j LOG +-A logaccept-final-2 -j ACCEPT +-A logaccept-final-20 -m limit --limit 1/second -j LOG +-A logaccept-final-20 -j ACCEPT +-A logaccept-final-21 -m limit --limit 1/second -j LOG +-A logaccept-final-21 -j ACCEPT +-A logaccept-final-22 -m limit --limit 1/second -j LOG +-A logaccept-final-22 -j ACCEPT +-A logaccept-final-23 -m limit --limit 1/second -j LOG +-A logaccept-final-23 -j ACCEPT +-A logaccept-final-24 -m limit --limit 1/second -j LOG +-A logaccept-final-24 -j ACCEPT +-A logaccept-final-25 -m limit --limit 1/second -j LOG +-A logaccept-final-25 -j ACCEPT +-A logaccept-final-26 -m limit --limit 1/second -j LOG +-A logaccept-final-26 -j ACCEPT +-A logaccept-final-27 -m limit --limit 1/second -j LOG +-A logaccept-final-27 -j ACCEPT +-A logaccept-final-28 -m limit --limit 1/second -j LOG +-A logaccept-final-28 -j ACCEPT +-A logaccept-final-29 -m limit --limit 1/second -j LOG +-A logaccept-final-29 -j ACCEPT +-A logaccept-final-3 -m limit --limit 1/second -j LOG +-A logaccept-final-3 -j ACCEPT +-A logaccept-final-30 -m limit --limit 1/second -j LOG +-A logaccept-final-30 -j ACCEPT +-A logaccept-final-31 -m limit --limit 1/second -j LOG +-A logaccept-final-31 -j ACCEPT +-A logaccept-final-32 -m limit --limit 1/second -j LOG +-A logaccept-final-32 -j ACCEPT +-A logaccept-final-33 -m limit --limit 1/second -j LOG +-A logaccept-final-33 -j ACCEPT +-A logaccept-final-34 -m limit --limit 1/second -j LOG +-A logaccept-final-34 -j ACCEPT +-A logaccept-final-35 -m limit --limit 1/second -j LOG +-A logaccept-final-35 -j ACCEPT +-A logaccept-final-36 -m limit --limit 1/second -j LOG +-A logaccept-final-36 -j ACCEPT +-A logaccept-final-37 -m limit --limit 1/second -j LOG +-A logaccept-final-37 -j ACCEPT +-A logaccept-final-38 -m limit --limit 1/second -j LOG +-A logaccept-final-38 -j ACCEPT +-A logaccept-final-39 -m limit --limit 1/second -j LOG +-A logaccept-final-39 -j ACCEPT +-A logaccept-final-4 -m limit --limit 1/second -j LOG +-A logaccept-final-4 -j ACCEPT +-A logaccept-final-40 -m limit --limit 1/second -j LOG +-A logaccept-final-40 -j ACCEPT +-A logaccept-final-41 -m limit --limit 1/second -j LOG +-A logaccept-final-41 -j ACCEPT +-A logaccept-final-42 -m limit --limit 1/second -j LOG +-A logaccept-final-42 -j ACCEPT +-A logaccept-final-43 -m limit --limit 1/second -j LOG +-A logaccept-final-43 -j ACCEPT +-A logaccept-final-44 -m limit --limit 1/second -j LOG +-A logaccept-final-44 -j ACCEPT +-A logaccept-final-45 -m limit --limit 1/second -j LOG +-A logaccept-final-45 -j ACCEPT +-A logaccept-final-46 -m limit --limit 1/second -j LOG +-A logaccept-final-46 -j ACCEPT +-A logaccept-final-47 -m limit --limit 1/second -j LOG +-A logaccept-final-47 -j ACCEPT +-A logaccept-final-48 -m limit --limit 1/second -j LOG +-A logaccept-final-48 -j ACCEPT +-A logaccept-final-49 -m limit --limit 1/second -j LOG +-A logaccept-final-49 -j ACCEPT +-A logaccept-final-5 -m limit --limit 1/second -j LOG +-A logaccept-final-5 -j ACCEPT +-A logaccept-final-50 -m limit --limit 1/second -j LOG +-A logaccept-final-50 -j ACCEPT +-A logaccept-final-51 -m limit --limit 1/second -j LOG +-A logaccept-final-51 -j ACCEPT +-A logaccept-final-52 -m limit --limit 1/second -j LOG +-A logaccept-final-52 -j ACCEPT +-A logaccept-final-53 -m limit --limit 1/second -j LOG +-A logaccept-final-53 -j ACCEPT +-A logaccept-final-54 -m limit --limit 1/second -j LOG +-A logaccept-final-54 -j ACCEPT +-A logaccept-final-55 -m limit --limit 1/second -j LOG +-A logaccept-final-55 -j ACCEPT +-A logaccept-final-56 -m limit --limit 1/second -j LOG +-A logaccept-final-56 -j ACCEPT +-A logaccept-final-57 -m limit --limit 1/second -j LOG +-A logaccept-final-57 -j ACCEPT +-A logaccept-final-58 -m limit --limit 1/second -j LOG +-A logaccept-final-58 -j ACCEPT +-A logaccept-final-59 -m limit --limit 1/second -j LOG +-A logaccept-final-59 -j ACCEPT +-A logaccept-final-6 -m limit --limit 1/second -j LOG +-A logaccept-final-6 -j ACCEPT +-A logaccept-final-60 -m limit --limit 1/second -j LOG +-A logaccept-final-60 -j ACCEPT +-A logaccept-final-61 -m limit --limit 1/second -j LOG +-A logaccept-final-61 -j ACCEPT +-A logaccept-final-7 -m limit --limit 1/second -j LOG +-A logaccept-final-7 -j ACCEPT +-A logaccept-final-8 -m limit --limit 1/second -j LOG +-A logaccept-final-8 -j ACCEPT +-A logaccept-final-9 -m limit --limit 1/second -j LOG +-A logaccept-final-9 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logdrop-10 -m limit --limit 1/second -j LOG +-A logdrop-10 -j DROP +-A logdrop-100 -m limit --limit 1/second -j LOG +-A logdrop-100 -j DROP +-A logdrop-101 -m limit --limit 1/second -j LOG +-A logdrop-101 -j DROP +-A logdrop-102 -m limit --limit 1/second -j LOG +-A logdrop-102 -j DROP +-A logdrop-103 -m limit --limit 1/second -j LOG +-A logdrop-103 -j DROP +-A logdrop-104 -m limit --limit 1/second -j LOG +-A logdrop-104 -j DROP +-A logdrop-105 -m limit --limit 1/second -j LOG +-A logdrop-105 -j DROP +-A logdrop-106 -m limit --limit 1/second -j LOG +-A logdrop-106 -j DROP +-A logdrop-107 -m limit --limit 1/second -j LOG +-A logdrop-107 -j DROP +-A logdrop-108 -m limit --limit 1/second -j LOG +-A logdrop-108 -j DROP +-A logdrop-109 -m limit --limit 1/second -j LOG +-A logdrop-109 -j DROP +-A logdrop-11 -m limit --limit 1/second -j LOG +-A logdrop-11 -j DROP +-A logdrop-110 -m limit --limit 1/second -j LOG +-A logdrop-110 -j DROP +-A logdrop-111 -m limit --limit 1/second -j LOG +-A logdrop-111 -j DROP +-A logdrop-112 -m limit --limit 1/second -j LOG +-A logdrop-112 -j DROP +-A logdrop-113 -m limit --limit 1/second -j LOG +-A logdrop-113 -j DROP +-A logdrop-114 -m limit --limit 1/second -j LOG +-A logdrop-114 -j DROP +-A logdrop-115 -m limit --limit 1/second -j LOG +-A logdrop-115 -j DROP +-A logdrop-116 -m limit --limit 1/second -j LOG +-A logdrop-116 -j DROP +-A logdrop-117 -m limit --limit 1/second -j LOG +-A logdrop-117 -j DROP +-A logdrop-118 -m limit --limit 1/second -j LOG +-A logdrop-118 -j DROP +-A logdrop-119 -m limit --limit 1/second -j LOG +-A logdrop-119 -j DROP +-A logdrop-12 -m limit --limit 1/second -j LOG +-A logdrop-12 -j DROP +-A logdrop-120 -m limit --limit 1/second -j LOG +-A logdrop-120 -j DROP +-A logdrop-121 -m limit --limit 1/second -j LOG +-A logdrop-121 -j DROP +-A logdrop-122 -m limit --limit 1/second -j LOG +-A logdrop-122 -j DROP +-A logdrop-123 -m limit --limit 1/second -j LOG +-A logdrop-123 -j DROP +-A logdrop-124 -m limit --limit 1/second -j LOG +-A logdrop-124 -j DROP +-A logdrop-125 -m limit --limit 1/second -j LOG +-A logdrop-125 -j DROP +-A logdrop-126 -m limit --limit 1/second -j LOG +-A logdrop-126 -j DROP +-A logdrop-127 -m limit --limit 1/second -j LOG +-A logdrop-127 -j DROP +-A logdrop-128 -m limit --limit 1/second -j LOG +-A logdrop-128 -j DROP +-A logdrop-129 -m limit --limit 1/second -j LOG +-A logdrop-129 -j DROP +-A logdrop-13 -m limit --limit 1/second -j LOG +-A logdrop-13 -j DROP +-A logdrop-130 -m limit --limit 1/second -j LOG +-A logdrop-130 -j DROP +-A logdrop-131 -m limit --limit 1/second -j LOG +-A logdrop-131 -j DROP +-A logdrop-132 -m limit --limit 1/second -j LOG +-A logdrop-132 -j DROP +-A logdrop-133 -m limit --limit 1/second -j LOG +-A logdrop-133 -j DROP +-A logdrop-134 -m limit --limit 1/second -j LOG +-A logdrop-134 -j DROP +-A logdrop-135 -m limit --limit 1/second -j LOG +-A logdrop-135 -j DROP +-A logdrop-136 -m limit --limit 1/second -j LOG +-A logdrop-136 -j DROP +-A logdrop-137 -m limit --limit 1/second -j LOG +-A logdrop-137 -j DROP +-A logdrop-138 -m limit --limit 1/second -j LOG +-A logdrop-138 -j DROP +-A logdrop-139 -m limit --limit 1/second -j LOG +-A logdrop-139 -j DROP +-A logdrop-14 -m limit --limit 1/second -j LOG +-A logdrop-14 -j DROP +-A logdrop-140 -m limit --limit 1/second -j LOG +-A logdrop-140 -j DROP +-A logdrop-141 -m limit --limit 1/second -j LOG +-A logdrop-141 -j DROP +-A logdrop-142 -m limit --limit 1/second -j LOG +-A logdrop-142 -j DROP +-A logdrop-143 -m limit --limit 1/second -j LOG +-A logdrop-143 -j DROP +-A logdrop-144 -m limit --limit 1/second -j LOG +-A logdrop-144 -j DROP +-A logdrop-145 -m limit --limit 1/second -j LOG +-A logdrop-145 -j DROP +-A logdrop-146 -m limit --limit 1/second -j LOG +-A logdrop-146 -j DROP +-A logdrop-147 -m limit --limit 1/second -j LOG +-A logdrop-147 -j DROP +-A logdrop-148 -m limit --limit 1/second -j LOG +-A logdrop-148 -j DROP +-A logdrop-149 -m limit --limit 1/second -j LOG +-A logdrop-149 -j DROP +-A logdrop-15 -m limit --limit 1/second -j LOG +-A logdrop-15 -j DROP +-A logdrop-150 -m limit --limit 1/second -j LOG +-A logdrop-150 -j DROP +-A logdrop-151 -m limit --limit 1/second -j LOG +-A logdrop-151 -j DROP +-A logdrop-152 -m limit --limit 1/second -j LOG +-A logdrop-152 -j DROP +-A logdrop-153 -m limit --limit 1/second -j LOG +-A logdrop-153 -j DROP +-A logdrop-154 -m limit --limit 1/second -j LOG +-A logdrop-154 -j DROP +-A logdrop-155 -m limit --limit 1/second -j LOG +-A logdrop-155 -j DROP +-A logdrop-156 -m limit --limit 1/second -j LOG +-A logdrop-156 -j DROP +-A logdrop-157 -m limit --limit 1/second -j LOG +-A logdrop-157 -j DROP +-A logdrop-158 -m limit --limit 1/second -j LOG +-A logdrop-158 -j DROP +-A logdrop-159 -m limit --limit 1/second -j LOG +-A logdrop-159 -j DROP +-A logdrop-16 -m limit --limit 1/second -j LOG +-A logdrop-16 -j DROP +-A logdrop-160 -m limit --limit 1/second -j LOG +-A logdrop-160 -j DROP +-A logdrop-161 -m limit --limit 1/second -j LOG +-A logdrop-161 -j DROP +-A logdrop-162 -m limit --limit 1/second -j LOG +-A logdrop-162 -j DROP +-A logdrop-163 -m limit --limit 1/second -j LOG +-A logdrop-163 -j DROP +-A logdrop-164 -m limit --limit 1/second -j LOG +-A logdrop-164 -j DROP +-A logdrop-165 -m limit --limit 1/second -j LOG +-A logdrop-165 -j DROP +-A logdrop-166 -m limit --limit 1/second -j LOG +-A logdrop-166 -j DROP +-A logdrop-167 -m limit --limit 1/second -j LOG +-A logdrop-167 -j DROP +-A logdrop-168 -m limit --limit 1/second -j LOG +-A logdrop-168 -j DROP +-A logdrop-169 -m limit --limit 1/second -j LOG +-A logdrop-169 -j DROP +-A logdrop-17 -m limit --limit 1/second -j LOG +-A logdrop-17 -j DROP +-A logdrop-170 -m limit --limit 1/second -j LOG +-A logdrop-170 -j DROP +-A logdrop-171 -m limit --limit 1/second -j LOG +-A logdrop-171 -j DROP +-A logdrop-172 -m limit --limit 1/second -j LOG +-A logdrop-172 -j DROP +-A logdrop-173 -m limit --limit 1/second -j LOG +-A logdrop-173 -j DROP +-A logdrop-174 -m limit --limit 1/second -j LOG +-A logdrop-174 -j DROP +-A logdrop-175 -m limit --limit 1/second -j LOG +-A logdrop-175 -j DROP +-A logdrop-176 -m limit --limit 1/second -j LOG +-A logdrop-176 -j DROP +-A logdrop-177 -m limit --limit 1/second -j LOG +-A logdrop-177 -j DROP +-A logdrop-178 -m limit --limit 1/second -j LOG +-A logdrop-178 -j DROP +-A logdrop-179 -m limit --limit 1/second -j LOG +-A logdrop-179 -j DROP +-A logdrop-18 -m limit --limit 1/second -j LOG +-A logdrop-18 -j DROP +-A logdrop-180 -m limit --limit 1/second -j LOG +-A logdrop-180 -j DROP +-A logdrop-181 -m limit --limit 1/second -j LOG +-A logdrop-181 -j DROP +-A logdrop-182 -m limit --limit 1/second -j LOG +-A logdrop-182 -j DROP +-A logdrop-183 -m limit --limit 1/second -j LOG +-A logdrop-183 -j DROP +-A logdrop-184 -m limit --limit 1/second -j LOG +-A logdrop-184 -j DROP +-A logdrop-185 -m limit --limit 1/second -j LOG +-A logdrop-185 -j DROP +-A logdrop-186 -m limit --limit 1/second -j LOG +-A logdrop-186 -j DROP +-A logdrop-187 -m limit --limit 1/second -j LOG +-A logdrop-187 -j DROP +-A logdrop-188 -m limit --limit 1/second -j LOG +-A logdrop-188 -j DROP +-A logdrop-189 -m limit --limit 1/second -j LOG +-A logdrop-189 -j DROP +-A logdrop-19 -m limit --limit 1/second -j LOG +-A logdrop-19 -j DROP +-A logdrop-190 -m limit --limit 1/second -j LOG +-A logdrop-190 -j DROP +-A logdrop-191 -m limit --limit 1/second -j LOG +-A logdrop-191 -j DROP +-A logdrop-192 -m limit --limit 1/second -j LOG +-A logdrop-192 -j DROP +-A logdrop-193 -m limit --limit 1/second -j LOG +-A logdrop-193 -j DROP +-A logdrop-194 -m limit --limit 1/second -j LOG +-A logdrop-194 -j DROP +-A logdrop-195 -m limit --limit 1/second -j LOG +-A logdrop-195 -j DROP +-A logdrop-196 -m limit --limit 1/second -j LOG +-A logdrop-196 -j DROP +-A logdrop-197 -m limit --limit 1/second -j LOG +-A logdrop-197 -j DROP +-A logdrop-198 -m limit --limit 1/second -j LOG +-A logdrop-198 -j DROP +-A logdrop-199 -m limit --limit 1/second -j LOG +-A logdrop-199 -j DROP +-A logdrop-2 -m limit --limit 1/second -j LOG +-A logdrop-2 -j DROP +-A logdrop-20 -m limit --limit 1/second -j LOG +-A logdrop-20 -j DROP +-A logdrop-200 -m limit --limit 1/second -j LOG +-A logdrop-200 -j DROP +-A logdrop-201 -m limit --limit 1/second -j LOG +-A logdrop-201 -j DROP +-A logdrop-202 -m limit --limit 1/second -j LOG +-A logdrop-202 -j DROP +-A logdrop-203 -m limit --limit 1/second -j LOG +-A logdrop-203 -j DROP +-A logdrop-204 -m limit --limit 1/second -j LOG +-A logdrop-204 -j DROP +-A logdrop-205 -m limit --limit 1/second -j LOG +-A logdrop-205 -j DROP +-A logdrop-206 -m limit --limit 1/second -j LOG +-A logdrop-206 -j DROP +-A logdrop-207 -m limit --limit 1/second -j LOG +-A logdrop-207 -j DROP +-A logdrop-208 -m limit --limit 1/second -j LOG +-A logdrop-208 -j DROP +-A logdrop-209 -m limit --limit 1/second -j LOG +-A logdrop-209 -j DROP +-A logdrop-21 -m limit --limit 1/second -j LOG +-A logdrop-21 -j DROP +-A logdrop-210 -m limit --limit 1/second -j LOG +-A logdrop-210 -j DROP +-A logdrop-211 -m limit --limit 1/second -j LOG +-A logdrop-211 -j DROP +-A logdrop-212 -m limit --limit 1/second -j LOG +-A logdrop-212 -j DROP +-A logdrop-213 -m limit --limit 1/second -j LOG +-A logdrop-213 -j DROP +-A logdrop-214 -m limit --limit 1/second -j LOG +-A logdrop-214 -j DROP +-A logdrop-215 -m limit --limit 1/second -j LOG +-A logdrop-215 -j DROP +-A logdrop-216 -m limit --limit 1/second -j LOG +-A logdrop-216 -j DROP +-A logdrop-217 -m limit --limit 1/second -j LOG +-A logdrop-217 -j DROP +-A logdrop-218 -m limit --limit 1/second -j LOG +-A logdrop-218 -j DROP +-A logdrop-219 -m limit --limit 1/second -j LOG +-A logdrop-219 -j DROP +-A logdrop-22 -m limit --limit 1/second -j LOG +-A logdrop-22 -j DROP +-A logdrop-220 -m limit --limit 1/second -j LOG +-A logdrop-220 -j DROP +-A logdrop-221 -m limit --limit 1/second -j LOG +-A logdrop-221 -j DROP +-A logdrop-222 -m limit --limit 1/second -j LOG +-A logdrop-222 -j DROP +-A logdrop-223 -m limit --limit 1/second -j LOG +-A logdrop-223 -j DROP +-A logdrop-224 -m limit --limit 1/second -j LOG +-A logdrop-224 -j DROP +-A logdrop-225 -m limit --limit 1/second -j LOG +-A logdrop-225 -j DROP +-A logdrop-226 -m limit --limit 1/second -j LOG +-A logdrop-226 -j DROP +-A logdrop-227 -m limit --limit 1/second -j LOG +-A logdrop-227 -j DROP +-A logdrop-228 -m limit --limit 1/second -j LOG +-A logdrop-228 -j DROP +-A logdrop-229 -m limit --limit 1/second -j LOG +-A logdrop-229 -j DROP +-A logdrop-23 -m limit --limit 1/second -j LOG +-A logdrop-23 -j DROP +-A logdrop-230 -m limit --limit 1/second -j LOG +-A logdrop-230 -j DROP +-A logdrop-231 -m limit --limit 1/second -j LOG +-A logdrop-231 -j DROP +-A logdrop-232 -m limit --limit 1/second -j LOG +-A logdrop-232 -j DROP +-A logdrop-233 -m limit --limit 1/second -j LOG +-A logdrop-233 -j DROP +-A logdrop-234 -m limit --limit 1/second -j LOG +-A logdrop-234 -j DROP +-A logdrop-235 -m limit --limit 1/second -j LOG +-A logdrop-235 -j DROP +-A logdrop-236 -m limit --limit 1/second -j LOG +-A logdrop-236 -j DROP +-A logdrop-237 -m limit --limit 1/second -j LOG +-A logdrop-237 -j DROP +-A logdrop-238 -m limit --limit 1/second -j LOG +-A logdrop-238 -j DROP +-A logdrop-239 -m limit --limit 1/second -j LOG +-A logdrop-239 -j DROP +-A logdrop-24 -m limit --limit 1/second -j LOG +-A logdrop-24 -j DROP +-A logdrop-240 -m limit --limit 1/second -j LOG +-A logdrop-240 -j DROP +-A logdrop-241 -m limit --limit 1/second -j LOG +-A logdrop-241 -j DROP +-A logdrop-242 -m limit --limit 1/second -j LOG +-A logdrop-242 -j DROP +-A logdrop-243 -m limit --limit 1/second -j LOG +-A logdrop-243 -j DROP +-A logdrop-244 -m limit --limit 1/second -j LOG +-A logdrop-244 -j DROP +-A logdrop-245 -m limit --limit 1/second -j LOG +-A logdrop-245 -j DROP +-A logdrop-246 -m limit --limit 1/second -j LOG +-A logdrop-246 -j DROP +-A logdrop-247 -m limit --limit 1/second -j LOG +-A logdrop-247 -j DROP +-A logdrop-248 -m limit --limit 1/second -j LOG +-A logdrop-248 -j DROP +-A logdrop-249 -m limit --limit 1/second -j LOG +-A logdrop-249 -j DROP +-A logdrop-25 -m limit --limit 1/second -j LOG +-A logdrop-25 -j DROP +-A logdrop-250 -m limit --limit 1/second -j LOG +-A logdrop-250 -j DROP +-A logdrop-251 -m limit --limit 1/second -j LOG +-A logdrop-251 -j DROP +-A logdrop-252 -m limit --limit 1/second -j LOG +-A logdrop-252 -j DROP +-A logdrop-253 -m limit --limit 1/second -j LOG +-A logdrop-253 -j DROP +-A logdrop-254 -m limit --limit 1/second -j LOG +-A logdrop-254 -j DROP +-A logdrop-255 -m limit --limit 1/second -j LOG +-A logdrop-255 -j DROP +-A logdrop-256 -m limit --limit 1/second -j LOG +-A logdrop-256 -j DROP +-A logdrop-257 -m limit --limit 1/second -j LOG +-A logdrop-257 -j DROP +-A logdrop-258 -m limit --limit 1/second -j LOG +-A logdrop-258 -j DROP +-A logdrop-259 -m limit --limit 1/second -j LOG +-A logdrop-259 -j DROP +-A logdrop-26 -m limit --limit 1/second -j LOG +-A logdrop-26 -j DROP +-A logdrop-260 -m limit --limit 1/second -j LOG +-A logdrop-260 -j DROP +-A logdrop-261 -m limit --limit 1/second -j LOG +-A logdrop-261 -j DROP +-A logdrop-262 -m limit --limit 1/second -j LOG +-A logdrop-262 -j DROP +-A logdrop-263 -m limit --limit 1/second -j LOG +-A logdrop-263 -j DROP +-A logdrop-264 -m limit --limit 1/second -j LOG +-A logdrop-264 -j DROP +-A logdrop-265 -m limit --limit 1/second -j LOG +-A logdrop-265 -j DROP +-A logdrop-266 -m limit --limit 1/second -j LOG +-A logdrop-266 -j DROP +-A logdrop-267 -m limit --limit 1/second -j LOG +-A logdrop-267 -j DROP +-A logdrop-268 -m limit --limit 1/second -j LOG +-A logdrop-268 -j DROP +-A logdrop-269 -m limit --limit 1/second -j LOG +-A logdrop-269 -j DROP +-A logdrop-27 -m limit --limit 1/second -j LOG +-A logdrop-27 -j DROP +-A logdrop-270 -m limit --limit 1/second -j LOG +-A logdrop-270 -j DROP +-A logdrop-271 -m limit --limit 1/second -j LOG +-A logdrop-271 -j DROP +-A logdrop-272 -m limit --limit 1/second -j LOG +-A logdrop-272 -j DROP +-A logdrop-273 -m limit --limit 1/second -j LOG +-A logdrop-273 -j DROP +-A logdrop-274 -m limit --limit 1/second -j LOG +-A logdrop-274 -j DROP +-A logdrop-275 -m limit --limit 1/second -j LOG +-A logdrop-275 -j DROP +-A logdrop-276 -m limit --limit 1/second -j LOG +-A logdrop-276 -j DROP +-A logdrop-277 -m limit --limit 1/second -j LOG +-A logdrop-277 -j DROP +-A logdrop-278 -m limit --limit 1/second -j LOG +-A logdrop-278 -j DROP +-A logdrop-279 -m limit --limit 1/second -j LOG +-A logdrop-279 -j DROP +-A logdrop-28 -m limit --limit 1/second -j LOG +-A logdrop-28 -j DROP +-A logdrop-280 -m limit --limit 1/second -j LOG +-A logdrop-280 -j DROP +-A logdrop-281 -m limit --limit 1/second -j LOG +-A logdrop-281 -j DROP +-A logdrop-282 -m limit --limit 1/second -j LOG +-A logdrop-282 -j DROP +-A logdrop-283 -m limit --limit 1/second -j LOG +-A logdrop-283 -j DROP +-A logdrop-284 -m limit --limit 1/second -j LOG +-A logdrop-284 -j DROP +-A logdrop-285 -m limit --limit 1/second -j LOG +-A logdrop-285 -j DROP +-A logdrop-286 -m limit --limit 1/second -j LOG +-A logdrop-286 -j DROP +-A logdrop-287 -m limit --limit 1/second -j LOG +-A logdrop-287 -j DROP +-A logdrop-288 -m limit --limit 1/second -j LOG +-A logdrop-288 -j DROP +-A logdrop-289 -m limit --limit 1/second -j LOG +-A logdrop-289 -j DROP +-A logdrop-29 -m limit --limit 1/second -j LOG +-A logdrop-29 -j DROP +-A logdrop-290 -m limit --limit 1/second -j LOG +-A logdrop-290 -j DROP +-A logdrop-291 -m limit --limit 1/second -j LOG +-A logdrop-291 -j DROP +-A logdrop-292 -m limit --limit 1/second -j LOG +-A logdrop-292 -j DROP +-A logdrop-293 -m limit --limit 1/second -j LOG +-A logdrop-293 -j DROP +-A logdrop-294 -m limit --limit 1/second -j LOG +-A logdrop-294 -j DROP +-A logdrop-295 -m limit --limit 1/second -j LOG +-A logdrop-295 -j DROP +-A logdrop-296 -m limit --limit 1/second -j LOG +-A logdrop-296 -j DROP +-A logdrop-297 -m limit --limit 1/second -j LOG +-A logdrop-297 -j DROP +-A logdrop-298 -m limit --limit 1/second -j LOG +-A logdrop-298 -j DROP +-A logdrop-299 -m limit --limit 1/second -j LOG +-A logdrop-299 -j DROP +-A logdrop-3 -m limit --limit 1/second -j LOG +-A logdrop-3 -j DROP +-A logdrop-30 -m limit --limit 1/second -j LOG +-A logdrop-30 -j DROP +-A logdrop-300 -m limit --limit 1/second -j LOG +-A logdrop-300 -j DROP +-A logdrop-301 -m limit --limit 1/second -j LOG +-A logdrop-301 -j DROP +-A logdrop-302 -m limit --limit 1/second -j LOG +-A logdrop-302 -j DROP +-A logdrop-303 -m limit --limit 1/second -j LOG +-A logdrop-303 -j DROP +-A logdrop-304 -m limit --limit 1/second -j LOG +-A logdrop-304 -j DROP +-A logdrop-305 -m limit --limit 1/second -j LOG +-A logdrop-305 -j DROP +-A logdrop-306 -m limit --limit 1/second -j LOG +-A logdrop-306 -j DROP +-A logdrop-307 -m limit --limit 1/second -j LOG +-A logdrop-307 -j DROP +-A logdrop-308 -m limit --limit 1/second -j LOG +-A logdrop-308 -j DROP +-A logdrop-309 -m limit --limit 1/second -j LOG +-A logdrop-309 -j DROP +-A logdrop-31 -m limit --limit 1/second -j LOG +-A logdrop-31 -j DROP +-A logdrop-310 -m limit --limit 1/second -j LOG +-A logdrop-310 -j DROP +-A logdrop-311 -m limit --limit 1/second -j LOG +-A logdrop-311 -j DROP +-A logdrop-312 -m limit --limit 1/second -j LOG +-A logdrop-312 -j DROP +-A logdrop-313 -m limit --limit 1/second -j LOG +-A logdrop-313 -j DROP +-A logdrop-314 -m limit --limit 1/second -j LOG +-A logdrop-314 -j DROP +-A logdrop-315 -m limit --limit 1/second -j LOG +-A logdrop-315 -j DROP +-A logdrop-316 -m limit --limit 1/second -j LOG +-A logdrop-316 -j DROP +-A logdrop-317 -m limit --limit 1/second -j LOG +-A logdrop-317 -j DROP +-A logdrop-318 -m limit --limit 1/second -j LOG +-A logdrop-318 -j DROP +-A logdrop-319 -m limit --limit 1/second -j LOG +-A logdrop-319 -j DROP +-A logdrop-32 -m limit --limit 1/second -j LOG +-A logdrop-32 -j DROP +-A logdrop-320 -m limit --limit 1/second -j LOG +-A logdrop-320 -j DROP +-A logdrop-321 -m limit --limit 1/second -j LOG +-A logdrop-321 -j DROP +-A logdrop-322 -m limit --limit 1/second -j LOG +-A logdrop-322 -j DROP +-A logdrop-323 -m limit --limit 1/second -j LOG +-A logdrop-323 -j DROP +-A logdrop-324 -m limit --limit 1/second -j LOG +-A logdrop-324 -j DROP +-A logdrop-325 -m limit --limit 1/second -j LOG +-A logdrop-325 -j DROP +-A logdrop-326 -m limit --limit 1/second -j LOG +-A logdrop-326 -j DROP +-A logdrop-327 -m limit --limit 1/second -j LOG +-A logdrop-327 -j DROP +-A logdrop-328 -m limit --limit 1/second -j LOG +-A logdrop-328 -j DROP +-A logdrop-329 -m limit --limit 1/second -j LOG +-A logdrop-329 -j DROP +-A logdrop-33 -m limit --limit 1/second -j LOG +-A logdrop-33 -j DROP +-A logdrop-330 -m limit --limit 1/second -j LOG +-A logdrop-330 -j DROP +-A logdrop-331 -m limit --limit 1/second -j LOG +-A logdrop-331 -j DROP +-A logdrop-332 -m limit --limit 1/second -j LOG +-A logdrop-332 -j DROP +-A logdrop-333 -m limit --limit 1/second -j LOG +-A logdrop-333 -j DROP +-A logdrop-334 -m limit --limit 1/second -j LOG +-A logdrop-334 -j DROP +-A logdrop-335 -m limit --limit 1/second -j LOG +-A logdrop-335 -j DROP +-A logdrop-336 -m limit --limit 1/second -j LOG +-A logdrop-336 -j DROP +-A logdrop-337 -m limit --limit 1/second -j LOG +-A logdrop-337 -j DROP +-A logdrop-338 -m limit --limit 1/second -j LOG +-A logdrop-338 -j DROP +-A logdrop-339 -m limit --limit 1/second -j LOG +-A logdrop-339 -j DROP +-A logdrop-34 -m limit --limit 1/second -j LOG +-A logdrop-34 -j DROP +-A logdrop-340 -m limit --limit 1/second -j LOG +-A logdrop-340 -j DROP +-A logdrop-341 -m limit --limit 1/second -j LOG +-A logdrop-341 -j DROP +-A logdrop-342 -m limit --limit 1/second -j LOG +-A logdrop-342 -j DROP +-A logdrop-343 -m limit --limit 1/second -j LOG +-A logdrop-343 -j DROP +-A logdrop-344 -m limit --limit 1/second -j LOG +-A logdrop-344 -j DROP +-A logdrop-345 -m limit --limit 1/second -j LOG +-A logdrop-345 -j DROP +-A logdrop-346 -m limit --limit 1/second -j LOG +-A logdrop-346 -j DROP +-A logdrop-347 -m limit --limit 1/second -j LOG +-A logdrop-347 -j DROP +-A logdrop-348 -m limit --limit 1/second -j LOG +-A logdrop-348 -j DROP +-A logdrop-349 -m limit --limit 1/second -j LOG +-A logdrop-349 -j DROP +-A logdrop-35 -m limit --limit 1/second -j LOG +-A logdrop-35 -j DROP +-A logdrop-350 -m limit --limit 1/second -j LOG +-A logdrop-350 -j DROP +-A logdrop-351 -m limit --limit 1/second -j LOG +-A logdrop-351 -j DROP +-A logdrop-352 -m limit --limit 1/second -j LOG +-A logdrop-352 -j DROP +-A logdrop-353 -m limit --limit 1/second -j LOG +-A logdrop-353 -j DROP +-A logdrop-354 -m limit --limit 1/second -j LOG +-A logdrop-354 -j DROP +-A logdrop-355 -m limit --limit 1/second -j LOG +-A logdrop-355 -j DROP +-A logdrop-356 -m limit --limit 1/second -j LOG +-A logdrop-356 -j DROP +-A logdrop-357 -m limit --limit 1/second -j LOG +-A logdrop-357 -j DROP +-A logdrop-358 -m limit --limit 1/second -j LOG +-A logdrop-358 -j DROP +-A logdrop-359 -m limit --limit 1/second -j LOG +-A logdrop-359 -j DROP +-A logdrop-36 -m limit --limit 1/second -j LOG +-A logdrop-36 -j DROP +-A logdrop-360 -m limit --limit 1/second -j LOG +-A logdrop-360 -j DROP +-A logdrop-361 -m limit --limit 1/second -j LOG +-A logdrop-361 -j DROP +-A logdrop-362 -m limit --limit 1/second -j LOG +-A logdrop-362 -j DROP +-A logdrop-363 -m limit --limit 1/second -j LOG +-A logdrop-363 -j DROP +-A logdrop-364 -m limit --limit 1/second -j LOG +-A logdrop-364 -j DROP +-A logdrop-365 -m limit --limit 1/second -j LOG +-A logdrop-365 -j DROP +-A logdrop-366 -m limit --limit 1/second -j LOG +-A logdrop-366 -j DROP +-A logdrop-367 -m limit --limit 1/second -j LOG +-A logdrop-367 -j DROP +-A logdrop-368 -m limit --limit 1/second -j LOG +-A logdrop-368 -j DROP +-A logdrop-369 -m limit --limit 1/second -j LOG +-A logdrop-369 -j DROP +-A logdrop-37 -m limit --limit 1/second -j LOG +-A logdrop-37 -j DROP +-A logdrop-370 -m limit --limit 1/second -j LOG +-A logdrop-370 -j DROP +-A logdrop-371 -m limit --limit 1/second -j LOG +-A logdrop-371 -j DROP +-A logdrop-372 -m limit --limit 1/second -j LOG +-A logdrop-372 -j DROP +-A logdrop-373 -m limit --limit 1/second -j LOG +-A logdrop-373 -j DROP +-A logdrop-374 -m limit --limit 1/second -j LOG +-A logdrop-374 -j DROP +-A logdrop-375 -m limit --limit 1/second -j LOG +-A logdrop-375 -j DROP +-A logdrop-376 -m limit --limit 1/second -j LOG +-A logdrop-376 -j DROP +-A logdrop-377 -m limit --limit 1/second -j LOG +-A logdrop-377 -j DROP +-A logdrop-378 -m limit --limit 1/second -j LOG +-A logdrop-378 -j DROP +-A logdrop-379 -m limit --limit 1/second -j LOG +-A logdrop-379 -j DROP +-A logdrop-38 -m limit --limit 1/second -j LOG +-A logdrop-38 -j DROP +-A logdrop-380 -m limit --limit 1/second -j LOG +-A logdrop-380 -j DROP +-A logdrop-381 -m limit --limit 1/second -j LOG +-A logdrop-381 -j DROP +-A logdrop-382 -m limit --limit 1/second -j LOG +-A logdrop-382 -j DROP +-A logdrop-383 -m limit --limit 1/second -j LOG +-A logdrop-383 -j DROP +-A logdrop-384 -m limit --limit 1/second -j LOG +-A logdrop-384 -j DROP +-A logdrop-385 -m limit --limit 1/second -j LOG +-A logdrop-385 -j DROP +-A logdrop-386 -m limit --limit 1/second -j LOG +-A logdrop-386 -j DROP +-A logdrop-387 -m limit --limit 1/second -j LOG +-A logdrop-387 -j DROP +-A logdrop-388 -m limit --limit 1/second -j LOG +-A logdrop-388 -j DROP +-A logdrop-389 -m limit --limit 1/second -j LOG +-A logdrop-389 -j DROP +-A logdrop-39 -m limit --limit 1/second -j LOG +-A logdrop-39 -j DROP +-A logdrop-390 -m limit --limit 1/second -j LOG +-A logdrop-390 -j DROP +-A logdrop-391 -m limit --limit 1/second -j LOG +-A logdrop-391 -j DROP +-A logdrop-392 -m limit --limit 1/second -j LOG +-A logdrop-392 -j DROP +-A logdrop-393 -m limit --limit 1/second -j LOG +-A logdrop-393 -j DROP +-A logdrop-394 -m limit --limit 1/second -j LOG +-A logdrop-394 -j DROP +-A logdrop-395 -m limit --limit 1/second -j LOG +-A logdrop-395 -j DROP +-A logdrop-396 -m limit --limit 1/second -j LOG +-A logdrop-396 -j DROP +-A logdrop-397 -m limit --limit 1/second -j LOG +-A logdrop-397 -j DROP +-A logdrop-398 -m limit --limit 1/second -j LOG +-A logdrop-398 -j DROP +-A logdrop-399 -m limit --limit 1/second -j LOG +-A logdrop-399 -j DROP +-A logdrop-4 -m limit --limit 1/second -j LOG +-A logdrop-4 -j DROP +-A logdrop-40 -m limit --limit 1/second -j LOG +-A logdrop-40 -j DROP +-A logdrop-400 -m limit --limit 1/second -j LOG +-A logdrop-400 -j DROP +-A logdrop-401 -m limit --limit 1/second -j LOG +-A logdrop-401 -j DROP +-A logdrop-402 -m limit --limit 1/second -j LOG +-A logdrop-402 -j DROP +-A logdrop-403 -m limit --limit 1/second -j LOG +-A logdrop-403 -j DROP +-A logdrop-404 -m limit --limit 1/second -j LOG +-A logdrop-404 -j DROP +-A logdrop-405 -m limit --limit 1/second -j LOG +-A logdrop-405 -j DROP +-A logdrop-406 -m limit --limit 1/second -j LOG +-A logdrop-406 -j DROP +-A logdrop-407 -m limit --limit 1/second -j LOG +-A logdrop-407 -j DROP +-A logdrop-408 -m limit --limit 1/second -j LOG +-A logdrop-408 -j DROP +-A logdrop-409 -m limit --limit 1/second -j LOG +-A logdrop-409 -j DROP +-A logdrop-41 -m limit --limit 1/second -j LOG +-A logdrop-41 -j DROP +-A logdrop-410 -m limit --limit 1/second -j LOG +-A logdrop-410 -j DROP +-A logdrop-411 -m limit --limit 1/second -j LOG +-A logdrop-411 -j DROP +-A logdrop-412 -m limit --limit 1/second -j LOG +-A logdrop-412 -j DROP +-A logdrop-413 -m limit --limit 1/second -j LOG +-A logdrop-413 -j DROP +-A logdrop-414 -m limit --limit 1/second -j LOG +-A logdrop-414 -j DROP +-A logdrop-415 -m limit --limit 1/second -j LOG +-A logdrop-415 -j DROP +-A logdrop-416 -m limit --limit 1/second -j LOG +-A logdrop-416 -j DROP +-A logdrop-417 -m limit --limit 1/second -j LOG +-A logdrop-417 -j DROP +-A logdrop-418 -m limit --limit 1/second -j LOG +-A logdrop-418 -j DROP +-A logdrop-419 -m limit --limit 1/second -j LOG +-A logdrop-419 -j DROP +-A logdrop-42 -m limit --limit 1/second -j LOG +-A logdrop-42 -j DROP +-A logdrop-420 -m limit --limit 1/second -j LOG +-A logdrop-420 -j DROP +-A logdrop-421 -m limit --limit 1/second -j LOG +-A logdrop-421 -j DROP +-A logdrop-422 -m limit --limit 1/second -j LOG +-A logdrop-422 -j DROP +-A logdrop-423 -m limit --limit 1/second -j LOG +-A logdrop-423 -j DROP +-A logdrop-424 -m limit --limit 1/second -j LOG +-A logdrop-424 -j DROP +-A logdrop-425 -m limit --limit 1/second -j LOG +-A logdrop-425 -j DROP +-A logdrop-426 -m limit --limit 1/second -j LOG +-A logdrop-426 -j DROP +-A logdrop-427 -m limit --limit 1/second -j LOG +-A logdrop-427 -j DROP +-A logdrop-428 -m limit --limit 1/second -j LOG +-A logdrop-428 -j DROP +-A logdrop-429 -m limit --limit 1/second -j LOG +-A logdrop-429 -j DROP +-A logdrop-43 -m limit --limit 1/second -j LOG +-A logdrop-43 -j DROP +-A logdrop-430 -m limit --limit 1/second -j LOG +-A logdrop-430 -j DROP +-A logdrop-431 -m limit --limit 1/second -j LOG +-A logdrop-431 -j DROP +-A logdrop-432 -m limit --limit 1/second -j LOG +-A logdrop-432 -j DROP +-A logdrop-433 -m limit --limit 1/second -j LOG +-A logdrop-433 -j DROP +-A logdrop-434 -m limit --limit 1/second -j LOG +-A logdrop-434 -j DROP +-A logdrop-435 -m limit --limit 1/second -j LOG +-A logdrop-435 -j DROP +-A logdrop-436 -m limit --limit 1/second -j LOG +-A logdrop-436 -j DROP +-A logdrop-437 -m limit --limit 1/second -j LOG +-A logdrop-437 -j DROP +-A logdrop-438 -m limit --limit 1/second -j LOG +-A logdrop-438 -j DROP +-A logdrop-439 -m limit --limit 1/second -j LOG +-A logdrop-439 -j DROP +-A logdrop-44 -m limit --limit 1/second -j LOG +-A logdrop-44 -j DROP +-A logdrop-440 -m limit --limit 1/second -j LOG +-A logdrop-440 -j DROP +-A logdrop-441 -m limit --limit 1/second -j LOG +-A logdrop-441 -j DROP +-A logdrop-442 -m limit --limit 1/second -j LOG +-A logdrop-442 -j DROP +-A logdrop-443 -m limit --limit 1/second -j LOG +-A logdrop-443 -j DROP +-A logdrop-444 -m limit --limit 1/second -j LOG +-A logdrop-444 -j DROP +-A logdrop-445 -m limit --limit 1/second -j LOG +-A logdrop-445 -j DROP +-A logdrop-446 -m limit --limit 1/second -j LOG +-A logdrop-446 -j DROP +-A logdrop-447 -m limit --limit 1/second -j LOG +-A logdrop-447 -j DROP +-A logdrop-448 -m limit --limit 1/second -j LOG +-A logdrop-448 -j DROP +-A logdrop-449 -m limit --limit 1/second -j LOG +-A logdrop-449 -j DROP +-A logdrop-45 -m limit --limit 1/second -j LOG +-A logdrop-45 -j DROP +-A logdrop-450 -m limit --limit 1/second -j LOG +-A logdrop-450 -j DROP +-A logdrop-451 -m limit --limit 1/second -j LOG +-A logdrop-451 -j DROP +-A logdrop-452 -m limit --limit 1/second -j LOG +-A logdrop-452 -j DROP +-A logdrop-453 -m limit --limit 1/second -j LOG +-A logdrop-453 -j DROP +-A logdrop-454 -m limit --limit 1/second -j LOG +-A logdrop-454 -j DROP +-A logdrop-455 -m limit --limit 1/second -j LOG +-A logdrop-455 -j DROP +-A logdrop-456 -m limit --limit 1/second -j LOG +-A logdrop-456 -j DROP +-A logdrop-457 -m limit --limit 1/second -j LOG +-A logdrop-457 -j DROP +-A logdrop-46 -m limit --limit 1/second -j LOG +-A logdrop-46 -j DROP +-A logdrop-47 -m limit --limit 1/second -j LOG +-A logdrop-47 -j DROP +-A logdrop-48 -m limit --limit 1/second -j LOG +-A logdrop-48 -j DROP +-A logdrop-49 -m limit --limit 1/second -j LOG +-A logdrop-49 -j DROP +-A logdrop-5 -m limit --limit 1/second -j LOG +-A logdrop-5 -j DROP +-A logdrop-50 -m limit --limit 1/second -j LOG +-A logdrop-50 -j DROP +-A logdrop-51 -m limit --limit 1/second -j LOG +-A logdrop-51 -j DROP +-A logdrop-52 -m limit --limit 1/second -j LOG +-A logdrop-52 -j DROP +-A logdrop-53 -m limit --limit 1/second -j LOG +-A logdrop-53 -j DROP +-A logdrop-54 -m limit --limit 1/second -j LOG +-A logdrop-54 -j DROP +-A logdrop-55 -m limit --limit 1/second -j LOG +-A logdrop-55 -j DROP +-A logdrop-56 -m limit --limit 1/second -j LOG +-A logdrop-56 -j DROP +-A logdrop-57 -m limit --limit 1/second -j LOG +-A logdrop-57 -j DROP +-A logdrop-58 -m limit --limit 1/second -j LOG +-A logdrop-58 -j DROP +-A logdrop-59 -m limit --limit 1/second -j LOG +-A logdrop-59 -j DROP +-A logdrop-6 -m limit --limit 1/second -j LOG +-A logdrop-6 -j DROP +-A logdrop-60 -m limit --limit 1/second -j LOG +-A logdrop-60 -j DROP +-A logdrop-61 -m limit --limit 1/second -j LOG +-A logdrop-61 -j DROP +-A logdrop-62 -m limit --limit 1/second -j LOG +-A logdrop-62 -j DROP +-A logdrop-63 -m limit --limit 1/second -j LOG +-A logdrop-63 -j DROP +-A logdrop-64 -m limit --limit 1/second -j LOG +-A logdrop-64 -j DROP +-A logdrop-65 -m limit --limit 1/second -j LOG +-A logdrop-65 -j DROP +-A logdrop-66 -m limit --limit 1/second -j LOG +-A logdrop-66 -j DROP +-A logdrop-67 -m limit --limit 1/second -j LOG +-A logdrop-67 -j DROP +-A logdrop-68 -m limit --limit 1/second -j LOG +-A logdrop-68 -j DROP +-A logdrop-69 -m limit --limit 1/second -j LOG +-A logdrop-69 -j DROP +-A logdrop-7 -m limit --limit 1/second -j LOG +-A logdrop-7 -j DROP +-A logdrop-70 -m limit --limit 1/second -j LOG +-A logdrop-70 -j DROP +-A logdrop-71 -m limit --limit 1/second -j LOG +-A logdrop-71 -j DROP +-A logdrop-72 -m limit --limit 1/second -j LOG +-A logdrop-72 -j DROP +-A logdrop-73 -m limit --limit 1/second -j LOG +-A logdrop-73 -j DROP +-A logdrop-74 -m limit --limit 1/second -j LOG +-A logdrop-74 -j DROP +-A logdrop-75 -m limit --limit 1/second -j LOG +-A logdrop-75 -j DROP +-A logdrop-76 -m limit --limit 1/second -j LOG +-A logdrop-76 -j DROP +-A logdrop-77 -m limit --limit 1/second -j LOG +-A logdrop-77 -j DROP +-A logdrop-78 -m limit --limit 1/second -j LOG +-A logdrop-78 -j DROP +-A logdrop-79 -m limit --limit 1/second -j LOG +-A logdrop-79 -j DROP +-A logdrop-8 -m limit --limit 1/second -j LOG +-A logdrop-8 -j DROP +-A logdrop-80 -m limit --limit 1/second -j LOG +-A logdrop-80 -j DROP +-A logdrop-81 -m limit --limit 1/second -j LOG +-A logdrop-81 -j DROP +-A logdrop-82 -m limit --limit 1/second -j LOG +-A logdrop-82 -j DROP +-A logdrop-83 -m limit --limit 1/second -j LOG +-A logdrop-83 -j DROP +-A logdrop-84 -m limit --limit 1/second -j LOG +-A logdrop-84 -j DROP +-A logdrop-85 -m limit --limit 1/second -j LOG +-A logdrop-85 -j DROP +-A logdrop-86 -m limit --limit 1/second -j LOG +-A logdrop-86 -j DROP +-A logdrop-87 -m limit --limit 1/second -j LOG +-A logdrop-87 -j DROP +-A logdrop-88 -m limit --limit 1/second -j LOG +-A logdrop-88 -j DROP +-A logdrop-89 -m limit --limit 1/second -j LOG +-A logdrop-89 -j DROP +-A logdrop-9 -m limit --limit 1/second -j LOG +-A logdrop-9 -j DROP +-A logdrop-90 -m limit --limit 1/second -j LOG +-A logdrop-90 -j DROP +-A logdrop-91 -m limit --limit 1/second -j LOG +-A logdrop-91 -j DROP +-A logdrop-92 -m limit --limit 1/second -j LOG +-A logdrop-92 -j DROP +-A logdrop-93 -m limit --limit 1/second -j LOG +-A logdrop-93 -j DROP +-A logdrop-94 -m limit --limit 1/second -j LOG +-A logdrop-94 -j DROP +-A logdrop-95 -m limit --limit 1/second -j LOG +-A logdrop-95 -j DROP +-A logdrop-96 -m limit --limit 1/second -j LOG +-A logdrop-96 -j DROP +-A logdrop-97 -m limit --limit 1/second -j LOG +-A logdrop-97 -j DROP +-A logdrop-98 -m limit --limit 1/second -j LOG +-A logdrop-98 -j DROP +-A logdrop-99 -m limit --limit 1/second -j LOG +-A logdrop-99 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:FORWARD ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*nat +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +:awall-masquerade - [0:0] +-A INPUT -j MASQUERADE +-A OUTPUT -j REDIRECT +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE +-A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade +-A PREROUTING -i eth0 -j REDIRECT +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT +-A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT + +# rules6-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:limit-0 - [0:0] +:limit-1 - [0:0] +:limit-10 - [0:0] +:limit-100 - [0:0] +:limit-1000 - [0:0] +:limit-1001 - [0:0] +:limit-1002 - [0:0] +:limit-1003 - [0:0] +:limit-1004 - [0:0] +:limit-1005 - [0:0] +:limit-1006 - [0:0] +:limit-1007 - [0:0] +:limit-1008 - [0:0] +:limit-1009 - [0:0] +:limit-101 - [0:0] +:limit-1010 - [0:0] +:limit-1011 - [0:0] +:limit-1012 - [0:0] +:limit-1013 - [0:0] +:limit-1014 - [0:0] +:limit-1015 - [0:0] +:limit-1016 - [0:0] +:limit-1017 - [0:0] +:limit-1018 - [0:0] +:limit-1019 - [0:0] +:limit-102 - [0:0] +:limit-1020 - [0:0] +:limit-1021 - [0:0] +:limit-1022 - [0:0] +:limit-1023 - [0:0] +:limit-1024 - [0:0] +:limit-1025 - [0:0] +:limit-1026 - [0:0] +:limit-1027 - [0:0] +:limit-1028 - [0:0] +:limit-1029 - [0:0] +:limit-103 - [0:0] +:limit-1030 - [0:0] +:limit-1031 - [0:0] +:limit-1032 - [0:0] +:limit-1033 - [0:0] +:limit-1034 - [0:0] +:limit-1035 - [0:0] +:limit-1036 - [0:0] +:limit-1037 - [0:0] +:limit-1038 - [0:0] +:limit-1039 - [0:0] +:limit-104 - [0:0] +:limit-1040 - [0:0] +:limit-1041 - [0:0] +:limit-1042 - [0:0] +:limit-1043 - [0:0] +:limit-1044 - [0:0] +:limit-1045 - [0:0] +:limit-1046 - [0:0] +:limit-1047 - [0:0] +:limit-1048 - [0:0] +:limit-1049 - [0:0] +:limit-105 - [0:0] +:limit-1050 - [0:0] +:limit-1051 - [0:0] +:limit-1052 - [0:0] +:limit-1053 - [0:0] +:limit-1054 - [0:0] +:limit-1055 - [0:0] +:limit-1056 - [0:0] +:limit-1057 - [0:0] +:limit-1058 - [0:0] +:limit-1059 - [0:0] +:limit-106 - [0:0] +:limit-1060 - [0:0] +:limit-1061 - [0:0] +:limit-1062 - [0:0] +:limit-1063 - [0:0] +:limit-1064 - [0:0] +:limit-1065 - [0:0] +:limit-1066 - [0:0] +:limit-1067 - [0:0] +:limit-1068 - [0:0] +:limit-1069 - [0:0] +:limit-107 - [0:0] +:limit-1070 - [0:0] +:limit-1071 - [0:0] +:limit-1072 - [0:0] +:limit-1073 - [0:0] +:limit-1074 - [0:0] +:limit-1075 - [0:0] +:limit-1076 - [0:0] +:limit-1077 - [0:0] +:limit-1078 - [0:0] +:limit-1079 - [0:0] +:limit-108 - [0:0] +:limit-1080 - [0:0] +:limit-1081 - [0:0] +:limit-1082 - [0:0] +:limit-1083 - [0:0] +:limit-1084 - [0:0] +:limit-1085 - [0:0] +:limit-1086 - [0:0] +:limit-1087 - [0:0] +:limit-1088 - [0:0] +:limit-1089 - [0:0] +:limit-109 - [0:0] +:limit-1090 - [0:0] +:limit-1091 - [0:0] +:limit-1092 - [0:0] +:limit-1094 - [0:0] +:limit-1095 - [0:0] +:limit-1096 - [0:0] +:limit-1098 - [0:0] +:limit-1099 - [0:0] +:limit-11 - [0:0] +:limit-110 - [0:0] +:limit-1100 - [0:0] +:limit-1101 - [0:0] +:limit-1102 - [0:0] +:limit-1103 - [0:0] +:limit-1104 - [0:0] +:limit-1106 - [0:0] +:limit-1107 - [0:0] +:limit-1108 - [0:0] +:limit-111 - [0:0] +:limit-1110 - [0:0] +:limit-1111 - [0:0] +:limit-1112 - [0:0] +:limit-1113 - [0:0] +:limit-1114 - [0:0] +:limit-1115 - [0:0] +:limit-1116 - [0:0] +:limit-1118 - [0:0] +:limit-1119 - [0:0] +:limit-112 - [0:0] +:limit-1120 - [0:0] +:limit-1122 - [0:0] +:limit-1123 - [0:0] +:limit-1124 - [0:0] +:limit-1125 - [0:0] +:limit-1126 - [0:0] +:limit-1127 - [0:0] +:limit-1128 - [0:0] +:limit-113 - [0:0] +:limit-1130 - [0:0] +:limit-1131 - [0:0] +:limit-1132 - [0:0] +:limit-1134 - [0:0] +:limit-1135 - [0:0] +:limit-1136 - [0:0] +:limit-1137 - [0:0] +:limit-1138 - [0:0] +:limit-1139 - [0:0] +:limit-114 - [0:0] +:limit-1140 - [0:0] +:limit-1141 - [0:0] +:limit-1142 - [0:0] +:limit-1143 - [0:0] +:limit-1144 - [0:0] +:limit-1145 - [0:0] +:limit-1146 - [0:0] +:limit-1148 - [0:0] +:limit-1149 - [0:0] +:limit-115 - [0:0] +:limit-1150 - [0:0] +:limit-1152 - [0:0] +:limit-1153 - [0:0] +:limit-1154 - [0:0] +:limit-1155 - [0:0] +:limit-1156 - [0:0] +:limit-1157 - [0:0] +:limit-1158 - [0:0] +:limit-116 - [0:0] +:limit-1160 - [0:0] +:limit-1161 - [0:0] +:limit-1162 - [0:0] +:limit-1164 - [0:0] +:limit-1165 - [0:0] +:limit-1166 - [0:0] +:limit-1167 - [0:0] +:limit-1168 - [0:0] +:limit-1169 - [0:0] +:limit-117 - [0:0] +:limit-1170 - [0:0] +:limit-1172 - [0:0] +:limit-1173 - [0:0] +:limit-1174 - [0:0] +:limit-1176 - [0:0] +:limit-1177 - [0:0] +:limit-1178 - [0:0] +:limit-1179 - [0:0] +:limit-118 - [0:0] +:limit-1180 - [0:0] +:limit-1181 - [0:0] +:limit-1182 - [0:0] +:limit-1184 - [0:0] +:limit-1185 - [0:0] +:limit-1186 - [0:0] +:limit-1188 - [0:0] +:limit-1189 - [0:0] +:limit-119 - [0:0] +:limit-1190 - [0:0] +:limit-1191 - [0:0] +:limit-1192 - [0:0] +:limit-1193 - [0:0] +:limit-1194 - [0:0] +:limit-1195 - [0:0] +:limit-1196 - [0:0] +:limit-1197 - [0:0] +:limit-1198 - [0:0] +:limit-1199 - [0:0] +:limit-12 - [0:0] +:limit-120 - [0:0] +:limit-1200 - [0:0] +:limit-1202 - [0:0] +:limit-1203 - [0:0] +:limit-1204 - [0:0] +:limit-1206 - [0:0] +:limit-1207 - [0:0] +:limit-1208 - [0:0] +:limit-1209 - [0:0] +:limit-121 - [0:0] +:limit-1210 - [0:0] +:limit-1211 - [0:0] +:limit-1212 - [0:0] +:limit-1214 - [0:0] +:limit-1215 - [0:0] +:limit-1216 - [0:0] +:limit-1218 - [0:0] +:limit-1219 - [0:0] +:limit-122 - [0:0] +:limit-1220 - [0:0] +:limit-1221 - [0:0] +:limit-1222 - [0:0] +:limit-1223 - [0:0] +:limit-1224 - [0:0] +:limit-1226 - [0:0] +:limit-1227 - [0:0] +:limit-1228 - [0:0] +:limit-123 - [0:0] +:limit-1230 - [0:0] +:limit-1231 - [0:0] +:limit-1232 - [0:0] +:limit-1233 - [0:0] +:limit-1234 - [0:0] +:limit-1235 - [0:0] +:limit-1236 - [0:0] +:limit-1238 - [0:0] +:limit-1239 - [0:0] +:limit-124 - [0:0] +:limit-1240 - [0:0] +:limit-1242 - [0:0] +:limit-1243 - [0:0] +:limit-1244 - [0:0] +:limit-1245 - [0:0] +:limit-1246 - [0:0] +:limit-1247 - [0:0] +:limit-1248 - [0:0] +:limit-1249 - [0:0] +:limit-125 - [0:0] +:limit-1250 - [0:0] +:limit-1251 - [0:0] +:limit-1252 - [0:0] +:limit-1253 - [0:0] +:limit-1254 - [0:0] +:limit-1256 - [0:0] +:limit-1257 - [0:0] +:limit-1258 - [0:0] +:limit-126 - [0:0] +:limit-1260 - [0:0] +:limit-1261 - [0:0] +:limit-1262 - [0:0] +:limit-1263 - [0:0] +:limit-1264 - [0:0] +:limit-1265 - [0:0] +:limit-1266 - [0:0] +:limit-1268 - [0:0] +:limit-1269 - [0:0] +:limit-127 - [0:0] +:limit-1270 - [0:0] +:limit-1272 - [0:0] +:limit-1273 - [0:0] +:limit-1274 - [0:0] +:limit-1275 - [0:0] +:limit-1276 - [0:0] +:limit-1277 - [0:0] +:limit-1278 - [0:0] +:limit-128 - [0:0] +:limit-1280 - [0:0] +:limit-1281 - [0:0] +:limit-1282 - [0:0] +:limit-1284 - [0:0] +:limit-1285 - [0:0] +:limit-1286 - [0:0] +:limit-1287 - [0:0] +:limit-1288 - [0:0] +:limit-1289 - [0:0] +:limit-129 - [0:0] +:limit-1290 - [0:0] +:limit-1292 - [0:0] +:limit-1293 - [0:0] +:limit-1294 - [0:0] +:limit-1296 - [0:0] +:limit-1297 - [0:0] +:limit-1298 - [0:0] +:limit-1299 - [0:0] +:limit-13 - [0:0] +:limit-130 - [0:0] +:limit-1300 - [0:0] +:limit-1301 - [0:0] +:limit-1302 - [0:0] +:limit-1303 - [0:0] +:limit-1304 - [0:0] +:limit-1305 - [0:0] +:limit-1306 - [0:0] +:limit-1307 - [0:0] +:limit-1308 - [0:0] +:limit-131 - [0:0] +:limit-1310 - [0:0] +:limit-1311 - [0:0] +:limit-1312 - [0:0] +:limit-1314 - [0:0] +:limit-1315 - [0:0] +:limit-1316 - [0:0] +:limit-1317 - [0:0] +:limit-1318 - [0:0] +:limit-1319 - [0:0] +:limit-132 - [0:0] +:limit-1320 - [0:0] +:limit-1322 - [0:0] +:limit-1323 - [0:0] +:limit-1324 - [0:0] +:limit-1326 - [0:0] +:limit-1327 - [0:0] +:limit-1328 - [0:0] +:limit-1329 - [0:0] +:limit-133 - [0:0] +:limit-1330 - [0:0] +:limit-1331 - [0:0] +:limit-1332 - [0:0] +:limit-1334 - [0:0] +:limit-1335 - [0:0] +:limit-1336 - [0:0] +:limit-1338 - [0:0] +:limit-1339 - [0:0] +:limit-134 - [0:0] +:limit-1340 - [0:0] +:limit-1341 - [0:0] +:limit-1342 - [0:0] +:limit-1343 - [0:0] +:limit-1344 - [0:0] +:limit-1346 - [0:0] +:limit-1347 - [0:0] +:limit-1348 - [0:0] +:limit-135 - [0:0] +:limit-1350 - [0:0] +:limit-1351 - [0:0] +:limit-1352 - [0:0] +:limit-1353 - [0:0] +:limit-1354 - [0:0] +:limit-1355 - [0:0] +:limit-1356 - [0:0] +:limit-1357 - [0:0] +:limit-1358 - [0:0] +:limit-1359 - [0:0] +:limit-136 - [0:0] +:limit-1360 - [0:0] +:limit-1361 - [0:0] +:limit-1362 - [0:0] +:limit-1364 - [0:0] +:limit-1365 - [0:0] +:limit-1366 - [0:0] +:limit-1368 - [0:0] +:limit-1369 - [0:0] +:limit-137 - [0:0] +:limit-1370 - [0:0] +:limit-1371 - [0:0] +:limit-1372 - [0:0] +:limit-1373 - [0:0] +:limit-1374 - [0:0] +:limit-1376 - [0:0] +:limit-1377 - [0:0] +:limit-1378 - [0:0] +:limit-138 - [0:0] +:limit-1380 - [0:0] +:limit-1381 - [0:0] +:limit-1382 - [0:0] +:limit-1383 - [0:0] +:limit-1384 - [0:0] +:limit-1385 - [0:0] +:limit-1386 - [0:0] +:limit-1388 - [0:0] +:limit-1389 - [0:0] +:limit-139 - [0:0] +:limit-1390 - [0:0] +:limit-1392 - [0:0] +:limit-1393 - [0:0] +:limit-1394 - [0:0] +:limit-1395 - [0:0] +:limit-1396 - [0:0] +:limit-1397 - [0:0] +:limit-1398 - [0:0] +:limit-14 - [0:0] +:limit-140 - [0:0] +:limit-1400 - [0:0] +:limit-1401 - [0:0] +:limit-1402 - [0:0] +:limit-1404 - [0:0] +:limit-1405 - [0:0] +:limit-1406 - [0:0] +:limit-1407 - [0:0] +:limit-1408 - [0:0] +:limit-1409 - [0:0] +:limit-141 - [0:0] +:limit-1410 - [0:0] +:limit-1411 - [0:0] +:limit-1412 - [0:0] +:limit-1413 - [0:0] +:limit-1414 - [0:0] +:limit-1415 - [0:0] +:limit-1416 - [0:0] +:limit-1417 - [0:0] +:limit-1418 - [0:0] +:limit-1419 - [0:0] +:limit-142 - [0:0] +:limit-1420 - [0:0] +:limit-1421 - [0:0] +:limit-1422 - [0:0] +:limit-1423 - [0:0] +:limit-1424 - [0:0] +:limit-1425 - [0:0] +:limit-1426 - [0:0] +:limit-1427 - [0:0] +:limit-1428 - [0:0] +:limit-1429 - [0:0] +:limit-143 - [0:0] +:limit-1430 - [0:0] +:limit-1431 - [0:0] +:limit-144 - [0:0] +:limit-145 - [0:0] +:limit-146 - [0:0] +:limit-147 - [0:0] +:limit-148 - [0:0] +:limit-149 - [0:0] +:limit-15 - [0:0] +:limit-150 - [0:0] +:limit-151 - [0:0] +:limit-152 - [0:0] +:limit-153 - [0:0] +:limit-154 - [0:0] +:limit-155 - [0:0] +:limit-156 - [0:0] +:limit-157 - [0:0] +:limit-158 - [0:0] +:limit-159 - [0:0] +:limit-16 - [0:0] +:limit-160 - [0:0] +:limit-161 - [0:0] +:limit-162 - [0:0] +:limit-163 - [0:0] +:limit-164 - [0:0] +:limit-165 - [0:0] +:limit-166 - [0:0] +:limit-167 - [0:0] +:limit-168 - [0:0] +:limit-169 - [0:0] +:limit-17 - [0:0] +:limit-170 - [0:0] +:limit-171 - [0:0] +:limit-172 - [0:0] +:limit-173 - [0:0] +:limit-174 - [0:0] +:limit-175 - [0:0] +:limit-176 - [0:0] +:limit-177 - [0:0] +:limit-178 - [0:0] +:limit-179 - [0:0] +:limit-18 - [0:0] +:limit-180 - [0:0] +:limit-181 - [0:0] +:limit-182 - [0:0] +:limit-183 - [0:0] +:limit-184 - [0:0] +:limit-185 - [0:0] +:limit-186 - [0:0] +:limit-187 - [0:0] +:limit-188 - [0:0] +:limit-189 - [0:0] +:limit-19 - [0:0] +:limit-190 - [0:0] +:limit-191 - [0:0] +:limit-192 - [0:0] +:limit-193 - [0:0] +:limit-194 - [0:0] +:limit-195 - [0:0] +:limit-196 - [0:0] +:limit-197 - [0:0] +:limit-198 - [0:0] +:limit-199 - [0:0] +:limit-2 - [0:0] +:limit-20 - [0:0] +:limit-200 - [0:0] +:limit-201 - [0:0] +:limit-202 - [0:0] +:limit-203 - [0:0] +:limit-204 - [0:0] +:limit-205 - [0:0] +:limit-206 - [0:0] +:limit-207 - [0:0] +:limit-208 - [0:0] +:limit-209 - [0:0] +:limit-21 - [0:0] +:limit-210 - [0:0] +:limit-211 - [0:0] +:limit-212 - [0:0] +:limit-213 - [0:0] +:limit-214 - [0:0] +:limit-215 - [0:0] +:limit-216 - [0:0] +:limit-217 - [0:0] +:limit-218 - [0:0] +:limit-219 - [0:0] +:limit-22 - [0:0] +:limit-220 - [0:0] +:limit-221 - [0:0] +:limit-222 - [0:0] +:limit-223 - [0:0] +:limit-224 - [0:0] +:limit-225 - [0:0] +:limit-226 - [0:0] +:limit-227 - [0:0] +:limit-228 - [0:0] +:limit-229 - [0:0] +:limit-23 - [0:0] +:limit-230 - [0:0] +:limit-231 - [0:0] +:limit-232 - [0:0] +:limit-233 - [0:0] +:limit-234 - [0:0] +:limit-235 - [0:0] +:limit-236 - [0:0] +:limit-237 - [0:0] +:limit-238 - [0:0] +:limit-239 - [0:0] +:limit-24 - [0:0] +:limit-240 - [0:0] +:limit-241 - [0:0] +:limit-242 - [0:0] +:limit-243 - [0:0] +:limit-244 - [0:0] +:limit-245 - [0:0] +:limit-246 - [0:0] +:limit-247 - [0:0] +:limit-248 - [0:0] +:limit-249 - [0:0] +:limit-25 - [0:0] +:limit-250 - [0:0] +:limit-251 - [0:0] +:limit-252 - [0:0] +:limit-253 - [0:0] +:limit-254 - [0:0] +:limit-255 - [0:0] +:limit-256 - [0:0] +:limit-257 - [0:0] +:limit-258 - [0:0] +:limit-259 - [0:0] +:limit-26 - [0:0] +:limit-260 - [0:0] +:limit-261 - [0:0] +:limit-262 - [0:0] +:limit-263 - [0:0] +:limit-264 - [0:0] +:limit-265 - [0:0] +:limit-266 - [0:0] +:limit-267 - [0:0] +:limit-268 - [0:0] +:limit-269 - [0:0] +:limit-27 - [0:0] +:limit-270 - [0:0] +:limit-271 - [0:0] +:limit-272 - [0:0] +:limit-273 - [0:0] +:limit-274 - [0:0] +:limit-275 - [0:0] +:limit-276 - [0:0] +:limit-277 - [0:0] +:limit-278 - [0:0] +:limit-279 - [0:0] +:limit-28 - [0:0] +:limit-280 - [0:0] +:limit-281 - [0:0] +:limit-282 - [0:0] +:limit-283 - [0:0] +:limit-284 - [0:0] +:limit-285 - [0:0] +:limit-286 - [0:0] +:limit-287 - [0:0] +:limit-288 - [0:0] +:limit-289 - [0:0] +:limit-29 - [0:0] +:limit-290 - [0:0] +:limit-291 - [0:0] +:limit-292 - [0:0] +:limit-293 - [0:0] +:limit-294 - [0:0] +:limit-295 - [0:0] +:limit-296 - [0:0] +:limit-297 - [0:0] +:limit-298 - [0:0] +:limit-299 - [0:0] +:limit-3 - [0:0] +:limit-30 - [0:0] +:limit-300 - [0:0] +:limit-301 - [0:0] +:limit-302 - [0:0] +:limit-303 - [0:0] +:limit-304 - [0:0] +:limit-305 - [0:0] +:limit-306 - [0:0] +:limit-307 - [0:0] +:limit-308 - [0:0] +:limit-309 - [0:0] +:limit-31 - [0:0] +:limit-310 - [0:0] +:limit-311 - [0:0] +:limit-312 - [0:0] +:limit-313 - [0:0] +:limit-314 - [0:0] +:limit-315 - [0:0] +:limit-316 - [0:0] +:limit-317 - [0:0] +:limit-318 - [0:0] +:limit-319 - [0:0] +:limit-32 - [0:0] +:limit-320 - [0:0] +:limit-321 - [0:0] +:limit-322 - [0:0] +:limit-323 - [0:0] +:limit-324 - [0:0] +:limit-325 - [0:0] +:limit-326 - [0:0] +:limit-327 - [0:0] +:limit-328 - [0:0] +:limit-329 - [0:0] +:limit-33 - [0:0] +:limit-330 - [0:0] +:limit-331 - [0:0] +:limit-332 - [0:0] +:limit-333 - [0:0] +:limit-334 - [0:0] +:limit-335 - [0:0] +:limit-336 - [0:0] +:limit-337 - [0:0] +:limit-338 - [0:0] +:limit-339 - [0:0] +:limit-34 - [0:0] +:limit-340 - [0:0] +:limit-341 - [0:0] +:limit-342 - [0:0] +:limit-343 - [0:0] +:limit-344 - [0:0] +:limit-345 - [0:0] +:limit-346 - [0:0] +:limit-347 - [0:0] +:limit-348 - [0:0] +:limit-349 - [0:0] +:limit-35 - [0:0] +:limit-350 - [0:0] +:limit-351 - [0:0] +:limit-352 - [0:0] +:limit-353 - [0:0] +:limit-354 - [0:0] +:limit-355 - [0:0] +:limit-356 - [0:0] +:limit-357 - [0:0] +:limit-358 - [0:0] +:limit-359 - [0:0] +:limit-36 - [0:0] +:limit-360 - [0:0] +:limit-361 - [0:0] +:limit-362 - [0:0] +:limit-363 - [0:0] +:limit-364 - [0:0] +:limit-365 - [0:0] +:limit-366 - [0:0] +:limit-367 - [0:0] +:limit-368 - [0:0] +:limit-369 - [0:0] +:limit-37 - [0:0] +:limit-370 - [0:0] +:limit-371 - [0:0] +:limit-372 - [0:0] +:limit-373 - [0:0] +:limit-374 - [0:0] +:limit-375 - [0:0] +:limit-376 - [0:0] +:limit-378 - [0:0] +:limit-379 - [0:0] +:limit-38 - [0:0] +:limit-380 - [0:0] +:limit-382 - [0:0] +:limit-383 - [0:0] +:limit-384 - [0:0] +:limit-385 - [0:0] +:limit-386 - [0:0] +:limit-387 - [0:0] +:limit-388 - [0:0] +:limit-39 - [0:0] +:limit-390 - [0:0] +:limit-391 - [0:0] +:limit-392 - [0:0] +:limit-394 - [0:0] +:limit-395 - [0:0] +:limit-396 - [0:0] +:limit-397 - [0:0] +:limit-398 - [0:0] +:limit-399 - [0:0] +:limit-4 - [0:0] +:limit-40 - [0:0] +:limit-400 - [0:0] +:limit-402 - [0:0] +:limit-403 - [0:0] +:limit-404 - [0:0] +:limit-406 - [0:0] +:limit-407 - [0:0] +:limit-408 - [0:0] +:limit-409 - [0:0] +:limit-41 - [0:0] +:limit-410 - [0:0] +:limit-411 - [0:0] +:limit-412 - [0:0] +:limit-414 - [0:0] +:limit-415 - [0:0] +:limit-416 - [0:0] +:limit-418 - [0:0] +:limit-419 - [0:0] +:limit-42 - [0:0] +:limit-420 - [0:0] +:limit-421 - [0:0] +:limit-422 - [0:0] +:limit-423 - [0:0] +:limit-424 - [0:0] +:limit-425 - [0:0] +:limit-426 - [0:0] +:limit-427 - [0:0] +:limit-428 - [0:0] +:limit-429 - [0:0] +:limit-43 - [0:0] +:limit-430 - [0:0] +:limit-432 - [0:0] +:limit-433 - [0:0] +:limit-434 - [0:0] +:limit-436 - [0:0] +:limit-437 - [0:0] +:limit-438 - [0:0] +:limit-439 - [0:0] +:limit-44 - [0:0] +:limit-440 - [0:0] +:limit-441 - [0:0] +:limit-442 - [0:0] +:limit-444 - [0:0] +:limit-445 - [0:0] +:limit-446 - [0:0] +:limit-448 - [0:0] +:limit-449 - [0:0] +:limit-45 - [0:0] +:limit-450 - [0:0] +:limit-451 - [0:0] +:limit-452 - [0:0] +:limit-453 - [0:0] +:limit-454 - [0:0] +:limit-456 - [0:0] +:limit-457 - [0:0] +:limit-458 - [0:0] +:limit-46 - [0:0] +:limit-460 - [0:0] +:limit-461 - [0:0] +:limit-462 - [0:0] +:limit-463 - [0:0] +:limit-464 - [0:0] +:limit-465 - [0:0] +:limit-466 - [0:0] +:limit-468 - [0:0] +:limit-469 - [0:0] +:limit-47 - [0:0] +:limit-470 - [0:0] +:limit-472 - [0:0] +:limit-473 - [0:0] +:limit-474 - [0:0] +:limit-475 - [0:0] +:limit-476 - [0:0] +:limit-477 - [0:0] +:limit-478 - [0:0] +:limit-479 - [0:0] +:limit-48 - [0:0] +:limit-480 - [0:0] +:limit-481 - [0:0] +:limit-482 - [0:0] +:limit-483 - [0:0] +:limit-484 - [0:0] +:limit-486 - [0:0] +:limit-487 - [0:0] +:limit-488 - [0:0] +:limit-49 - [0:0] +:limit-490 - [0:0] +:limit-491 - [0:0] +:limit-492 - [0:0] +:limit-493 - [0:0] +:limit-494 - [0:0] +:limit-495 - [0:0] +:limit-496 - [0:0] +:limit-498 - [0:0] +:limit-499 - [0:0] +:limit-5 - [0:0] +:limit-50 - [0:0] +:limit-500 - [0:0] +:limit-502 - [0:0] +:limit-503 - [0:0] +:limit-504 - [0:0] +:limit-505 - [0:0] +:limit-506 - [0:0] +:limit-507 - [0:0] +:limit-508 - [0:0] +:limit-51 - [0:0] +:limit-510 - [0:0] +:limit-511 - [0:0] +:limit-512 - [0:0] +:limit-514 - [0:0] +:limit-515 - [0:0] +:limit-516 - [0:0] +:limit-517 - [0:0] +:limit-518 - [0:0] +:limit-519 - [0:0] +:limit-52 - [0:0] +:limit-520 - [0:0] +:limit-522 - [0:0] +:limit-523 - [0:0] +:limit-524 - [0:0] +:limit-526 - [0:0] +:limit-527 - [0:0] +:limit-528 - [0:0] +:limit-529 - [0:0] +:limit-53 - [0:0] +:limit-530 - [0:0] +:limit-531 - [0:0] +:limit-532 - [0:0] +:limit-533 - [0:0] +:limit-534 - [0:0] +:limit-535 - [0:0] +:limit-536 - [0:0] +:limit-537 - [0:0] +:limit-538 - [0:0] +:limit-54 - [0:0] +:limit-540 - [0:0] +:limit-541 - [0:0] +:limit-542 - [0:0] +:limit-544 - [0:0] +:limit-545 - [0:0] +:limit-546 - [0:0] +:limit-547 - [0:0] +:limit-548 - [0:0] +:limit-549 - [0:0] +:limit-55 - [0:0] +:limit-550 - [0:0] +:limit-552 - [0:0] +:limit-553 - [0:0] +:limit-554 - [0:0] +:limit-556 - [0:0] +:limit-557 - [0:0] +:limit-558 - [0:0] +:limit-559 - [0:0] +:limit-56 - [0:0] +:limit-560 - [0:0] +:limit-561 - [0:0] +:limit-562 - [0:0] +:limit-564 - [0:0] +:limit-565 - [0:0] +:limit-566 - [0:0] +:limit-568 - [0:0] +:limit-569 - [0:0] +:limit-57 - [0:0] +:limit-570 - [0:0] +:limit-571 - [0:0] +:limit-572 - [0:0] +:limit-573 - [0:0] +:limit-574 - [0:0] +:limit-576 - [0:0] +:limit-577 - [0:0] +:limit-578 - [0:0] +:limit-58 - [0:0] +:limit-580 - [0:0] +:limit-581 - [0:0] +:limit-582 - [0:0] +:limit-583 - [0:0] +:limit-584 - [0:0] +:limit-585 - [0:0] +:limit-586 - [0:0] +:limit-587 - [0:0] +:limit-588 - [0:0] +:limit-589 - [0:0] +:limit-59 - [0:0] +:limit-590 - [0:0] +:limit-591 - [0:0] +:limit-592 - [0:0] +:limit-594 - [0:0] +:limit-595 - [0:0] +:limit-596 - [0:0] +:limit-598 - [0:0] +:limit-599 - [0:0] +:limit-6 - [0:0] +:limit-60 - [0:0] +:limit-600 - [0:0] +:limit-601 - [0:0] +:limit-602 - [0:0] +:limit-603 - [0:0] +:limit-604 - [0:0] +:limit-606 - [0:0] +:limit-607 - [0:0] +:limit-608 - [0:0] +:limit-61 - [0:0] +:limit-610 - [0:0] +:limit-611 - [0:0] +:limit-612 - [0:0] +:limit-613 - [0:0] +:limit-614 - [0:0] +:limit-615 - [0:0] +:limit-616 - [0:0] +:limit-618 - [0:0] +:limit-619 - [0:0] +:limit-62 - [0:0] +:limit-620 - [0:0] +:limit-622 - [0:0] +:limit-623 - [0:0] +:limit-624 - [0:0] +:limit-625 - [0:0] +:limit-626 - [0:0] +:limit-627 - [0:0] +:limit-628 - [0:0] +:limit-63 - [0:0] +:limit-630 - [0:0] +:limit-631 - [0:0] +:limit-632 - [0:0] +:limit-634 - [0:0] +:limit-635 - [0:0] +:limit-636 - [0:0] +:limit-637 - [0:0] +:limit-638 - [0:0] +:limit-639 - [0:0] +:limit-64 - [0:0] +:limit-640 - [0:0] +:limit-641 - [0:0] +:limit-642 - [0:0] +:limit-643 - [0:0] +:limit-644 - [0:0] +:limit-645 - [0:0] +:limit-646 - [0:0] +:limit-648 - [0:0] +:limit-649 - [0:0] +:limit-65 - [0:0] +:limit-650 - [0:0] +:limit-652 - [0:0] +:limit-653 - [0:0] +:limit-654 - [0:0] +:limit-655 - [0:0] +:limit-656 - [0:0] +:limit-657 - [0:0] +:limit-658 - [0:0] +:limit-66 - [0:0] +:limit-660 - [0:0] +:limit-661 - [0:0] +:limit-662 - [0:0] +:limit-664 - [0:0] +:limit-665 - [0:0] +:limit-666 - [0:0] +:limit-667 - [0:0] +:limit-668 - [0:0] +:limit-669 - [0:0] +:limit-67 - [0:0] +:limit-670 - [0:0] +:limit-672 - [0:0] +:limit-673 - [0:0] +:limit-674 - [0:0] +:limit-676 - [0:0] +:limit-677 - [0:0] +:limit-678 - [0:0] +:limit-679 - [0:0] +:limit-68 - [0:0] +:limit-680 - [0:0] +:limit-681 - [0:0] +:limit-682 - [0:0] +:limit-684 - [0:0] +:limit-685 - [0:0] +:limit-686 - [0:0] +:limit-688 - [0:0] +:limit-689 - [0:0] +:limit-69 - [0:0] +:limit-690 - [0:0] +:limit-691 - [0:0] +:limit-692 - [0:0] +:limit-693 - [0:0] +:limit-694 - [0:0] +:limit-695 - [0:0] +:limit-696 - [0:0] +:limit-697 - [0:0] +:limit-698 - [0:0] +:limit-699 - [0:0] +:limit-7 - [0:0] +:limit-70 - [0:0] +:limit-700 - [0:0] +:limit-701 - [0:0] +:limit-702 - [0:0] +:limit-703 - [0:0] +:limit-704 - [0:0] +:limit-705 - [0:0] +:limit-706 - [0:0] +:limit-707 - [0:0] +:limit-708 - [0:0] +:limit-709 - [0:0] +:limit-71 - [0:0] +:limit-710 - [0:0] +:limit-711 - [0:0] +:limit-712 - [0:0] +:limit-713 - [0:0] +:limit-714 - [0:0] +:limit-715 - [0:0] +:limit-716 - [0:0] +:limit-717 - [0:0] +:limit-718 - [0:0] +:limit-719 - [0:0] +:limit-72 - [0:0] +:limit-720 - [0:0] +:limit-721 - [0:0] +:limit-722 - [0:0] +:limit-723 - [0:0] +:limit-724 - [0:0] +:limit-725 - [0:0] +:limit-726 - [0:0] +:limit-727 - [0:0] +:limit-728 - [0:0] +:limit-729 - [0:0] +:limit-73 - [0:0] +:limit-730 - [0:0] +:limit-731 - [0:0] +:limit-732 - [0:0] +:limit-733 - [0:0] +:limit-734 - [0:0] +:limit-735 - [0:0] +:limit-736 - [0:0] +:limit-737 - [0:0] +:limit-738 - [0:0] +:limit-739 - [0:0] +:limit-74 - [0:0] +:limit-740 - [0:0] +:limit-741 - [0:0] +:limit-742 - [0:0] +:limit-743 - [0:0] +:limit-744 - [0:0] +:limit-745 - [0:0] +:limit-746 - [0:0] +:limit-747 - [0:0] +:limit-748 - [0:0] +:limit-749 - [0:0] +:limit-75 - [0:0] +:limit-750 - [0:0] +:limit-751 - [0:0] +:limit-752 - [0:0] +:limit-753 - [0:0] +:limit-754 - [0:0] +:limit-755 - [0:0] +:limit-756 - [0:0] +:limit-757 - [0:0] +:limit-758 - [0:0] +:limit-759 - [0:0] +:limit-76 - [0:0] +:limit-760 - [0:0] +:limit-761 - [0:0] +:limit-762 - [0:0] +:limit-763 - [0:0] +:limit-764 - [0:0] +:limit-765 - [0:0] +:limit-766 - [0:0] +:limit-767 - [0:0] +:limit-768 - [0:0] +:limit-769 - [0:0] +:limit-77 - [0:0] +:limit-770 - [0:0] +:limit-771 - [0:0] +:limit-772 - [0:0] +:limit-773 - [0:0] +:limit-774 - [0:0] +:limit-775 - [0:0] +:limit-776 - [0:0] +:limit-777 - [0:0] +:limit-778 - [0:0] +:limit-779 - [0:0] +:limit-78 - [0:0] +:limit-780 - [0:0] +:limit-781 - [0:0] +:limit-782 - [0:0] +:limit-783 - [0:0] +:limit-784 - [0:0] +:limit-785 - [0:0] +:limit-786 - [0:0] +:limit-787 - [0:0] +:limit-788 - [0:0] +:limit-789 - [0:0] +:limit-79 - [0:0] +:limit-790 - [0:0] +:limit-791 - [0:0] +:limit-792 - [0:0] +:limit-793 - [0:0] +:limit-794 - [0:0] +:limit-795 - [0:0] +:limit-796 - [0:0] +:limit-797 - [0:0] +:limit-798 - [0:0] +:limit-799 - [0:0] +:limit-8 - [0:0] +:limit-80 - [0:0] +:limit-800 - [0:0] +:limit-801 - [0:0] +:limit-802 - [0:0] +:limit-803 - [0:0] +:limit-804 - [0:0] +:limit-805 - [0:0] +:limit-806 - [0:0] +:limit-807 - [0:0] +:limit-808 - [0:0] +:limit-809 - [0:0] +:limit-81 - [0:0] +:limit-810 - [0:0] +:limit-811 - [0:0] +:limit-812 - [0:0] +:limit-813 - [0:0] +:limit-814 - [0:0] +:limit-815 - [0:0] +:limit-816 - [0:0] +:limit-817 - [0:0] +:limit-818 - [0:0] +:limit-819 - [0:0] +:limit-82 - [0:0] +:limit-820 - [0:0] +:limit-821 - [0:0] +:limit-822 - [0:0] +:limit-823 - [0:0] +:limit-824 - [0:0] +:limit-825 - [0:0] +:limit-826 - [0:0] +:limit-827 - [0:0] +:limit-828 - [0:0] +:limit-829 - [0:0] +:limit-83 - [0:0] +:limit-830 - [0:0] +:limit-831 - [0:0] +:limit-832 - [0:0] +:limit-833 - [0:0] +:limit-834 - [0:0] +:limit-835 - [0:0] +:limit-836 - [0:0] +:limit-837 - [0:0] +:limit-838 - [0:0] +:limit-839 - [0:0] +:limit-84 - [0:0] +:limit-840 - [0:0] +:limit-841 - [0:0] +:limit-842 - [0:0] +:limit-843 - [0:0] +:limit-844 - [0:0] +:limit-845 - [0:0] +:limit-846 - [0:0] +:limit-847 - [0:0] +:limit-848 - [0:0] +:limit-849 - [0:0] +:limit-85 - [0:0] +:limit-850 - [0:0] +:limit-851 - [0:0] +:limit-852 - [0:0] +:limit-853 - [0:0] +:limit-854 - [0:0] +:limit-855 - [0:0] +:limit-856 - [0:0] +:limit-857 - [0:0] +:limit-858 - [0:0] +:limit-859 - [0:0] +:limit-86 - [0:0] +:limit-860 - [0:0] +:limit-861 - [0:0] +:limit-862 - [0:0] +:limit-863 - [0:0] +:limit-864 - [0:0] +:limit-865 - [0:0] +:limit-866 - [0:0] +:limit-867 - [0:0] +:limit-868 - [0:0] +:limit-869 - [0:0] +:limit-87 - [0:0] +:limit-870 - [0:0] +:limit-871 - [0:0] +:limit-872 - [0:0] +:limit-873 - [0:0] +:limit-874 - [0:0] +:limit-875 - [0:0] +:limit-876 - [0:0] +:limit-877 - [0:0] +:limit-878 - [0:0] +:limit-879 - [0:0] +:limit-88 - [0:0] +:limit-880 - [0:0] +:limit-881 - [0:0] +:limit-882 - [0:0] +:limit-883 - [0:0] +:limit-884 - [0:0] +:limit-885 - [0:0] +:limit-886 - [0:0] +:limit-887 - [0:0] +:limit-888 - [0:0] +:limit-889 - [0:0] +:limit-89 - [0:0] +:limit-890 - [0:0] +:limit-891 - [0:0] +:limit-892 - [0:0] +:limit-893 - [0:0] +:limit-894 - [0:0] +:limit-895 - [0:0] +:limit-896 - [0:0] +:limit-897 - [0:0] +:limit-898 - [0:0] +:limit-899 - [0:0] +:limit-9 - [0:0] +:limit-90 - [0:0] +:limit-900 - [0:0] +:limit-901 - [0:0] +:limit-902 - [0:0] +:limit-903 - [0:0] +:limit-904 - [0:0] +:limit-905 - [0:0] +:limit-906 - [0:0] +:limit-907 - [0:0] +:limit-908 - [0:0] +:limit-909 - [0:0] +:limit-91 - [0:0] +:limit-910 - [0:0] +:limit-911 - [0:0] +:limit-912 - [0:0] +:limit-913 - [0:0] +:limit-914 - [0:0] +:limit-915 - [0:0] +:limit-916 - [0:0] +:limit-917 - [0:0] +:limit-918 - [0:0] +:limit-919 - [0:0] +:limit-92 - [0:0] +:limit-920 - [0:0] +:limit-921 - [0:0] +:limit-922 - [0:0] +:limit-923 - [0:0] +:limit-924 - [0:0] +:limit-925 - [0:0] +:limit-926 - [0:0] +:limit-927 - [0:0] +:limit-928 - [0:0] +:limit-929 - [0:0] +:limit-93 - [0:0] +:limit-930 - [0:0] +:limit-931 - [0:0] +:limit-932 - [0:0] +:limit-933 - [0:0] +:limit-934 - [0:0] +:limit-935 - [0:0] +:limit-936 - [0:0] +:limit-937 - [0:0] +:limit-938 - [0:0] +:limit-939 - [0:0] +:limit-94 - [0:0] +:limit-940 - [0:0] +:limit-941 - [0:0] +:limit-942 - [0:0] +:limit-943 - [0:0] +:limit-944 - [0:0] +:limit-945 - [0:0] +:limit-946 - [0:0] +:limit-947 - [0:0] +:limit-948 - [0:0] +:limit-949 - [0:0] +:limit-95 - [0:0] +:limit-950 - [0:0] +:limit-951 - [0:0] +:limit-952 - [0:0] +:limit-953 - [0:0] +:limit-954 - [0:0] +:limit-955 - [0:0] +:limit-956 - [0:0] +:limit-957 - [0:0] +:limit-958 - [0:0] +:limit-959 - [0:0] +:limit-96 - [0:0] +:limit-960 - [0:0] +:limit-961 - [0:0] +:limit-962 - [0:0] +:limit-963 - [0:0] +:limit-964 - [0:0] +:limit-965 - [0:0] +:limit-966 - [0:0] +:limit-967 - [0:0] +:limit-968 - [0:0] +:limit-969 - [0:0] +:limit-97 - [0:0] +:limit-970 - [0:0] +:limit-971 - [0:0] +:limit-972 - [0:0] +:limit-973 - [0:0] +:limit-974 - [0:0] +:limit-975 - [0:0] +:limit-976 - [0:0] +:limit-977 - [0:0] +:limit-978 - [0:0] +:limit-979 - [0:0] +:limit-98 - [0:0] +:limit-980 - [0:0] +:limit-981 - [0:0] +:limit-982 - [0:0] +:limit-983 - [0:0] +:limit-984 - [0:0] +:limit-985 - [0:0] +:limit-986 - [0:0] +:limit-987 - [0:0] +:limit-988 - [0:0] +:limit-989 - [0:0] +:limit-99 - [0:0] +:limit-990 - [0:0] +:limit-991 - [0:0] +:limit-992 - [0:0] +:limit-993 - [0:0] +:limit-994 - [0:0] +:limit-995 - [0:0] +:limit-996 - [0:0] +:limit-997 - [0:0] +:limit-998 - [0:0] +:limit-999 - [0:0] +:logaccept-0 - [0:0] +:logaccept-1 - [0:0] +:logaccept-10 - [0:0] +:logaccept-11 - [0:0] +:logaccept-12 - [0:0] +:logaccept-13 - [0:0] +:logaccept-14 - [0:0] +:logaccept-15 - [0:0] +:logaccept-16 - [0:0] +:logaccept-17 - [0:0] +:logaccept-18 - [0:0] +:logaccept-19 - [0:0] +:logaccept-2 - [0:0] +:logaccept-20 - [0:0] +:logaccept-21 - [0:0] +:logaccept-3 - [0:0] +:logaccept-4 - [0:0] +:logaccept-5 - [0:0] +:logaccept-6 - [0:0] +:logaccept-7 - [0:0] +:logaccept-8 - [0:0] +:logaccept-9 - [0:0] +:logaccept-final-0 - [0:0] +:logaccept-final-1 - [0:0] +:logaccept-final-10 - [0:0] +:logaccept-final-11 - [0:0] +:logaccept-final-12 - [0:0] +:logaccept-final-13 - [0:0] +:logaccept-final-14 - [0:0] +:logaccept-final-15 - [0:0] +:logaccept-final-16 - [0:0] +:logaccept-final-17 - [0:0] +:logaccept-final-18 - [0:0] +:logaccept-final-19 - [0:0] +:logaccept-final-2 - [0:0] +:logaccept-final-20 - [0:0] +:logaccept-final-21 - [0:0] +:logaccept-final-22 - [0:0] +:logaccept-final-23 - [0:0] +:logaccept-final-24 - [0:0] +:logaccept-final-25 - [0:0] +:logaccept-final-26 - [0:0] +:logaccept-final-27 - [0:0] +:logaccept-final-28 - [0:0] +:logaccept-final-29 - [0:0] +:logaccept-final-3 - [0:0] +:logaccept-final-30 - [0:0] +:logaccept-final-31 - [0:0] +:logaccept-final-32 - [0:0] +:logaccept-final-33 - [0:0] +:logaccept-final-34 - [0:0] +:logaccept-final-35 - [0:0] +:logaccept-final-36 - [0:0] +:logaccept-final-37 - [0:0] +:logaccept-final-38 - [0:0] +:logaccept-final-39 - [0:0] +:logaccept-final-4 - [0:0] +:logaccept-final-40 - [0:0] +:logaccept-final-41 - [0:0] +:logaccept-final-42 - [0:0] +:logaccept-final-43 - [0:0] +:logaccept-final-44 - [0:0] +:logaccept-final-45 - [0:0] +:logaccept-final-46 - [0:0] +:logaccept-final-47 - [0:0] +:logaccept-final-48 - [0:0] +:logaccept-final-49 - [0:0] +:logaccept-final-5 - [0:0] +:logaccept-final-50 - [0:0] +:logaccept-final-51 - [0:0] +:logaccept-final-52 - [0:0] +:logaccept-final-53 - [0:0] +:logaccept-final-54 - [0:0] +:logaccept-final-55 - [0:0] +:logaccept-final-56 - [0:0] +:logaccept-final-57 - [0:0] +:logaccept-final-58 - [0:0] +:logaccept-final-59 - [0:0] +:logaccept-final-6 - [0:0] +:logaccept-final-60 - [0:0] +:logaccept-final-61 - [0:0] +:logaccept-final-7 - [0:0] +:logaccept-final-8 - [0:0] +:logaccept-final-9 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logdrop-10 - [0:0] +:logdrop-100 - [0:0] +:logdrop-101 - [0:0] +:logdrop-102 - [0:0] +:logdrop-103 - [0:0] +:logdrop-104 - [0:0] +:logdrop-105 - [0:0] +:logdrop-106 - [0:0] +:logdrop-107 - [0:0] +:logdrop-108 - [0:0] +:logdrop-109 - [0:0] +:logdrop-11 - [0:0] +:logdrop-110 - [0:0] +:logdrop-111 - [0:0] +:logdrop-112 - [0:0] +:logdrop-113 - [0:0] +:logdrop-114 - [0:0] +:logdrop-115 - [0:0] +:logdrop-116 - [0:0] +:logdrop-117 - [0:0] +:logdrop-118 - [0:0] +:logdrop-119 - [0:0] +:logdrop-12 - [0:0] +:logdrop-120 - [0:0] +:logdrop-121 - [0:0] +:logdrop-122 - [0:0] +:logdrop-123 - [0:0] +:logdrop-124 - [0:0] +:logdrop-125 - [0:0] +:logdrop-126 - [0:0] +:logdrop-127 - [0:0] +:logdrop-128 - [0:0] +:logdrop-129 - [0:0] +:logdrop-13 - [0:0] +:logdrop-130 - [0:0] +:logdrop-131 - [0:0] +:logdrop-132 - [0:0] +:logdrop-133 - [0:0] +:logdrop-134 - [0:0] +:logdrop-135 - [0:0] +:logdrop-136 - [0:0] +:logdrop-137 - [0:0] +:logdrop-138 - [0:0] +:logdrop-139 - [0:0] +:logdrop-14 - [0:0] +:logdrop-140 - [0:0] +:logdrop-141 - [0:0] +:logdrop-142 - [0:0] +:logdrop-143 - [0:0] +:logdrop-144 - [0:0] +:logdrop-145 - [0:0] +:logdrop-146 - [0:0] +:logdrop-147 - [0:0] +:logdrop-148 - [0:0] +:logdrop-149 - [0:0] +:logdrop-15 - [0:0] +:logdrop-150 - [0:0] +:logdrop-151 - [0:0] +:logdrop-152 - [0:0] +:logdrop-153 - [0:0] +:logdrop-154 - [0:0] +:logdrop-155 - [0:0] +:logdrop-156 - [0:0] +:logdrop-157 - [0:0] +:logdrop-158 - [0:0] +:logdrop-159 - [0:0] +:logdrop-16 - [0:0] +:logdrop-160 - [0:0] +:logdrop-161 - [0:0] +:logdrop-162 - [0:0] +:logdrop-163 - [0:0] +:logdrop-164 - [0:0] +:logdrop-165 - [0:0] +:logdrop-166 - [0:0] +:logdrop-167 - [0:0] +:logdrop-168 - [0:0] +:logdrop-169 - [0:0] +:logdrop-17 - [0:0] +:logdrop-170 - [0:0] +:logdrop-171 - [0:0] +:logdrop-172 - [0:0] +:logdrop-173 - [0:0] +:logdrop-174 - [0:0] +:logdrop-175 - [0:0] +:logdrop-176 - [0:0] +:logdrop-177 - [0:0] +:logdrop-178 - [0:0] +:logdrop-179 - [0:0] +:logdrop-18 - [0:0] +:logdrop-180 - [0:0] +:logdrop-181 - [0:0] +:logdrop-182 - [0:0] +:logdrop-183 - [0:0] +:logdrop-184 - [0:0] +:logdrop-185 - [0:0] +:logdrop-186 - [0:0] +:logdrop-187 - [0:0] +:logdrop-188 - [0:0] +:logdrop-189 - [0:0] +:logdrop-19 - [0:0] +:logdrop-190 - [0:0] +:logdrop-191 - [0:0] +:logdrop-192 - [0:0] +:logdrop-193 - [0:0] +:logdrop-194 - [0:0] +:logdrop-195 - [0:0] +:logdrop-196 - [0:0] +:logdrop-197 - [0:0] +:logdrop-198 - [0:0] +:logdrop-199 - [0:0] +:logdrop-2 - [0:0] +:logdrop-20 - [0:0] +:logdrop-200 - [0:0] +:logdrop-201 - [0:0] +:logdrop-202 - [0:0] +:logdrop-203 - [0:0] +:logdrop-204 - [0:0] +:logdrop-205 - [0:0] +:logdrop-206 - [0:0] +:logdrop-207 - [0:0] +:logdrop-208 - [0:0] +:logdrop-209 - [0:0] +:logdrop-21 - [0:0] +:logdrop-210 - [0:0] +:logdrop-211 - [0:0] +:logdrop-212 - [0:0] +:logdrop-213 - [0:0] +:logdrop-214 - [0:0] +:logdrop-215 - [0:0] +:logdrop-216 - [0:0] +:logdrop-217 - [0:0] +:logdrop-218 - [0:0] +:logdrop-219 - [0:0] +:logdrop-22 - [0:0] +:logdrop-220 - [0:0] +:logdrop-221 - [0:0] +:logdrop-222 - [0:0] +:logdrop-223 - [0:0] +:logdrop-224 - [0:0] +:logdrop-225 - [0:0] +:logdrop-226 - [0:0] +:logdrop-227 - [0:0] +:logdrop-228 - [0:0] +:logdrop-229 - [0:0] +:logdrop-23 - [0:0] +:logdrop-230 - [0:0] +:logdrop-231 - [0:0] +:logdrop-232 - [0:0] +:logdrop-233 - [0:0] +:logdrop-234 - [0:0] +:logdrop-235 - [0:0] +:logdrop-236 - [0:0] +:logdrop-237 - [0:0] +:logdrop-238 - [0:0] +:logdrop-239 - [0:0] +:logdrop-24 - [0:0] +:logdrop-240 - [0:0] +:logdrop-241 - [0:0] +:logdrop-242 - [0:0] +:logdrop-243 - [0:0] +:logdrop-244 - [0:0] +:logdrop-245 - [0:0] +:logdrop-246 - [0:0] +:logdrop-247 - [0:0] +:logdrop-248 - [0:0] +:logdrop-249 - [0:0] +:logdrop-25 - [0:0] +:logdrop-250 - [0:0] +:logdrop-251 - [0:0] +:logdrop-252 - [0:0] +:logdrop-253 - [0:0] +:logdrop-254 - [0:0] +:logdrop-255 - [0:0] +:logdrop-256 - [0:0] +:logdrop-257 - [0:0] +:logdrop-258 - [0:0] +:logdrop-259 - [0:0] +:logdrop-26 - [0:0] +:logdrop-260 - [0:0] +:logdrop-261 - [0:0] +:logdrop-262 - [0:0] +:logdrop-263 - [0:0] +:logdrop-264 - [0:0] +:logdrop-265 - [0:0] +:logdrop-266 - [0:0] +:logdrop-267 - [0:0] +:logdrop-268 - [0:0] +:logdrop-269 - [0:0] +:logdrop-27 - [0:0] +:logdrop-270 - [0:0] +:logdrop-271 - [0:0] +:logdrop-272 - [0:0] +:logdrop-273 - [0:0] +:logdrop-274 - [0:0] +:logdrop-275 - [0:0] +:logdrop-276 - [0:0] +:logdrop-277 - [0:0] +:logdrop-278 - [0:0] +:logdrop-279 - [0:0] +:logdrop-28 - [0:0] +:logdrop-280 - [0:0] +:logdrop-281 - [0:0] +:logdrop-282 - [0:0] +:logdrop-283 - [0:0] +:logdrop-284 - [0:0] +:logdrop-285 - [0:0] +:logdrop-286 - [0:0] +:logdrop-287 - [0:0] +:logdrop-288 - [0:0] +:logdrop-289 - [0:0] +:logdrop-29 - [0:0] +:logdrop-290 - [0:0] +:logdrop-291 - [0:0] +:logdrop-292 - [0:0] +:logdrop-293 - [0:0] +:logdrop-294 - [0:0] +:logdrop-295 - [0:0] +:logdrop-296 - [0:0] +:logdrop-297 - [0:0] +:logdrop-298 - [0:0] +:logdrop-299 - [0:0] +:logdrop-3 - [0:0] +:logdrop-30 - [0:0] +:logdrop-300 - [0:0] +:logdrop-301 - [0:0] +:logdrop-302 - [0:0] +:logdrop-303 - [0:0] +:logdrop-304 - [0:0] +:logdrop-305 - [0:0] +:logdrop-306 - [0:0] +:logdrop-307 - [0:0] +:logdrop-308 - [0:0] +:logdrop-309 - [0:0] +:logdrop-31 - [0:0] +:logdrop-310 - [0:0] +:logdrop-311 - [0:0] +:logdrop-312 - [0:0] +:logdrop-313 - [0:0] +:logdrop-314 - [0:0] +:logdrop-315 - [0:0] +:logdrop-316 - [0:0] +:logdrop-317 - [0:0] +:logdrop-318 - [0:0] +:logdrop-319 - [0:0] +:logdrop-32 - [0:0] +:logdrop-320 - [0:0] +:logdrop-321 - [0:0] +:logdrop-322 - [0:0] +:logdrop-323 - [0:0] +:logdrop-324 - [0:0] +:logdrop-325 - [0:0] +:logdrop-326 - [0:0] +:logdrop-327 - [0:0] +:logdrop-328 - [0:0] +:logdrop-329 - [0:0] +:logdrop-33 - [0:0] +:logdrop-330 - [0:0] +:logdrop-331 - [0:0] +:logdrop-332 - [0:0] +:logdrop-333 - [0:0] +:logdrop-334 - [0:0] +:logdrop-335 - [0:0] +:logdrop-336 - [0:0] +:logdrop-337 - [0:0] +:logdrop-338 - [0:0] +:logdrop-339 - [0:0] +:logdrop-34 - [0:0] +:logdrop-340 - [0:0] +:logdrop-341 - [0:0] +:logdrop-342 - [0:0] +:logdrop-343 - [0:0] +:logdrop-344 - [0:0] +:logdrop-345 - [0:0] +:logdrop-346 - [0:0] +:logdrop-347 - [0:0] +:logdrop-348 - [0:0] +:logdrop-349 - [0:0] +:logdrop-35 - [0:0] +:logdrop-350 - [0:0] +:logdrop-351 - [0:0] +:logdrop-352 - [0:0] +:logdrop-353 - [0:0] +:logdrop-354 - [0:0] +:logdrop-355 - [0:0] +:logdrop-356 - [0:0] +:logdrop-357 - [0:0] +:logdrop-358 - [0:0] +:logdrop-359 - [0:0] +:logdrop-36 - [0:0] +:logdrop-360 - [0:0] +:logdrop-361 - [0:0] +:logdrop-362 - [0:0] +:logdrop-363 - [0:0] +:logdrop-364 - [0:0] +:logdrop-365 - [0:0] +:logdrop-366 - [0:0] +:logdrop-367 - [0:0] +:logdrop-368 - [0:0] +:logdrop-369 - [0:0] +:logdrop-37 - [0:0] +:logdrop-370 - [0:0] +:logdrop-371 - [0:0] +:logdrop-372 - [0:0] +:logdrop-373 - [0:0] +:logdrop-374 - [0:0] +:logdrop-375 - [0:0] +:logdrop-376 - [0:0] +:logdrop-377 - [0:0] +:logdrop-378 - [0:0] +:logdrop-379 - [0:0] +:logdrop-38 - [0:0] +:logdrop-380 - [0:0] +:logdrop-381 - [0:0] +:logdrop-382 - [0:0] +:logdrop-383 - [0:0] +:logdrop-384 - [0:0] +:logdrop-385 - [0:0] +:logdrop-386 - [0:0] +:logdrop-387 - [0:0] +:logdrop-388 - [0:0] +:logdrop-389 - [0:0] +:logdrop-39 - [0:0] +:logdrop-390 - [0:0] +:logdrop-391 - [0:0] +:logdrop-392 - [0:0] +:logdrop-393 - [0:0] +:logdrop-394 - [0:0] +:logdrop-395 - [0:0] +:logdrop-396 - [0:0] +:logdrop-397 - [0:0] +:logdrop-398 - [0:0] +:logdrop-399 - [0:0] +:logdrop-4 - [0:0] +:logdrop-40 - [0:0] +:logdrop-400 - [0:0] +:logdrop-401 - [0:0] +:logdrop-402 - [0:0] +:logdrop-403 - [0:0] +:logdrop-404 - [0:0] +:logdrop-405 - [0:0] +:logdrop-406 - [0:0] +:logdrop-407 - [0:0] +:logdrop-408 - [0:0] +:logdrop-409 - [0:0] +:logdrop-41 - [0:0] +:logdrop-410 - [0:0] +:logdrop-411 - [0:0] +:logdrop-412 - [0:0] +:logdrop-413 - [0:0] +:logdrop-414 - [0:0] +:logdrop-415 - [0:0] +:logdrop-416 - [0:0] +:logdrop-417 - [0:0] +:logdrop-418 - [0:0] +:logdrop-419 - [0:0] +:logdrop-42 - [0:0] +:logdrop-420 - [0:0] +:logdrop-421 - [0:0] +:logdrop-422 - [0:0] +:logdrop-423 - [0:0] +:logdrop-424 - [0:0] +:logdrop-425 - [0:0] +:logdrop-426 - [0:0] +:logdrop-427 - [0:0] +:logdrop-428 - [0:0] +:logdrop-429 - [0:0] +:logdrop-43 - [0:0] +:logdrop-430 - [0:0] +:logdrop-431 - [0:0] +:logdrop-432 - [0:0] +:logdrop-433 - [0:0] +:logdrop-434 - [0:0] +:logdrop-435 - [0:0] +:logdrop-436 - [0:0] +:logdrop-437 - [0:0] +:logdrop-438 - [0:0] +:logdrop-439 - [0:0] +:logdrop-44 - [0:0] +:logdrop-440 - [0:0] +:logdrop-441 - [0:0] +:logdrop-442 - [0:0] +:logdrop-443 - [0:0] +:logdrop-444 - [0:0] +:logdrop-445 - [0:0] +:logdrop-446 - [0:0] +:logdrop-447 - [0:0] +:logdrop-448 - [0:0] +:logdrop-449 - [0:0] +:logdrop-45 - [0:0] +:logdrop-450 - [0:0] +:logdrop-451 - [0:0] +:logdrop-452 - [0:0] +:logdrop-453 - [0:0] +:logdrop-454 - [0:0] +:logdrop-455 - [0:0] +:logdrop-456 - [0:0] +:logdrop-457 - [0:0] +:logdrop-46 - [0:0] +:logdrop-47 - [0:0] +:logdrop-48 - [0:0] +:logdrop-49 - [0:0] +:logdrop-5 - [0:0] +:logdrop-50 - [0:0] +:logdrop-51 - [0:0] +:logdrop-52 - [0:0] +:logdrop-53 - [0:0] +:logdrop-54 - [0:0] +:logdrop-55 - [0:0] +:logdrop-56 - [0:0] +:logdrop-57 - [0:0] +:logdrop-58 - [0:0] +:logdrop-59 - [0:0] +:logdrop-6 - [0:0] +:logdrop-60 - [0:0] +:logdrop-61 - [0:0] +:logdrop-62 - [0:0] +:logdrop-63 - [0:0] +:logdrop-64 - [0:0] +:logdrop-65 - [0:0] +:logdrop-66 - [0:0] +:logdrop-67 - [0:0] +:logdrop-68 - [0:0] +:logdrop-69 - [0:0] +:logdrop-7 - [0:0] +:logdrop-70 - [0:0] +:logdrop-71 - [0:0] +:logdrop-72 - [0:0] +:logdrop-73 - [0:0] +:logdrop-74 - [0:0] +:logdrop-75 - [0:0] +:logdrop-76 - [0:0] +:logdrop-77 - [0:0] +:logdrop-78 - [0:0] +:logdrop-79 - [0:0] +:logdrop-8 - [0:0] +:logdrop-80 - [0:0] +:logdrop-81 - [0:0] +:logdrop-82 - [0:0] +:logdrop-83 - [0:0] +:logdrop-84 - [0:0] +:logdrop-85 - [0:0] +:logdrop-86 - [0:0] +:logdrop-87 - [0:0] +:logdrop-88 - [0:0] +:logdrop-89 - [0:0] +:logdrop-9 - [0:0] +:logdrop-90 - [0:0] +:logdrop-91 - [0:0] +:logdrop-92 - [0:0] +:logdrop-93 - [0:0] +:logdrop-94 - [0:0] +:logdrop-95 - [0:0] +:logdrop-96 - [0:0] +:logdrop-97 - [0:0] +:logdrop-98 - [0:0] +:logdrop-99 - [0:0] +:logpass-0 - [0:0] +-A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -j limit-1073 +-A FORWARD -j limit-1072 +-A FORWARD -j limit-1071 +-A FORWARD -j limit-1070 +-A FORWARD -j limit-1069 +-A FORWARD -j limit-1068 +-A FORWARD -j limit-1067 +-A FORWARD -j limit-1066 +-A FORWARD -j limit-1065 +-A FORWARD -j limit-1064 +-A FORWARD -j limit-1063 +-A FORWARD -j limit-1062 +-A FORWARD -j limit-1061 +-A FORWARD -j limit-1060 +-A FORWARD -j limit-1059 +-A FORWARD -j limit-1058 +-A FORWARD -j limit-1057 +-A FORWARD -j limit-1056 +-A FORWARD -j limit-1055 +-A FORWARD -j limit-1054 +-A FORWARD -j limit-1053 +-A FORWARD -j limit-1052 +-A FORWARD -j limit-1051 +-A FORWARD -j limit-1050 +-A FORWARD -j limit-1049 +-A FORWARD -j limit-1048 +-A FORWARD -j limit-1047 +-A FORWARD -j limit-1046 +-A FORWARD -j limit-1045 +-A FORWARD -j limit-1044 +-A FORWARD -j limit-1043 +-A FORWARD -j limit-1042 +-A FORWARD -j limit-1041 +-A FORWARD -j limit-1040 +-A FORWARD -j limit-1039 +-A FORWARD -j limit-1038 +-A FORWARD -j limit-1037 +-A FORWARD -j limit-1036 +-A FORWARD -j limit-1035 +-A FORWARD -j limit-1034 +-A FORWARD -j limit-1033 +-A FORWARD -j limit-1032 +-A FORWARD -j limit-1031 +-A FORWARD -j limit-1030 +-A FORWARD -j limit-1029 +-A FORWARD -j limit-1028 +-A FORWARD -j limit-1027 +-A FORWARD -j limit-1026 +-A FORWARD -j limit-1025 +-A FORWARD -j limit-1024 +-A FORWARD -j limit-1023 +-A FORWARD -j limit-1022 +-A FORWARD -j limit-1021 +-A FORWARD -j limit-1020 +-A FORWARD -j limit-1019 +-A FORWARD -j limit-1018 +-A FORWARD -j limit-1017 +-A FORWARD -j limit-1016 +-A FORWARD -j limit-1015 +-A FORWARD -j limit-1014 +-A FORWARD -j limit-1013 +-A FORWARD -j limit-1012 +-A FORWARD -j limit-1011 +-A FORWARD -j limit-1010 +-A FORWARD -j limit-1009 +-A FORWARD -j limit-1008 +-A FORWARD -j limit-1007 +-A FORWARD -j limit-1006 +-A FORWARD -j limit-1005 +-A FORWARD -j limit-1004 +-A FORWARD -j limit-1003 +-A FORWARD -j limit-1002 +-A FORWARD -j limit-1001 +-A FORWARD -j limit-1000 +-A FORWARD -j limit-999 +-A FORWARD -j limit-998 +-A FORWARD -j limit-997 +-A FORWARD -j limit-996 +-A FORWARD -j limit-995 +-A FORWARD -j limit-994 +-A FORWARD -j limit-993 +-A FORWARD -j limit-992 +-A FORWARD -j limit-991 +-A FORWARD -j limit-990 +-A FORWARD -j limit-989 +-A FORWARD -j limit-988 +-A FORWARD -j limit-987 +-A FORWARD -j limit-986 +-A FORWARD -j limit-985 +-A FORWARD -j limit-984 +-A FORWARD -j limit-983 +-A FORWARD -j limit-982 +-A FORWARD -j limit-981 +-A FORWARD -j limit-980 +-A FORWARD -j limit-979 +-A FORWARD -j limit-978 +-A FORWARD -j limit-977 +-A FORWARD -j limit-976 +-A FORWARD -j limit-975 +-A FORWARD -j limit-974 +-A FORWARD -j limit-973 +-A FORWARD -j limit-972 +-A FORWARD -j limit-971 +-A FORWARD -j limit-970 +-A FORWARD -j limit-969 +-A FORWARD -j limit-968 +-A FORWARD -j limit-967 +-A FORWARD -j limit-966 +-A FORWARD -j limit-965 +-A FORWARD -j limit-964 +-A FORWARD -j limit-963 +-A FORWARD -j limit-962 +-A FORWARD -j limit-961 +-A FORWARD -j limit-960 +-A FORWARD -j limit-959 +-A FORWARD -j limit-958 +-A FORWARD -j limit-957 +-A FORWARD -j limit-956 +-A FORWARD -j limit-955 +-A FORWARD -j limit-954 +-A FORWARD -j limit-953 +-A FORWARD -j limit-952 +-A FORWARD -j limit-951 +-A FORWARD -j limit-950 +-A FORWARD -j limit-949 +-A FORWARD -j limit-948 +-A FORWARD -j limit-947 +-A FORWARD -j limit-946 +-A FORWARD -j limit-945 +-A FORWARD -j limit-944 +-A FORWARD -j limit-943 +-A FORWARD -j limit-942 +-A FORWARD -j limit-941 +-A FORWARD -j limit-940 +-A FORWARD -j limit-939 +-A FORWARD -j limit-938 +-A FORWARD -j limit-937 +-A FORWARD -j limit-936 +-A FORWARD -j limit-935 +-A FORWARD -j limit-934 +-A FORWARD -j limit-933 +-A FORWARD -j limit-932 +-A FORWARD -j limit-931 +-A FORWARD -j limit-930 +-A FORWARD -j limit-929 +-A FORWARD -j limit-928 +-A FORWARD -j limit-927 +-A FORWARD -j limit-926 +-A FORWARD -j limit-925 +-A FORWARD -j limit-924 +-A FORWARD -j limit-923 +-A FORWARD -j limit-922 +-A FORWARD -j limit-921 +-A FORWARD -j limit-920 +-A FORWARD -j limit-919 +-A FORWARD -j limit-918 +-A FORWARD -j limit-917 +-A FORWARD -j limit-916 +-A FORWARD -j limit-915 +-A FORWARD -j limit-914 +-A FORWARD -j limit-913 +-A FORWARD -j limit-912 +-A FORWARD -j limit-911 +-A FORWARD -j limit-910 +-A FORWARD -j limit-909 +-A FORWARD -j limit-908 +-A FORWARD -j limit-907 +-A FORWARD -j limit-906 +-A FORWARD -j limit-905 +-A FORWARD -j limit-904 +-A FORWARD -j limit-903 +-A FORWARD -j limit-902 +-A FORWARD -j limit-901 +-A FORWARD -j limit-900 +-A FORWARD -j limit-899 +-A FORWARD -j limit-898 +-A FORWARD -j limit-897 +-A FORWARD -j limit-896 +-A FORWARD -j limit-895 +-A FORWARD -j limit-894 +-A FORWARD -j limit-893 +-A FORWARD -j limit-892 +-A FORWARD -j limit-891 +-A FORWARD -j limit-890 +-A FORWARD -j limit-889 +-A FORWARD -j limit-888 +-A FORWARD -j limit-887 +-A FORWARD -j limit-886 +-A FORWARD -j limit-885 +-A FORWARD -j limit-884 +-A FORWARD -j limit-883 +-A FORWARD -j limit-882 +-A FORWARD -j limit-881 +-A FORWARD -j limit-880 +-A FORWARD -j limit-879 +-A FORWARD -j limit-878 +-A FORWARD -j limit-877 +-A FORWARD -j limit-876 +-A FORWARD -j limit-875 +-A FORWARD -j limit-874 +-A FORWARD -j limit-873 +-A FORWARD -j limit-872 +-A FORWARD -j limit-871 +-A FORWARD -j limit-870 +-A FORWARD -j limit-869 +-A FORWARD -j limit-868 +-A FORWARD -j limit-867 +-A FORWARD -j limit-866 +-A FORWARD -j limit-865 +-A FORWARD -j limit-864 +-A FORWARD -j limit-863 +-A FORWARD -j limit-862 +-A FORWARD -j limit-861 +-A FORWARD -j limit-860 +-A FORWARD -j limit-859 +-A FORWARD -j limit-858 +-A FORWARD -j limit-857 +-A FORWARD -j limit-856 +-A FORWARD -j limit-855 +-A FORWARD -j limit-854 +-A FORWARD -j limit-853 +-A FORWARD -j limit-852 +-A FORWARD -j limit-851 +-A FORWARD -j limit-850 +-A FORWARD -j limit-849 +-A FORWARD -j limit-848 +-A FORWARD -j limit-847 +-A FORWARD -j limit-846 +-A FORWARD -j limit-845 +-A FORWARD -j limit-844 +-A FORWARD -j limit-843 +-A FORWARD -j limit-842 +-A FORWARD -j limit-841 +-A FORWARD -j limit-840 +-A FORWARD -j limit-839 +-A FORWARD -j limit-838 +-A FORWARD -j limit-837 +-A FORWARD -j limit-836 +-A FORWARD -j limit-835 +-A FORWARD -j limit-834 +-A FORWARD -j limit-833 +-A FORWARD -j limit-832 +-A FORWARD -j limit-831 +-A FORWARD -j limit-830 +-A FORWARD -j limit-829 +-A FORWARD -j limit-828 +-A FORWARD -j limit-827 +-A FORWARD -j limit-826 +-A FORWARD -j limit-825 +-A FORWARD -j limit-824 +-A FORWARD -j limit-823 +-A FORWARD -j limit-822 +-A FORWARD -j limit-821 +-A FORWARD -j limit-820 +-A FORWARD -j limit-819 +-A FORWARD -j limit-818 +-A FORWARD -j limit-817 +-A FORWARD -j limit-816 +-A FORWARD -j limit-815 +-A FORWARD -j limit-814 +-A FORWARD -j limit-813 +-A FORWARD -j limit-812 +-A FORWARD -j limit-811 +-A FORWARD -j limit-810 +-A FORWARD -j limit-809 +-A FORWARD -j limit-808 +-A FORWARD -j limit-807 +-A FORWARD -j limit-806 +-A FORWARD -j limit-805 +-A FORWARD -j limit-804 +-A FORWARD -j limit-803 +-A FORWARD -j limit-802 +-A FORWARD -j limit-801 +-A FORWARD -j limit-800 +-A FORWARD -j limit-799 +-A FORWARD -j limit-798 +-A FORWARD -j limit-797 +-A FORWARD -j limit-796 +-A FORWARD -j limit-795 +-A FORWARD -j limit-794 +-A FORWARD -j limit-793 +-A FORWARD -j limit-792 +-A FORWARD -j limit-791 +-A FORWARD -j limit-790 +-A FORWARD -j limit-789 +-A FORWARD -j limit-788 +-A FORWARD -j limit-787 +-A FORWARD -j limit-786 +-A FORWARD -j limit-785 +-A FORWARD -j limit-784 +-A FORWARD -j limit-783 +-A FORWARD -j limit-782 +-A FORWARD -j limit-781 +-A FORWARD -j limit-780 +-A FORWARD -j limit-779 +-A FORWARD -j limit-778 +-A FORWARD -j limit-777 +-A FORWARD -j limit-776 +-A FORWARD -j limit-775 +-A FORWARD -j limit-774 +-A FORWARD -j limit-773 +-A FORWARD -j limit-772 +-A FORWARD -j limit-771 +-A FORWARD -j limit-770 +-A FORWARD -j limit-769 +-A FORWARD -j limit-768 +-A FORWARD -j limit-767 +-A FORWARD -j limit-766 +-A FORWARD -j limit-765 +-A FORWARD -j limit-764 +-A FORWARD -j limit-763 +-A FORWARD -j limit-762 +-A FORWARD -j limit-761 +-A FORWARD -j limit-760 +-A FORWARD -j limit-759 +-A FORWARD -j limit-758 +-A FORWARD -j limit-757 +-A FORWARD -j limit-756 +-A FORWARD -j limit-755 +-A FORWARD -j limit-754 +-A FORWARD -j limit-753 +-A FORWARD -j limit-752 +-A FORWARD -j limit-751 +-A FORWARD -j limit-750 +-A FORWARD -j limit-749 +-A FORWARD -j limit-748 +-A FORWARD -j limit-747 +-A FORWARD -j limit-746 +-A FORWARD -j limit-745 +-A FORWARD -j limit-744 +-A FORWARD -j limit-743 +-A FORWARD -j limit-742 +-A FORWARD -j limit-741 +-A FORWARD -j limit-740 +-A FORWARD -j limit-739 +-A FORWARD -j limit-738 +-A FORWARD -j limit-737 +-A FORWARD -j limit-736 +-A FORWARD -j limit-735 +-A FORWARD -j limit-734 +-A FORWARD -j limit-733 +-A FORWARD -j limit-732 +-A FORWARD -j limit-731 +-A FORWARD -j limit-730 +-A FORWARD -j limit-729 +-A FORWARD -j limit-728 +-A FORWARD -j limit-727 +-A FORWARD -j limit-726 +-A FORWARD -j limit-725 +-A FORWARD -j limit-724 +-A FORWARD -j limit-723 +-A FORWARD -j limit-722 +-A FORWARD -j limit-721 +-A FORWARD -j limit-720 +-A FORWARD -j limit-719 +-A FORWARD -j limit-718 +-A FORWARD -j limit-717 +-A FORWARD -j limit-716 +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j limit-0 +-A FORWARD -o eth1 -d fc00::/7 -j limit-1 +-A FORWARD -o eth1 -d fc00::/7 -j limit-2 +-A FORWARD -o eth1 -d fc00::/7 -j limit-3 +-A FORWARD -o eth1 -d fc00::/7 -j limit-4 +-A FORWARD -o eth1 -d fc00::/7 -j limit-5 +-A FORWARD -o eth1 -d fc00::/7 -j limit-6 +-A FORWARD -o eth1 -d fc00::/7 -j limit-7 +-A FORWARD -o eth1 -d fc00::/7 -j limit-8 +-A FORWARD -o eth1 -d fc00::/7 -j limit-9 +-A FORWARD -o eth1 -d fc00::/7 -j limit-10 +-A FORWARD -o eth1 -d fc00::/7 -j limit-11 +-A FORWARD -o eth1 -d fc00::/7 -j limit-12 +-A FORWARD -o eth1 -d fc00::/7 -j limit-13 +-A FORWARD -o eth1 -d fc00::/7 -j limit-14 +-A FORWARD -o eth1 -d fc00::/7 -j limit-15 +-A FORWARD -o eth1 -d fc00::/7 -j limit-16 +-A FORWARD -o eth1 -d fc00::/7 -j limit-17 +-A FORWARD -o eth1 -d fc00::/7 -j limit-18 +-A FORWARD -o eth1 -d fc00::/7 -j limit-19 +-A FORWARD -o eth1 -d fc00::/7 -j limit-20 +-A FORWARD -o eth1 -d fc00::/7 -j limit-21 +-A FORWARD -o eth1 -d fc00::/7 -j limit-22 +-A FORWARD -o eth1 -d fc00::/7 -j limit-23 +-A FORWARD -o eth1 -d fc00::/7 -j limit-24 +-A FORWARD -o eth1 -d fc00::/7 -j limit-25 +-A FORWARD -o eth1 -d fc00::/7 -j limit-26 +-A FORWARD -o eth1 -d fc00::/7 -j limit-27 +-A FORWARD -o eth1 -d fc00::/7 -j limit-28 +-A FORWARD -o eth1 -d fc00::/7 -j limit-29 +-A FORWARD -o eth1 -d fc00::/7 -j limit-30 +-A FORWARD -o eth1 -d fc00::/7 -j limit-31 +-A FORWARD -o eth1 -d fc00::/7 -j limit-32 +-A FORWARD -o eth1 -d fc00::/7 -j limit-33 +-A FORWARD -o eth1 -d fc00::/7 -j limit-34 +-A FORWARD -o eth1 -d fc00::/7 -j limit-35 +-A FORWARD -o eth1 -d fc00::/7 -j limit-36 +-A FORWARD -o eth1 -d fc00::/7 -j limit-37 +-A FORWARD -o eth1 -d fc00::/7 -j limit-38 +-A FORWARD -o eth1 -d fc00::/7 -j limit-39 +-A FORWARD -o eth1 -d fc00::/7 -j limit-40 +-A FORWARD -o eth1 -d fc00::/7 -j limit-41 +-A FORWARD -o eth1 -d fc00::/7 -j limit-42 +-A FORWARD -o eth1 -d fc00::/7 -j limit-43 +-A FORWARD -o eth1 -d fc00::/7 -j limit-44 +-A FORWARD -o eth1 -d fc00::/7 -j limit-45 +-A FORWARD -o eth1 -d fc00::/7 -j limit-46 +-A FORWARD -o eth1 -d fc00::/7 -j limit-47 +-A FORWARD -o eth1 -d fc00::/7 -j limit-48 +-A FORWARD -o eth1 -d fc00::/7 -j limit-49 +-A FORWARD -o eth1 -d fc00::/7 -j limit-50 +-A FORWARD -o eth1 -d fc00::/7 -j limit-51 +-A FORWARD -o eth1 -d fc00::/7 -j limit-52 +-A FORWARD -o eth1 -d fc00::/7 -j limit-53 +-A FORWARD -o eth1 -d fc00::/7 -j limit-54 +-A FORWARD -o eth1 -d fc00::/7 -j limit-55 +-A FORWARD -o eth1 -d fc00::/7 -j limit-56 +-A FORWARD -o eth1 -d fc00::/7 -j limit-57 +-A FORWARD -o eth1 -d fc00::/7 -j limit-58 +-A FORWARD -o eth1 -d fc00::/7 -j limit-59 +-A FORWARD -o eth1 -d fc00::/7 -j limit-60 +-A FORWARD -o eth1 -d fc00::/7 -j limit-61 +-A FORWARD -o eth1 -d fc00::/7 -j limit-62 +-A FORWARD -o eth1 -d fc00::/7 -j limit-63 +-A FORWARD -o eth1 -d fc00::/7 -j limit-64 +-A FORWARD -o eth1 -d fc00::/7 -j limit-65 +-A FORWARD -o eth1 -d fc00::/7 -j limit-66 +-A FORWARD -o eth1 -d fc00::/7 -j limit-67 +-A FORWARD -o eth1 -d fc00::/7 -j limit-68 +-A FORWARD -o eth1 -d fc00::/7 -j limit-69 +-A FORWARD -o eth1 -d fc00::/7 -j limit-70 +-A FORWARD -o eth1 -d fc00::/7 -j limit-71 +-A FORWARD -o eth1 -d fc00::/7 -j limit-72 +-A FORWARD -o eth1 -d fc00::/7 -j limit-73 +-A FORWARD -o eth1 -d fc00::/7 -j limit-74 +-A FORWARD -o eth1 -d fc00::/7 -j limit-75 +-A FORWARD -o eth1 -d fc00::/7 -j limit-76 +-A FORWARD -o eth1 -d fc00::/7 -j limit-77 +-A FORWARD -o eth1 -d fc00::/7 -j limit-78 +-A FORWARD -o eth1 -d fc00::/7 -j limit-79 +-A FORWARD -o eth1 -d fc00::/7 -j limit-80 +-A FORWARD -o eth1 -d fc00::/7 -j limit-81 +-A FORWARD -o eth1 -d fc00::/7 -j limit-82 +-A FORWARD -o eth1 -d fc00::/7 -j limit-83 +-A FORWARD -o eth1 -d fc00::/7 -j limit-84 +-A FORWARD -o eth1 -d fc00::/7 -j limit-85 +-A FORWARD -o eth1 -d fc00::/7 -j limit-86 +-A FORWARD -o eth1 -d fc00::/7 -j limit-87 +-A FORWARD -o eth1 -d fc00::/7 -j limit-88 +-A FORWARD -o eth1 -d fc00::/7 -j limit-89 +-A FORWARD -o eth1 -d fc00::/7 -j limit-90 +-A FORWARD -o eth1 -d fc00::/7 -j limit-91 +-A FORWARD -o eth1 -d fc00::/7 -j limit-92 +-A FORWARD -o eth1 -d fc00::/7 -j limit-93 +-A FORWARD -o eth1 -d fc00::/7 -j limit-94 +-A FORWARD -o eth1 -d fc00::/7 -j limit-95 +-A FORWARD -o eth1 -d fc00::/7 -j limit-96 +-A FORWARD -o eth1 -d fc00::/7 -j limit-97 +-A FORWARD -o eth1 -d fc00::/7 -j limit-98 +-A FORWARD -o eth1 -d fc00::/7 -j limit-99 +-A FORWARD -o eth1 -d fc00::/7 -j limit-100 +-A FORWARD -o eth1 -d fc00::/7 -j limit-101 +-A FORWARD -o eth1 -d fc00::/7 -j limit-102 +-A FORWARD -o eth1 -d fc00::/7 -j limit-103 +-A FORWARD -o eth1 -d fc00::/7 -j limit-104 +-A FORWARD -o eth1 -d fc00::/7 -j limit-105 +-A FORWARD -o eth1 -d fc00::/7 -j limit-106 +-A FORWARD -o eth1 -d fc00::/7 -j limit-107 +-A FORWARD -o eth1 -d fc00::/7 -j limit-108 +-A FORWARD -o eth1 -d fc00::/7 -j limit-109 +-A FORWARD -o eth1 -d fc00::/7 -j limit-110 +-A FORWARD -o eth1 -d fc00::/7 -j limit-111 +-A FORWARD -o eth1 -d fc00::/7 -j limit-112 +-A FORWARD -o eth1 -d fc00::/7 -j limit-113 +-A FORWARD -o eth1 -d fc00::/7 -j limit-114 +-A FORWARD -o eth1 -d fc00::/7 -j limit-115 +-A FORWARD -o eth1 -d fc00::/7 -j limit-116 +-A FORWARD -o eth1 -d fc00::/7 -j limit-117 +-A FORWARD -o eth1 -d fc00::/7 -j limit-118 +-A FORWARD -o eth1 -d fc00::/7 -j limit-119 +-A FORWARD -o eth1 -d fc00::/7 -j limit-120 +-A FORWARD -o eth1 -d fc00::/7 -j limit-121 +-A FORWARD -o eth1 -d fc00::/7 -j limit-122 +-A FORWARD -o eth1 -d fc00::/7 -j limit-123 +-A FORWARD -o eth1 -d fc00::/7 -j limit-124 +-A FORWARD -o eth1 -d fc00::/7 -j limit-125 +-A FORWARD -o eth1 -d fc00::/7 -j limit-126 +-A FORWARD -o eth1 -d fc00::/7 -j limit-127 +-A FORWARD -o eth1 -d fc00::/7 -j limit-128 +-A FORWARD -o eth1 -d fc00::/7 -j limit-129 +-A FORWARD -o eth1 -d fc00::/7 -j limit-130 +-A FORWARD -o eth1 -d fc00::/7 -j limit-131 +-A FORWARD -o eth1 -d fc00::/7 -j limit-132 +-A FORWARD -o eth1 -d fc00::/7 -j limit-133 +-A FORWARD -o eth1 -d fc00::/7 -j limit-134 +-A FORWARD -o eth1 -d fc00::/7 -j limit-135 +-A FORWARD -o eth1 -d fc00::/7 -j limit-136 +-A FORWARD -o eth1 -d fc00::/7 -j limit-137 +-A FORWARD -o eth1 -d fc00::/7 -j limit-138 +-A FORWARD -o eth1 -d fc00::/7 -j limit-139 +-A FORWARD -o eth1 -d fc00::/7 -j limit-140 +-A FORWARD -o eth1 -d fc00::/7 -j limit-141 +-A FORWARD -o eth1 -d fc00::/7 -j limit-142 +-A FORWARD -o eth1 -d fc00::/7 -j limit-143 +-A FORWARD -o eth1 -d fc00::/7 -j limit-144 +-A FORWARD -o eth1 -d fc00::/7 -j limit-145 +-A FORWARD -o eth1 -d fc00::/7 -j limit-146 +-A FORWARD -o eth1 -d fc00::/7 -j limit-147 +-A FORWARD -o eth1 -d fc00::/7 -j limit-148 +-A FORWARD -o eth1 -d fc00::/7 -j limit-149 +-A FORWARD -o eth1 -d fc00::/7 -j limit-150 +-A FORWARD -o eth1 -d fc00::/7 -j limit-151 +-A FORWARD -o eth1 -d fc00::/7 -j limit-152 +-A FORWARD -o eth1 -d fc00::/7 -j limit-153 +-A FORWARD -o eth1 -d fc00::/7 -j limit-154 +-A FORWARD -o eth1 -d fc00::/7 -j limit-155 +-A FORWARD -o eth1 -d fc00::/7 -j limit-156 +-A FORWARD -o eth1 -d fc00::/7 -j limit-157 +-A FORWARD -o eth1 -d fc00::/7 -j limit-158 +-A FORWARD -o eth1 -d fc00::/7 -j limit-159 +-A FORWARD -o eth1 -d fc00::/7 -j limit-160 +-A FORWARD -o eth1 -d fc00::/7 -j limit-161 +-A FORWARD -o eth1 -d fc00::/7 -j limit-162 +-A FORWARD -o eth1 -d fc00::/7 -j limit-163 +-A FORWARD -o eth1 -d fc00::/7 -j limit-164 +-A FORWARD -o eth1 -d fc00::/7 -j limit-165 +-A FORWARD -o eth1 -d fc00::/7 -j limit-166 +-A FORWARD -o eth1 -d fc00::/7 -j limit-167 +-A FORWARD -o eth1 -d fc00::/7 -j limit-168 +-A FORWARD -o eth1 -d fc00::/7 -j limit-169 +-A FORWARD -o eth1 -d fc00::/7 -j limit-170 +-A FORWARD -o eth1 -d fc00::/7 -j limit-171 +-A FORWARD -o eth1 -d fc00::/7 -j limit-172 +-A FORWARD -o eth1 -d fc00::/7 -j limit-173 +-A FORWARD -o eth1 -d fc00::/7 -j limit-174 +-A FORWARD -o eth1 -d fc00::/7 -j limit-175 +-A FORWARD -o eth1 -d fc00::/7 -j limit-176 +-A FORWARD -o eth1 -d fc00::/7 -j limit-177 +-A FORWARD -o eth1 -d fc00::/7 -j limit-178 +-A FORWARD -o eth1 -d fc00::/7 -j limit-179 +-A FORWARD -o eth1 -d fc00::/7 -j limit-180 +-A FORWARD -o eth1 -d fc00::/7 -j limit-181 +-A FORWARD -o eth1 -d fc00::/7 -j limit-182 +-A FORWARD -o eth1 -d fc00::/7 -j limit-183 +-A FORWARD -o eth1 -d fc00::/7 -j limit-184 +-A FORWARD -o eth1 -d fc00::/7 -j limit-185 +-A FORWARD -o eth1 -d fc00::/7 -j limit-186 +-A FORWARD -o eth1 -d fc00::/7 -j limit-187 +-A FORWARD -o eth1 -d fc00::/7 -j limit-188 +-A FORWARD -o eth1 -d fc00::/7 -j limit-189 +-A FORWARD -o eth1 -d fc00::/7 -j limit-190 +-A FORWARD -o eth1 -d fc00::/7 -j limit-191 +-A FORWARD -o eth1 -d fc00::/7 -j limit-192 +-A FORWARD -o eth1 -d fc00::/7 -j limit-193 +-A FORWARD -o eth1 -d fc00::/7 -j limit-194 +-A FORWARD -o eth1 -d fc00::/7 -j limit-195 +-A FORWARD -o eth1 -d fc00::/7 -j limit-196 +-A FORWARD -o eth1 -d fc00::/7 -j limit-197 +-A FORWARD -o eth1 -d fc00::/7 -j limit-198 +-A FORWARD -o eth1 -d fc00::/7 -j limit-199 +-A FORWARD -o eth1 -d fc00::/7 -j limit-200 +-A FORWARD -o eth1 -d fc00::/7 -j limit-201 +-A FORWARD -o eth1 -d fc00::/7 -j limit-202 +-A FORWARD -o eth1 -d fc00::/7 -j limit-203 +-A FORWARD -o eth1 -d fc00::/7 -j limit-204 +-A FORWARD -o eth1 -d fc00::/7 -j limit-205 +-A FORWARD -o eth1 -d fc00::/7 -j limit-206 +-A FORWARD -o eth1 -d fc00::/7 -j limit-207 +-A FORWARD -o eth1 -d fc00::/7 -j limit-208 +-A FORWARD -o eth1 -d fc00::/7 -j limit-209 +-A FORWARD -o eth1 -d fc00::/7 -j limit-210 +-A FORWARD -o eth1 -d fc00::/7 -j limit-211 +-A FORWARD -o eth1 -d fc00::/7 -j limit-212 +-A FORWARD -o eth1 -d fc00::/7 -j limit-213 +-A FORWARD -o eth1 -d fc00::/7 -j limit-214 +-A FORWARD -o eth1 -d fc00::/7 -j limit-215 +-A FORWARD -o eth1 -d fc00::/7 -j limit-216 +-A FORWARD -o eth1 -d fc00::/7 -j limit-217 +-A FORWARD -o eth1 -d fc00::/7 -j limit-218 +-A FORWARD -o eth1 -d fc00::/7 -j limit-219 +-A FORWARD -o eth1 -d fc00::/7 -j limit-220 +-A FORWARD -o eth1 -d fc00::/7 -j limit-221 +-A FORWARD -o eth1 -d fc00::/7 -j limit-222 +-A FORWARD -o eth1 -d fc00::/7 -j limit-223 +-A FORWARD -o eth1 -d fc00::/7 -j limit-224 +-A FORWARD -o eth1 -d fc00::/7 -j limit-225 +-A FORWARD -o eth1 -d fc00::/7 -j limit-226 +-A FORWARD -o eth1 -d fc00::/7 -j limit-227 +-A FORWARD -o eth1 -d fc00::/7 -j limit-228 +-A FORWARD -o eth1 -d fc00::/7 -j limit-229 +-A FORWARD -o eth1 -d fc00::/7 -j limit-230 +-A FORWARD -o eth1 -d fc00::/7 -j limit-231 +-A FORWARD -o eth1 -d fc00::/7 -j limit-232 +-A FORWARD -o eth1 -d fc00::/7 -j limit-233 +-A FORWARD -o eth1 -d fc00::/7 -j limit-234 +-A FORWARD -o eth1 -d fc00::/7 -j limit-235 +-A FORWARD -o eth1 -d fc00::/7 -j limit-236 +-A FORWARD -o eth1 -d fc00::/7 -j limit-237 +-A FORWARD -o eth1 -d fc00::/7 -j limit-238 +-A FORWARD -o eth1 -d fc00::/7 -j limit-239 +-A FORWARD -o eth1 -d fc00::/7 -j limit-240 +-A FORWARD -o eth1 -d fc00::/7 -j limit-241 +-A FORWARD -o eth1 -d fc00::/7 -j limit-242 +-A FORWARD -o eth1 -d fc00::/7 -j limit-243 +-A FORWARD -o eth1 -d fc00::/7 -j limit-244 +-A FORWARD -o eth1 -d fc00::/7 -j limit-245 +-A FORWARD -o eth1 -d fc00::/7 -j limit-246 +-A FORWARD -o eth1 -d fc00::/7 -j limit-247 +-A FORWARD -o eth1 -d fc00::/7 -j limit-248 +-A FORWARD -o eth1 -d fc00::/7 -j limit-249 +-A FORWARD -o eth1 -d fc00::/7 -j limit-250 +-A FORWARD -o eth1 -d fc00::/7 -j limit-251 +-A FORWARD -o eth1 -d fc00::/7 -j limit-252 +-A FORWARD -o eth1 -d fc00::/7 -j limit-253 +-A FORWARD -o eth1 -d fc00::/7 -j limit-254 +-A FORWARD -o eth1 -d fc00::/7 -j limit-255 +-A FORWARD -o eth1 -d fc00::/7 -j limit-256 +-A FORWARD -o eth1 -d fc00::/7 -j limit-257 +-A FORWARD -o eth1 -d fc00::/7 -j limit-258 +-A FORWARD -o eth1 -d fc00::/7 -j limit-259 +-A FORWARD -o eth1 -d fc00::/7 -j limit-260 +-A FORWARD -o eth1 -d fc00::/7 -j limit-261 +-A FORWARD -o eth1 -d fc00::/7 -j limit-262 +-A FORWARD -o eth1 -d fc00::/7 -j limit-263 +-A FORWARD -o eth1 -d fc00::/7 -j limit-264 +-A FORWARD -o eth1 -d fc00::/7 -j limit-265 +-A FORWARD -o eth1 -d fc00::/7 -j limit-266 +-A FORWARD -o eth1 -d fc00::/7 -j limit-267 +-A FORWARD -o eth1 -d fc00::/7 -j limit-268 +-A FORWARD -o eth1 -d fc00::/7 -j limit-269 +-A FORWARD -o eth1 -d fc00::/7 -j limit-270 +-A FORWARD -o eth1 -d fc00::/7 -j limit-271 +-A FORWARD -o eth1 -d fc00::/7 -j limit-272 +-A FORWARD -o eth1 -d fc00::/7 -j limit-273 +-A FORWARD -o eth1 -d fc00::/7 -j limit-274 +-A FORWARD -o eth1 -d fc00::/7 -j limit-275 +-A FORWARD -o eth1 -d fc00::/7 -j limit-276 +-A FORWARD -o eth1 -d fc00::/7 -j limit-277 +-A FORWARD -o eth1 -d fc00::/7 -j limit-278 +-A FORWARD -o eth1 -d fc00::/7 -j limit-279 +-A FORWARD -o eth1 -d fc00::/7 -j limit-280 +-A FORWARD -o eth1 -d fc00::/7 -j limit-281 +-A FORWARD -o eth1 -d fc00::/7 -j limit-282 +-A FORWARD -o eth1 -d fc00::/7 -j limit-283 +-A FORWARD -o eth1 -d fc00::/7 -j limit-284 +-A FORWARD -o eth1 -d fc00::/7 -j limit-285 +-A FORWARD -o eth1 -d fc00::/7 -j limit-286 +-A FORWARD -o eth1 -d fc00::/7 -j limit-287 +-A FORWARD -o eth1 -d fc00::/7 -j limit-288 +-A FORWARD -o eth1 -d fc00::/7 -j limit-289 +-A FORWARD -o eth1 -d fc00::/7 -j limit-290 +-A FORWARD -o eth1 -d fc00::/7 -j limit-291 +-A FORWARD -o eth1 -d fc00::/7 -j limit-292 +-A FORWARD -o eth1 -d fc00::/7 -j limit-293 +-A FORWARD -o eth1 -d fc00::/7 -j limit-294 +-A FORWARD -o eth1 -d fc00::/7 -j limit-295 +-A FORWARD -o eth1 -d fc00::/7 -j limit-296 +-A FORWARD -o eth1 -d fc00::/7 -j limit-297 +-A FORWARD -o eth1 -d fc00::/7 -j limit-298 +-A FORWARD -o eth1 -d fc00::/7 -j limit-299 +-A FORWARD -o eth1 -d fc00::/7 -j limit-300 +-A FORWARD -o eth1 -d fc00::/7 -j limit-301 +-A FORWARD -o eth1 -d fc00::/7 -j limit-302 +-A FORWARD -o eth1 -d fc00::/7 -j limit-303 +-A FORWARD -o eth1 -d fc00::/7 -j limit-304 +-A FORWARD -o eth1 -d fc00::/7 -j limit-305 +-A FORWARD -o eth1 -d fc00::/7 -j limit-306 +-A FORWARD -o eth1 -d fc00::/7 -j limit-307 +-A FORWARD -o eth1 -d fc00::/7 -j limit-308 +-A FORWARD -o eth1 -d fc00::/7 -j limit-309 +-A FORWARD -o eth1 -d fc00::/7 -j limit-310 +-A FORWARD -o eth1 -d fc00::/7 -j limit-311 +-A FORWARD -o eth1 -d fc00::/7 -j limit-312 +-A FORWARD -o eth1 -d fc00::/7 -j limit-313 +-A FORWARD -o eth1 -d fc00::/7 -j limit-314 +-A FORWARD -o eth1 -d fc00::/7 -j limit-315 +-A FORWARD -o eth1 -d fc00::/7 -j limit-316 +-A FORWARD -o eth1 -d fc00::/7 -j limit-317 +-A FORWARD -o eth1 -d fc00::/7 -j limit-318 +-A FORWARD -o eth1 -d fc00::/7 -j limit-319 +-A FORWARD -o eth1 -d fc00::/7 -j limit-320 +-A FORWARD -o eth1 -d fc00::/7 -j limit-321 +-A FORWARD -o eth1 -d fc00::/7 -j limit-322 +-A FORWARD -o eth1 -d fc00::/7 -j limit-323 +-A FORWARD -o eth1 -d fc00::/7 -j limit-324 +-A FORWARD -o eth1 -d fc00::/7 -j limit-325 +-A FORWARD -o eth1 -d fc00::/7 -j limit-326 +-A FORWARD -o eth1 -d fc00::/7 -j limit-327 +-A FORWARD -o eth1 -d fc00::/7 -j limit-328 +-A FORWARD -o eth1 -d fc00::/7 -j limit-329 +-A FORWARD -o eth1 -d fc00::/7 -j limit-330 +-A FORWARD -o eth1 -d fc00::/7 -j limit-331 +-A FORWARD -o eth1 -d fc00::/7 -j limit-332 +-A FORWARD -o eth1 -d fc00::/7 -j limit-333 +-A FORWARD -o eth1 -d fc00::/7 -j limit-334 +-A FORWARD -o eth1 -d fc00::/7 -j limit-335 +-A FORWARD -o eth1 -d fc00::/7 -j limit-336 +-A FORWARD -o eth1 -d fc00::/7 -j limit-337 +-A FORWARD -o eth1 -d fc00::/7 -j limit-338 +-A FORWARD -o eth1 -d fc00::/7 -j limit-339 +-A FORWARD -o eth1 -d fc00::/7 -j limit-340 +-A FORWARD -o eth1 -d fc00::/7 -j limit-341 +-A FORWARD -o eth1 -d fc00::/7 -j limit-342 +-A FORWARD -o eth1 -d fc00::/7 -j limit-343 +-A FORWARD -o eth1 -d fc00::/7 -j limit-344 +-A FORWARD -o eth1 -d fc00::/7 -j limit-345 +-A FORWARD -o eth1 -d fc00::/7 -j limit-346 +-A FORWARD -o eth1 -d fc00::/7 -j limit-347 +-A FORWARD -o eth1 -d fc00::/7 -j limit-348 +-A FORWARD -o eth1 -d fc00::/7 -j limit-349 +-A FORWARD -o eth1 -d fc00::/7 -j limit-350 +-A FORWARD -o eth1 -d fc00::/7 -j limit-351 +-A FORWARD -o eth1 -d fc00::/7 -j limit-352 +-A FORWARD -o eth1 -d fc00::/7 -j limit-353 +-A FORWARD -o eth1 -d fc00::/7 -j limit-354 +-A FORWARD -o eth1 -d fc00::/7 -j limit-355 +-A FORWARD -o eth1 -d fc00::/7 -j limit-356 +-A FORWARD -o eth1 -d fc00::/7 -j limit-357 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-0 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-1 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-2 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-3 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-4 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-5 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-6 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-7 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-8 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-9 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-10 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-11 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-12 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-13 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-14 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-15 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-16 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-17 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-18 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-19 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-20 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-21 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-22 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-23 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-24 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-25 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-26 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-27 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-28 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-29 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-30 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-31 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-32 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-33 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-34 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-35 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-36 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-37 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-38 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-39 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-40 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-41 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-42 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-43 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-44 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-45 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-46 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-47 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-48 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-49 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-50 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-51 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-52 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-53 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-54 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-55 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-56 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-57 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-58 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-59 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-60 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-61 +-A FORWARD -j ACCEPT +-A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -m recent --name user:C --rsource --mask fe00:: --set +-A FORWARD -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set +-A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-456 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-21 +-A FORWARD -j logdrop-457 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -j limit-1073 +-A INPUT -j limit-1072 +-A INPUT -j limit-1071 +-A INPUT -j limit-1070 +-A INPUT -j limit-1069 +-A INPUT -j limit-1068 +-A INPUT -j limit-1067 +-A INPUT -j limit-1066 +-A INPUT -j limit-1065 +-A INPUT -j limit-1064 +-A INPUT -j limit-1063 +-A INPUT -j limit-1062 +-A INPUT -j limit-1061 +-A INPUT -j limit-1060 +-A INPUT -j limit-1059 +-A INPUT -j limit-1058 +-A INPUT -j limit-1057 +-A INPUT -j limit-1056 +-A INPUT -j limit-1055 +-A INPUT -j limit-1054 +-A INPUT -j limit-1053 +-A INPUT -j limit-1052 +-A INPUT -j limit-1051 +-A INPUT -j limit-1050 +-A INPUT -j limit-1049 +-A INPUT -j limit-1048 +-A INPUT -j limit-1047 +-A INPUT -j limit-1046 +-A INPUT -j limit-1045 +-A INPUT -j limit-1044 +-A INPUT -j limit-1043 +-A INPUT -j limit-1042 +-A INPUT -j limit-1041 +-A INPUT -j limit-1040 +-A INPUT -j limit-1039 +-A INPUT -j limit-1038 +-A INPUT -j limit-1037 +-A INPUT -j limit-1036 +-A INPUT -j limit-1035 +-A INPUT -j limit-1034 +-A INPUT -j limit-1033 +-A INPUT -j limit-1032 +-A INPUT -j limit-1031 +-A INPUT -j limit-1030 +-A INPUT -j limit-1029 +-A INPUT -j limit-1028 +-A INPUT -j limit-1027 +-A INPUT -j limit-1026 +-A INPUT -j limit-1025 +-A INPUT -j limit-1024 +-A INPUT -j limit-1023 +-A INPUT -j limit-1022 +-A INPUT -j limit-1021 +-A INPUT -j limit-1020 +-A INPUT -j limit-1019 +-A INPUT -j limit-1018 +-A INPUT -j limit-1017 +-A INPUT -j limit-1016 +-A INPUT -j limit-1015 +-A INPUT -j limit-1014 +-A INPUT -j limit-1013 +-A INPUT -j limit-1012 +-A INPUT -j limit-1011 +-A INPUT -j limit-1010 +-A INPUT -j limit-1009 +-A INPUT -j limit-1008 +-A INPUT -j limit-1007 +-A INPUT -j limit-1006 +-A INPUT -j limit-1005 +-A INPUT -j limit-1004 +-A INPUT -j limit-1003 +-A INPUT -j limit-1002 +-A INPUT -j limit-1001 +-A INPUT -j limit-1000 +-A INPUT -j limit-999 +-A INPUT -j limit-998 +-A INPUT -j limit-997 +-A INPUT -j limit-996 +-A INPUT -j limit-995 +-A INPUT -j limit-994 +-A INPUT -j limit-993 +-A INPUT -j limit-992 +-A INPUT -j limit-991 +-A INPUT -j limit-990 +-A INPUT -j limit-989 +-A INPUT -j limit-988 +-A INPUT -j limit-987 +-A INPUT -j limit-986 +-A INPUT -j limit-985 +-A INPUT -j limit-984 +-A INPUT -j limit-983 +-A INPUT -j limit-982 +-A INPUT -j limit-981 +-A INPUT -j limit-980 +-A INPUT -j limit-979 +-A INPUT -j limit-978 +-A INPUT -j limit-977 +-A INPUT -j limit-976 +-A INPUT -j limit-975 +-A INPUT -j limit-974 +-A INPUT -j limit-973 +-A INPUT -j limit-972 +-A INPUT -j limit-971 +-A INPUT -j limit-970 +-A INPUT -j limit-969 +-A INPUT -j limit-968 +-A INPUT -j limit-967 +-A INPUT -j limit-966 +-A INPUT -j limit-965 +-A INPUT -j limit-964 +-A INPUT -j limit-963 +-A INPUT -j limit-962 +-A INPUT -j limit-961 +-A INPUT -j limit-960 +-A INPUT -j limit-959 +-A INPUT -j limit-958 +-A INPUT -j limit-957 +-A INPUT -j limit-956 +-A INPUT -j limit-955 +-A INPUT -j limit-954 +-A INPUT -j limit-953 +-A INPUT -j limit-952 +-A INPUT -j limit-951 +-A INPUT -j limit-950 +-A INPUT -j limit-949 +-A INPUT -j limit-948 +-A INPUT -j limit-947 +-A INPUT -j limit-946 +-A INPUT -j limit-945 +-A INPUT -j limit-944 +-A INPUT -j limit-943 +-A INPUT -j limit-942 +-A INPUT -j limit-941 +-A INPUT -j limit-940 +-A INPUT -j limit-939 +-A INPUT -j limit-938 +-A INPUT -j limit-937 +-A INPUT -j limit-936 +-A INPUT -j limit-935 +-A INPUT -j limit-934 +-A INPUT -j limit-933 +-A INPUT -j limit-932 +-A INPUT -j limit-931 +-A INPUT -j limit-930 +-A INPUT -j limit-929 +-A INPUT -j limit-928 +-A INPUT -j limit-927 +-A INPUT -j limit-926 +-A INPUT -j limit-925 +-A INPUT -j limit-924 +-A INPUT -j limit-923 +-A INPUT -j limit-922 +-A INPUT -j limit-921 +-A INPUT -j limit-920 +-A INPUT -j limit-919 +-A INPUT -j limit-918 +-A INPUT -j limit-917 +-A INPUT -j limit-916 +-A INPUT -j limit-915 +-A INPUT -j limit-914 +-A INPUT -j limit-913 +-A INPUT -j limit-912 +-A INPUT -j limit-911 +-A INPUT -j limit-910 +-A INPUT -j limit-909 +-A INPUT -j limit-908 +-A INPUT -j limit-907 +-A INPUT -j limit-906 +-A INPUT -j limit-905 +-A INPUT -j limit-904 +-A INPUT -j limit-903 +-A INPUT -j limit-902 +-A INPUT -j limit-901 +-A INPUT -j limit-900 +-A INPUT -j limit-899 +-A INPUT -j limit-898 +-A INPUT -j limit-897 +-A INPUT -j limit-896 +-A INPUT -j limit-895 +-A INPUT -j limit-894 +-A INPUT -j limit-893 +-A INPUT -j limit-892 +-A INPUT -j limit-891 +-A INPUT -j limit-890 +-A INPUT -j limit-889 +-A INPUT -j limit-888 +-A INPUT -j limit-887 +-A INPUT -j limit-886 +-A INPUT -j limit-885 +-A INPUT -j limit-884 +-A INPUT -j limit-883 +-A INPUT -j limit-882 +-A INPUT -j limit-881 +-A INPUT -j limit-880 +-A INPUT -j limit-879 +-A INPUT -j limit-878 +-A INPUT -j limit-877 +-A INPUT -j limit-876 +-A INPUT -j limit-875 +-A INPUT -j limit-874 +-A INPUT -j limit-873 +-A INPUT -j limit-872 +-A INPUT -j limit-871 +-A INPUT -j limit-870 +-A INPUT -j limit-869 +-A INPUT -j limit-868 +-A INPUT -j limit-867 +-A INPUT -j limit-866 +-A INPUT -j limit-865 +-A INPUT -j limit-864 +-A INPUT -j limit-863 +-A INPUT -j limit-862 +-A INPUT -j limit-861 +-A INPUT -j limit-860 +-A INPUT -j limit-859 +-A INPUT -j limit-858 +-A INPUT -j limit-857 +-A INPUT -j limit-856 +-A INPUT -j limit-855 +-A INPUT -j limit-854 +-A INPUT -j limit-853 +-A INPUT -j limit-852 +-A INPUT -j limit-851 +-A INPUT -j limit-850 +-A INPUT -j limit-849 +-A INPUT -j limit-848 +-A INPUT -j limit-847 +-A INPUT -j limit-846 +-A INPUT -j limit-845 +-A INPUT -j limit-844 +-A INPUT -j limit-843 +-A INPUT -j limit-842 +-A INPUT -j limit-841 +-A INPUT -j limit-840 +-A INPUT -j limit-839 +-A INPUT -j limit-838 +-A INPUT -j limit-837 +-A INPUT -j limit-836 +-A INPUT -j limit-835 +-A INPUT -j limit-834 +-A INPUT -j limit-833 +-A INPUT -j limit-832 +-A INPUT -j limit-831 +-A INPUT -j limit-830 +-A INPUT -j limit-829 +-A INPUT -j limit-828 +-A INPUT -j limit-827 +-A INPUT -j limit-826 +-A INPUT -j limit-825 +-A INPUT -j limit-824 +-A INPUT -j limit-823 +-A INPUT -j limit-822 +-A INPUT -j limit-821 +-A INPUT -j limit-820 +-A INPUT -j limit-819 +-A INPUT -j limit-818 +-A INPUT -j limit-817 +-A INPUT -j limit-816 +-A INPUT -j limit-815 +-A INPUT -j limit-814 +-A INPUT -j limit-813 +-A INPUT -j limit-812 +-A INPUT -j limit-811 +-A INPUT -j limit-810 +-A INPUT -j limit-809 +-A INPUT -j limit-808 +-A INPUT -j limit-807 +-A INPUT -j limit-806 +-A INPUT -j limit-805 +-A INPUT -j limit-804 +-A INPUT -j limit-803 +-A INPUT -j limit-802 +-A INPUT -j limit-801 +-A INPUT -j limit-800 +-A INPUT -j limit-799 +-A INPUT -j limit-798 +-A INPUT -j limit-797 +-A INPUT -j limit-796 +-A INPUT -j limit-795 +-A INPUT -j limit-794 +-A INPUT -j limit-793 +-A INPUT -j limit-792 +-A INPUT -j limit-791 +-A INPUT -j limit-790 +-A INPUT -j limit-789 +-A INPUT -j limit-788 +-A INPUT -j limit-787 +-A INPUT -j limit-786 +-A INPUT -j limit-785 +-A INPUT -j limit-784 +-A INPUT -j limit-783 +-A INPUT -j limit-782 +-A INPUT -j limit-781 +-A INPUT -j limit-780 +-A INPUT -j limit-779 +-A INPUT -j limit-778 +-A INPUT -j limit-777 +-A INPUT -j limit-776 +-A INPUT -j limit-775 +-A INPUT -j limit-774 +-A INPUT -j limit-773 +-A INPUT -j limit-772 +-A INPUT -j limit-771 +-A INPUT -j limit-770 +-A INPUT -j limit-769 +-A INPUT -j limit-768 +-A INPUT -j limit-767 +-A INPUT -j limit-766 +-A INPUT -j limit-765 +-A INPUT -j limit-764 +-A INPUT -j limit-763 +-A INPUT -j limit-762 +-A INPUT -j limit-761 +-A INPUT -j limit-760 +-A INPUT -j limit-759 +-A INPUT -j limit-758 +-A INPUT -j limit-757 +-A INPUT -j limit-756 +-A INPUT -j limit-755 +-A INPUT -j limit-754 +-A INPUT -j limit-753 +-A INPUT -j limit-752 +-A INPUT -j limit-751 +-A INPUT -j limit-750 +-A INPUT -j limit-749 +-A INPUT -j limit-748 +-A INPUT -j limit-747 +-A INPUT -j limit-746 +-A INPUT -j limit-745 +-A INPUT -j limit-744 +-A INPUT -j limit-743 +-A INPUT -j limit-742 +-A INPUT -j limit-741 +-A INPUT -j limit-740 +-A INPUT -j limit-739 +-A INPUT -j limit-738 +-A INPUT -j limit-737 +-A INPUT -j limit-736 +-A INPUT -j limit-735 +-A INPUT -j limit-734 +-A INPUT -j limit-733 +-A INPUT -j limit-732 +-A INPUT -j limit-731 +-A INPUT -j limit-730 +-A INPUT -j limit-729 +-A INPUT -j limit-728 +-A INPUT -j limit-727 +-A INPUT -j limit-726 +-A INPUT -j limit-725 +-A INPUT -j limit-724 +-A INPUT -j limit-723 +-A INPUT -j limit-722 +-A INPUT -j limit-721 +-A INPUT -j limit-720 +-A INPUT -j limit-719 +-A INPUT -j limit-718 +-A INPUT -j limit-717 +-A INPUT -j limit-716 +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-0 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-1 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-2 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-3 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-4 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-5 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-6 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-7 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-8 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-9 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-10 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-11 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-12 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-13 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-14 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-15 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-16 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-17 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-18 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-19 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-20 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-21 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-22 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-23 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-24 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-25 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-26 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-27 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-28 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-29 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-30 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-31 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-32 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-33 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-34 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-35 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-36 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-37 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-38 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-39 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-40 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-41 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-42 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-43 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-44 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-45 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-46 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-47 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-48 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-49 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-50 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-51 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-52 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-53 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-54 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-55 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-56 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-57 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-58 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-59 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-60 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-61 +-A INPUT -j ACCEPT +-A INPUT -i eth0 -j limit-1074 +-A INPUT -i eth0 -j limit-1075 +-A INPUT -i eth0 -j limit-1076 +-A INPUT -i eth0 -j limit-1077 +-A INPUT -i eth0 -j limit-1078 +-A INPUT -i eth0 -j limit-1079 +-A INPUT -i eth0 -j limit-1080 +-A INPUT -i eth0 -j limit-1081 +-A INPUT -i eth0 -j limit-1082 +-A INPUT -i eth0 -j limit-1083 +-A INPUT -i eth0 -j limit-1084 +-A INPUT -i eth0 -j limit-1085 +-A INPUT -i eth0 -j limit-1086 +-A INPUT -i eth0 -j limit-1087 +-A INPUT -i eth0 -j limit-1088 +-A INPUT -i eth0 -j limit-1089 +-A INPUT -i eth0 -j limit-1090 +-A INPUT -i eth0 -j limit-1091 +-A INPUT -i eth0 -j limit-1092 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-361 +-A INPUT -i eth0 -j limit-1094 +-A INPUT -i eth0 -j limit-1095 +-A INPUT -i eth0 -j limit-1096 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-365 +-A INPUT -i eth0 -j limit-1098 +-A INPUT -i eth0 -j limit-1099 +-A INPUT -i eth0 -j limit-1100 +-A INPUT -i eth0 -j limit-1101 +-A INPUT -i eth0 -j limit-1102 +-A INPUT -i eth0 -j limit-1103 +-A INPUT -i eth0 -j limit-1104 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-373 +-A INPUT -i eth0 -j limit-1106 +-A INPUT -i eth0 -j limit-1107 +-A INPUT -i eth0 -j limit-1108 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-377 +-A INPUT -i eth0 -j limit-1110 +-A INPUT -i eth0 -j limit-1111 +-A INPUT -i eth0 -j limit-1112 +-A INPUT -i eth0 -j limit-1113 +-A INPUT -i eth0 -j limit-1114 +-A INPUT -i eth0 -j limit-1115 +-A INPUT -i eth0 -j limit-1116 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-385 +-A INPUT -i eth0 -j limit-1118 +-A INPUT -i eth0 -j limit-1119 +-A INPUT -i eth0 -j limit-1120 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-389 +-A INPUT -i eth0 -j limit-1122 +-A INPUT -i eth0 -j limit-1123 +-A INPUT -i eth0 -j limit-1124 +-A INPUT -i eth0 -j limit-1125 +-A INPUT -i eth0 -j limit-1126 +-A INPUT -i eth0 -j limit-1127 +-A INPUT -i eth0 -j limit-1128 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-397 +-A INPUT -i eth0 -j limit-1130 +-A INPUT -i eth0 -j limit-1131 +-A INPUT -i eth0 -j limit-1132 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-401 +-A INPUT -i eth0 -j limit-1134 +-A INPUT -i eth0 -j limit-1135 +-A INPUT -i eth0 -j limit-1136 +-A INPUT -i eth0 -j limit-1137 +-A INPUT -i eth0 -j limit-1138 +-A INPUT -i eth0 -j limit-1139 +-A INPUT -i eth0 -j limit-1140 +-A INPUT -i eth0 -j limit-1141 +-A INPUT -i eth0 -j limit-1142 +-A INPUT -i eth0 -j limit-1143 +-A INPUT -i eth0 -j limit-1144 +-A INPUT -i eth0 -j limit-1145 +-A INPUT -i eth0 -j limit-1146 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1148 +-A INPUT -i eth0 -j limit-1149 +-A INPUT -i eth0 -j limit-1150 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1152 +-A INPUT -i eth0 -j limit-1153 +-A INPUT -i eth0 -j limit-1154 +-A INPUT -i eth0 -j limit-1155 +-A INPUT -i eth0 -j limit-1156 +-A INPUT -i eth0 -j limit-1157 +-A INPUT -i eth0 -j limit-1158 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1160 +-A INPUT -i eth0 -j limit-1161 +-A INPUT -i eth0 -j limit-1162 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1164 +-A INPUT -i eth0 -j limit-1165 +-A INPUT -i eth0 -j limit-1166 +-A INPUT -i eth0 -j limit-1167 +-A INPUT -i eth0 -j limit-1168 +-A INPUT -i eth0 -j limit-1169 +-A INPUT -i eth0 -j limit-1170 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1172 +-A INPUT -i eth0 -j limit-1173 +-A INPUT -i eth0 -j limit-1174 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1176 +-A INPUT -i eth0 -j limit-1177 +-A INPUT -i eth0 -j limit-1178 +-A INPUT -i eth0 -j limit-1179 +-A INPUT -i eth0 -j limit-1180 +-A INPUT -i eth0 -j limit-1181 +-A INPUT -i eth0 -j limit-1182 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1184 +-A INPUT -i eth0 -j limit-1185 +-A INPUT -i eth0 -j limit-1186 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1188 +-A INPUT -i eth0 -j limit-1189 +-A INPUT -i eth0 -j limit-1190 +-A INPUT -i eth0 -j limit-1191 +-A INPUT -i eth0 -j limit-1192 +-A INPUT -i eth0 -j limit-1193 +-A INPUT -i eth0 -j limit-1194 +-A INPUT -i eth0 -j limit-1195 +-A INPUT -i eth0 -j limit-1196 +-A INPUT -i eth0 -j limit-1197 +-A INPUT -i eth0 -j limit-1198 +-A INPUT -i eth0 -j limit-1199 +-A INPUT -i eth0 -j limit-1200 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1202 +-A INPUT -i eth0 -j limit-1203 +-A INPUT -i eth0 -j limit-1204 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1206 +-A INPUT -i eth0 -j limit-1207 +-A INPUT -i eth0 -j limit-1208 +-A INPUT -i eth0 -j limit-1209 +-A INPUT -i eth0 -j limit-1210 +-A INPUT -i eth0 -j limit-1211 +-A INPUT -i eth0 -j limit-1212 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1214 +-A INPUT -i eth0 -j limit-1215 +-A INPUT -i eth0 -j limit-1216 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1218 +-A INPUT -i eth0 -j limit-1219 +-A INPUT -i eth0 -j limit-1220 +-A INPUT -i eth0 -j limit-1221 +-A INPUT -i eth0 -j limit-1222 +-A INPUT -i eth0 -j limit-1223 +-A INPUT -i eth0 -j limit-1224 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1226 +-A INPUT -i eth0 -j limit-1227 +-A INPUT -i eth0 -j limit-1228 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1230 +-A INPUT -i eth0 -j limit-1231 +-A INPUT -i eth0 -j limit-1232 +-A INPUT -i eth0 -j limit-1233 +-A INPUT -i eth0 -j limit-1234 +-A INPUT -i eth0 -j limit-1235 +-A INPUT -i eth0 -j limit-1236 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1238 +-A INPUT -i eth0 -j limit-1239 +-A INPUT -i eth0 -j limit-1240 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1242 +-A INPUT -i eth0 -j limit-1243 +-A INPUT -i eth0 -j limit-1244 +-A INPUT -i eth0 -j limit-1245 +-A INPUT -i eth0 -j limit-1246 +-A INPUT -i eth0 -j limit-1247 +-A INPUT -i eth0 -j limit-1248 +-A INPUT -i eth0 -j limit-1249 +-A INPUT -i eth0 -j limit-1250 +-A INPUT -i eth0 -j limit-1251 +-A INPUT -i eth0 -j limit-1252 +-A INPUT -i eth0 -j limit-1253 +-A INPUT -i eth0 -j limit-1254 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 +-A INPUT -i eth0 -j limit-1256 +-A INPUT -i eth0 -j limit-1257 +-A INPUT -i eth0 -j limit-1258 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 +-A INPUT -i eth0 -j limit-1260 +-A INPUT -i eth0 -j limit-1261 +-A INPUT -i eth0 -j limit-1262 +-A INPUT -i eth0 -j limit-1263 +-A INPUT -i eth0 -j limit-1264 +-A INPUT -i eth0 -j limit-1265 +-A INPUT -i eth0 -j limit-1266 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-427 +-A INPUT -i eth0 -j limit-1268 +-A INPUT -i eth0 -j limit-1269 +-A INPUT -i eth0 -j limit-1270 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-431 +-A INPUT -i eth0 -j limit-1272 +-A INPUT -i eth0 -j limit-1273 +-A INPUT -i eth0 -j limit-1274 +-A INPUT -i eth0 -j limit-1275 +-A INPUT -i eth0 -j limit-1276 +-A INPUT -i eth0 -j limit-1277 +-A INPUT -i eth0 -j limit-1278 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 +-A INPUT -i eth0 -j limit-1280 +-A INPUT -i eth0 -j limit-1281 +-A INPUT -i eth0 -j limit-1282 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-443 +-A INPUT -i eth0 -j limit-1284 +-A INPUT -i eth0 -j limit-1285 +-A INPUT -i eth0 -j limit-1286 +-A INPUT -i eth0 -j limit-1287 +-A INPUT -i eth0 -j limit-1288 +-A INPUT -i eth0 -j limit-1289 +-A INPUT -i eth0 -j limit-1290 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 +-A INPUT -i eth0 -j limit-1292 +-A INPUT -i eth0 -j limit-1293 +-A INPUT -i eth0 -j limit-1294 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 +-A INPUT -i eth0 -j limit-1296 +-A INPUT -i eth0 -j limit-1297 +-A INPUT -i eth0 -j limit-1298 +-A INPUT -i eth0 -j limit-1299 +-A INPUT -i eth0 -j limit-1300 +-A INPUT -i eth0 -j limit-1301 +-A INPUT -i eth0 -j limit-1302 +-A INPUT -i eth0 -j limit-1303 +-A INPUT -i eth0 -j limit-1304 +-A INPUT -i eth0 -j limit-1305 +-A INPUT -i eth0 -j limit-1306 +-A INPUT -i eth0 -j limit-1307 +-A INPUT -i eth0 -j limit-1308 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1310 +-A INPUT -i eth0 -j limit-1311 +-A INPUT -i eth0 -j limit-1312 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1314 +-A INPUT -i eth0 -j limit-1315 +-A INPUT -i eth0 -j limit-1316 +-A INPUT -i eth0 -j limit-1317 +-A INPUT -i eth0 -j limit-1318 +-A INPUT -i eth0 -j limit-1319 +-A INPUT -i eth0 -j limit-1320 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1322 +-A INPUT -i eth0 -j limit-1323 +-A INPUT -i eth0 -j limit-1324 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1326 +-A INPUT -i eth0 -j limit-1327 +-A INPUT -i eth0 -j limit-1328 +-A INPUT -i eth0 -j limit-1329 +-A INPUT -i eth0 -j limit-1330 +-A INPUT -i eth0 -j limit-1331 +-A INPUT -i eth0 -j limit-1332 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1334 +-A INPUT -i eth0 -j limit-1335 +-A INPUT -i eth0 -j limit-1336 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1338 +-A INPUT -i eth0 -j limit-1339 +-A INPUT -i eth0 -j limit-1340 +-A INPUT -i eth0 -j limit-1341 +-A INPUT -i eth0 -j limit-1342 +-A INPUT -i eth0 -j limit-1343 +-A INPUT -i eth0 -j limit-1344 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1346 +-A INPUT -i eth0 -j limit-1347 +-A INPUT -i eth0 -j limit-1348 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1350 +-A INPUT -i eth0 -j limit-1351 +-A INPUT -i eth0 -j limit-1352 +-A INPUT -i eth0 -j limit-1353 +-A INPUT -i eth0 -j limit-1354 +-A INPUT -i eth0 -j limit-1355 +-A INPUT -i eth0 -j limit-1356 +-A INPUT -i eth0 -j limit-1357 +-A INPUT -i eth0 -j limit-1358 +-A INPUT -i eth0 -j limit-1359 +-A INPUT -i eth0 -j limit-1360 +-A INPUT -i eth0 -j limit-1361 +-A INPUT -i eth0 -j limit-1362 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1364 +-A INPUT -i eth0 -j limit-1365 +-A INPUT -i eth0 -j limit-1366 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1368 +-A INPUT -i eth0 -j limit-1369 +-A INPUT -i eth0 -j limit-1370 +-A INPUT -i eth0 -j limit-1371 +-A INPUT -i eth0 -j limit-1372 +-A INPUT -i eth0 -j limit-1373 +-A INPUT -i eth0 -j limit-1374 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1376 +-A INPUT -i eth0 -j limit-1377 +-A INPUT -i eth0 -j limit-1378 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1380 +-A INPUT -i eth0 -j limit-1381 +-A INPUT -i eth0 -j limit-1382 +-A INPUT -i eth0 -j limit-1383 +-A INPUT -i eth0 -j limit-1384 +-A INPUT -i eth0 -j limit-1385 +-A INPUT -i eth0 -j limit-1386 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1388 +-A INPUT -i eth0 -j limit-1389 +-A INPUT -i eth0 -j limit-1390 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1392 +-A INPUT -i eth0 -j limit-1393 +-A INPUT -i eth0 -j limit-1394 +-A INPUT -i eth0 -j limit-1395 +-A INPUT -i eth0 -j limit-1396 +-A INPUT -i eth0 -j limit-1397 +-A INPUT -i eth0 -j limit-1398 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1400 +-A INPUT -i eth0 -j limit-1401 +-A INPUT -i eth0 -j limit-1402 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1404 +-A INPUT -i eth0 -j limit-1405 +-A INPUT -i eth0 -j limit-1406 +-A INPUT -i eth0 -j limit-1407 +-A INPUT -i eth0 -j limit-1408 +-A INPUT -i eth0 -j limit-1409 +-A INPUT -i eth0 -j limit-1410 +-A INPUT -i eth0 -j limit-1411 +-A INPUT -i eth0 -j limit-1412 +-A INPUT -i eth0 -j limit-1413 +-A INPUT -i eth0 -j limit-1414 +-A INPUT -i eth0 -j limit-1415 +-A INPUT -i eth0 -j limit-1416 +-A INPUT -i eth0 -j limit-1417 +-A INPUT -i eth0 -j limit-1418 +-A INPUT -i eth0 -j limit-1419 +-A INPUT -i eth0 -j limit-1420 +-A INPUT -i eth0 -j limit-1421 +-A INPUT -i eth0 -j limit-1422 +-A INPUT -i eth0 -j limit-1423 +-A INPUT -i eth0 -j limit-1424 +-A INPUT -i eth0 -j limit-1425 +-A INPUT -i eth0 -j limit-1426 +-A INPUT -i eth0 -j limit-1427 +-A INPUT -i eth0 -j limit-1428 +-A INPUT -i eth0 -j limit-1429 +-A INPUT -i eth0 -j limit-1430 +-A INPUT -i eth0 -j limit-1431 +-A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:C --rsource --mask fe00:: --set +-A INPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set +-A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -j ACCEPT +-A INPUT -j logdrop-456 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-21 +-A INPUT -j logdrop-457 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -j limit-1073 +-A OUTPUT -j limit-1072 +-A OUTPUT -j limit-1071 +-A OUTPUT -j limit-1070 +-A OUTPUT -j limit-1069 +-A OUTPUT -j limit-1068 +-A OUTPUT -j limit-1067 +-A OUTPUT -j limit-1066 +-A OUTPUT -j limit-1065 +-A OUTPUT -j limit-1064 +-A OUTPUT -j limit-1063 +-A OUTPUT -j limit-1062 +-A OUTPUT -j limit-1061 +-A OUTPUT -j limit-1060 +-A OUTPUT -j limit-1059 +-A OUTPUT -j limit-1058 +-A OUTPUT -j limit-1057 +-A OUTPUT -j limit-1056 +-A OUTPUT -j limit-1055 +-A OUTPUT -j limit-1054 +-A OUTPUT -j limit-1053 +-A OUTPUT -j limit-1052 +-A OUTPUT -j limit-1051 +-A OUTPUT -j limit-1050 +-A OUTPUT -j limit-1049 +-A OUTPUT -j limit-1048 +-A OUTPUT -j limit-1047 +-A OUTPUT -j limit-1046 +-A OUTPUT -j limit-1045 +-A OUTPUT -j limit-1044 +-A OUTPUT -j limit-1043 +-A OUTPUT -j limit-1042 +-A OUTPUT -j limit-1041 +-A OUTPUT -j limit-1040 +-A OUTPUT -j limit-1039 +-A OUTPUT -j limit-1038 +-A OUTPUT -j limit-1037 +-A OUTPUT -j limit-1036 +-A OUTPUT -j limit-1035 +-A OUTPUT -j limit-1034 +-A OUTPUT -j limit-1033 +-A OUTPUT -j limit-1032 +-A OUTPUT -j limit-1031 +-A OUTPUT -j limit-1030 +-A OUTPUT -j limit-1029 +-A OUTPUT -j limit-1028 +-A OUTPUT -j limit-1027 +-A OUTPUT -j limit-1026 +-A OUTPUT -j limit-1025 +-A OUTPUT -j limit-1024 +-A OUTPUT -j limit-1023 +-A OUTPUT -j limit-1022 +-A OUTPUT -j limit-1021 +-A OUTPUT -j limit-1020 +-A OUTPUT -j limit-1019 +-A OUTPUT -j limit-1018 +-A OUTPUT -j limit-1017 +-A OUTPUT -j limit-1016 +-A OUTPUT -j limit-1015 +-A OUTPUT -j limit-1014 +-A OUTPUT -j limit-1013 +-A OUTPUT -j limit-1012 +-A OUTPUT -j limit-1011 +-A OUTPUT -j limit-1010 +-A OUTPUT -j limit-1009 +-A OUTPUT -j limit-1008 +-A OUTPUT -j limit-1007 +-A OUTPUT -j limit-1006 +-A OUTPUT -j limit-1005 +-A OUTPUT -j limit-1004 +-A OUTPUT -j limit-1003 +-A OUTPUT -j limit-1002 +-A OUTPUT -j limit-1001 +-A OUTPUT -j limit-1000 +-A OUTPUT -j limit-999 +-A OUTPUT -j limit-998 +-A OUTPUT -j limit-997 +-A OUTPUT -j limit-996 +-A OUTPUT -j limit-995 +-A OUTPUT -j limit-994 +-A OUTPUT -j limit-993 +-A OUTPUT -j limit-992 +-A OUTPUT -j limit-991 +-A OUTPUT -j limit-990 +-A OUTPUT -j limit-989 +-A OUTPUT -j limit-988 +-A OUTPUT -j limit-987 +-A OUTPUT -j limit-986 +-A OUTPUT -j limit-985 +-A OUTPUT -j limit-984 +-A OUTPUT -j limit-983 +-A OUTPUT -j limit-982 +-A OUTPUT -j limit-981 +-A OUTPUT -j limit-980 +-A OUTPUT -j limit-979 +-A OUTPUT -j limit-978 +-A OUTPUT -j limit-977 +-A OUTPUT -j limit-976 +-A OUTPUT -j limit-975 +-A OUTPUT -j limit-974 +-A OUTPUT -j limit-973 +-A OUTPUT -j limit-972 +-A OUTPUT -j limit-971 +-A OUTPUT -j limit-970 +-A OUTPUT -j limit-969 +-A OUTPUT -j limit-968 +-A OUTPUT -j limit-967 +-A OUTPUT -j limit-966 +-A OUTPUT -j limit-965 +-A OUTPUT -j limit-964 +-A OUTPUT -j limit-963 +-A OUTPUT -j limit-962 +-A OUTPUT -j limit-961 +-A OUTPUT -j limit-960 +-A OUTPUT -j limit-959 +-A OUTPUT -j limit-958 +-A OUTPUT -j limit-957 +-A OUTPUT -j limit-956 +-A OUTPUT -j limit-955 +-A OUTPUT -j limit-954 +-A OUTPUT -j limit-953 +-A OUTPUT -j limit-952 +-A OUTPUT -j limit-951 +-A OUTPUT -j limit-950 +-A OUTPUT -j limit-949 +-A OUTPUT -j limit-948 +-A OUTPUT -j limit-947 +-A OUTPUT -j limit-946 +-A OUTPUT -j limit-945 +-A OUTPUT -j limit-944 +-A OUTPUT -j limit-943 +-A OUTPUT -j limit-942 +-A OUTPUT -j limit-941 +-A OUTPUT -j limit-940 +-A OUTPUT -j limit-939 +-A OUTPUT -j limit-938 +-A OUTPUT -j limit-937 +-A OUTPUT -j limit-936 +-A OUTPUT -j limit-935 +-A OUTPUT -j limit-934 +-A OUTPUT -j limit-933 +-A OUTPUT -j limit-932 +-A OUTPUT -j limit-931 +-A OUTPUT -j limit-930 +-A OUTPUT -j limit-929 +-A OUTPUT -j limit-928 +-A OUTPUT -j limit-927 +-A OUTPUT -j limit-926 +-A OUTPUT -j limit-925 +-A OUTPUT -j limit-924 +-A OUTPUT -j limit-923 +-A OUTPUT -j limit-922 +-A OUTPUT -j limit-921 +-A OUTPUT -j limit-920 +-A OUTPUT -j limit-919 +-A OUTPUT -j limit-918 +-A OUTPUT -j limit-917 +-A OUTPUT -j limit-916 +-A OUTPUT -j limit-915 +-A OUTPUT -j limit-914 +-A OUTPUT -j limit-913 +-A OUTPUT -j limit-912 +-A OUTPUT -j limit-911 +-A OUTPUT -j limit-910 +-A OUTPUT -j limit-909 +-A OUTPUT -j limit-908 +-A OUTPUT -j limit-907 +-A OUTPUT -j limit-906 +-A OUTPUT -j limit-905 +-A OUTPUT -j limit-904 +-A OUTPUT -j limit-903 +-A OUTPUT -j limit-902 +-A OUTPUT -j limit-901 +-A OUTPUT -j limit-900 +-A OUTPUT -j limit-899 +-A OUTPUT -j limit-898 +-A OUTPUT -j limit-897 +-A OUTPUT -j limit-896 +-A OUTPUT -j limit-895 +-A OUTPUT -j limit-894 +-A OUTPUT -j limit-893 +-A OUTPUT -j limit-892 +-A OUTPUT -j limit-891 +-A OUTPUT -j limit-890 +-A OUTPUT -j limit-889 +-A OUTPUT -j limit-888 +-A OUTPUT -j limit-887 +-A OUTPUT -j limit-886 +-A OUTPUT -j limit-885 +-A OUTPUT -j limit-884 +-A OUTPUT -j limit-883 +-A OUTPUT -j limit-882 +-A OUTPUT -j limit-881 +-A OUTPUT -j limit-880 +-A OUTPUT -j limit-879 +-A OUTPUT -j limit-878 +-A OUTPUT -j limit-877 +-A OUTPUT -j limit-876 +-A OUTPUT -j limit-875 +-A OUTPUT -j limit-874 +-A OUTPUT -j limit-873 +-A OUTPUT -j limit-872 +-A OUTPUT -j limit-871 +-A OUTPUT -j limit-870 +-A OUTPUT -j limit-869 +-A OUTPUT -j limit-868 +-A OUTPUT -j limit-867 +-A OUTPUT -j limit-866 +-A OUTPUT -j limit-865 +-A OUTPUT -j limit-864 +-A OUTPUT -j limit-863 +-A OUTPUT -j limit-862 +-A OUTPUT -j limit-861 +-A OUTPUT -j limit-860 +-A OUTPUT -j limit-859 +-A OUTPUT -j limit-858 +-A OUTPUT -j limit-857 +-A OUTPUT -j limit-856 +-A OUTPUT -j limit-855 +-A OUTPUT -j limit-854 +-A OUTPUT -j limit-853 +-A OUTPUT -j limit-852 +-A OUTPUT -j limit-851 +-A OUTPUT -j limit-850 +-A OUTPUT -j limit-849 +-A OUTPUT -j limit-848 +-A OUTPUT -j limit-847 +-A OUTPUT -j limit-846 +-A OUTPUT -j limit-845 +-A OUTPUT -j limit-844 +-A OUTPUT -j limit-843 +-A OUTPUT -j limit-842 +-A OUTPUT -j limit-841 +-A OUTPUT -j limit-840 +-A OUTPUT -j limit-839 +-A OUTPUT -j limit-838 +-A OUTPUT -j limit-837 +-A OUTPUT -j limit-836 +-A OUTPUT -j limit-835 +-A OUTPUT -j limit-834 +-A OUTPUT -j limit-833 +-A OUTPUT -j limit-832 +-A OUTPUT -j limit-831 +-A OUTPUT -j limit-830 +-A OUTPUT -j limit-829 +-A OUTPUT -j limit-828 +-A OUTPUT -j limit-827 +-A OUTPUT -j limit-826 +-A OUTPUT -j limit-825 +-A OUTPUT -j limit-824 +-A OUTPUT -j limit-823 +-A OUTPUT -j limit-822 +-A OUTPUT -j limit-821 +-A OUTPUT -j limit-820 +-A OUTPUT -j limit-819 +-A OUTPUT -j limit-818 +-A OUTPUT -j limit-817 +-A OUTPUT -j limit-816 +-A OUTPUT -j limit-815 +-A OUTPUT -j limit-814 +-A OUTPUT -j limit-813 +-A OUTPUT -j limit-812 +-A OUTPUT -j limit-811 +-A OUTPUT -j limit-810 +-A OUTPUT -j limit-809 +-A OUTPUT -j limit-808 +-A OUTPUT -j limit-807 +-A OUTPUT -j limit-806 +-A OUTPUT -j limit-805 +-A OUTPUT -j limit-804 +-A OUTPUT -j limit-803 +-A OUTPUT -j limit-802 +-A OUTPUT -j limit-801 +-A OUTPUT -j limit-800 +-A OUTPUT -j limit-799 +-A OUTPUT -j limit-798 +-A OUTPUT -j limit-797 +-A OUTPUT -j limit-796 +-A OUTPUT -j limit-795 +-A OUTPUT -j limit-794 +-A OUTPUT -j limit-793 +-A OUTPUT -j limit-792 +-A OUTPUT -j limit-791 +-A OUTPUT -j limit-790 +-A OUTPUT -j limit-789 +-A OUTPUT -j limit-788 +-A OUTPUT -j limit-787 +-A OUTPUT -j limit-786 +-A OUTPUT -j limit-785 +-A OUTPUT -j limit-784 +-A OUTPUT -j limit-783 +-A OUTPUT -j limit-782 +-A OUTPUT -j limit-781 +-A OUTPUT -j limit-780 +-A OUTPUT -j limit-779 +-A OUTPUT -j limit-778 +-A OUTPUT -j limit-777 +-A OUTPUT -j limit-776 +-A OUTPUT -j limit-775 +-A OUTPUT -j limit-774 +-A OUTPUT -j limit-773 +-A OUTPUT -j limit-772 +-A OUTPUT -j limit-771 +-A OUTPUT -j limit-770 +-A OUTPUT -j limit-769 +-A OUTPUT -j limit-768 +-A OUTPUT -j limit-767 +-A OUTPUT -j limit-766 +-A OUTPUT -j limit-765 +-A OUTPUT -j limit-764 +-A OUTPUT -j limit-763 +-A OUTPUT -j limit-762 +-A OUTPUT -j limit-761 +-A OUTPUT -j limit-760 +-A OUTPUT -j limit-759 +-A OUTPUT -j limit-758 +-A OUTPUT -j limit-757 +-A OUTPUT -j limit-756 +-A OUTPUT -j limit-755 +-A OUTPUT -j limit-754 +-A OUTPUT -j limit-753 +-A OUTPUT -j limit-752 +-A OUTPUT -j limit-751 +-A OUTPUT -j limit-750 +-A OUTPUT -j limit-749 +-A OUTPUT -j limit-748 +-A OUTPUT -j limit-747 +-A OUTPUT -j limit-746 +-A OUTPUT -j limit-745 +-A OUTPUT -j limit-744 +-A OUTPUT -j limit-743 +-A OUTPUT -j limit-742 +-A OUTPUT -j limit-741 +-A OUTPUT -j limit-740 +-A OUTPUT -j limit-739 +-A OUTPUT -j limit-738 +-A OUTPUT -j limit-737 +-A OUTPUT -j limit-736 +-A OUTPUT -j limit-735 +-A OUTPUT -j limit-734 +-A OUTPUT -j limit-733 +-A OUTPUT -j limit-732 +-A OUTPUT -j limit-731 +-A OUTPUT -j limit-730 +-A OUTPUT -j limit-729 +-A OUTPUT -j limit-728 +-A OUTPUT -j limit-727 +-A OUTPUT -j limit-726 +-A OUTPUT -j limit-725 +-A OUTPUT -j limit-724 +-A OUTPUT -j limit-723 +-A OUTPUT -j limit-722 +-A OUTPUT -j limit-721 +-A OUTPUT -j limit-720 +-A OUTPUT -j limit-719 +-A OUTPUT -j limit-718 +-A OUTPUT -j limit-717 +-A OUTPUT -j limit-716 +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j limit-0 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-2 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-3 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-4 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-5 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-6 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-7 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-8 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-9 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-10 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-11 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-12 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-13 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-14 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-15 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-16 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-17 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-18 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-19 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-20 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-21 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-22 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-23 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-24 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-25 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-26 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-27 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-28 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-29 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-30 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-31 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-32 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-33 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-34 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-35 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-36 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-37 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-38 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-39 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-40 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-41 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-42 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-43 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-44 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-45 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-46 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-47 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-48 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-49 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-50 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-51 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-52 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-53 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-54 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-55 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-56 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-57 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-58 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-59 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-60 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-61 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-62 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-63 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-64 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-65 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-66 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-67 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-68 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-69 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-70 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-71 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-72 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-73 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-74 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-75 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-76 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-77 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-78 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-79 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-80 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-81 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-82 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-83 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-84 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-85 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-86 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-87 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-88 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-89 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-90 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-91 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-92 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-93 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-94 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-95 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-96 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-97 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-98 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-99 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-100 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-101 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-102 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-103 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-104 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-105 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-106 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-107 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-108 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-109 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-110 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-111 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-112 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-113 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-114 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-115 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-116 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-117 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-118 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-119 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-120 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-121 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-122 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-123 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-124 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-125 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-126 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-127 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-128 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-129 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-130 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-131 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-132 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-133 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-134 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-135 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-136 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-137 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-138 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-139 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-140 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-141 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-142 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-143 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-144 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-145 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-146 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-147 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-148 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-149 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-150 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-151 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-152 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-153 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-154 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-155 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-156 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-157 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-158 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-159 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-160 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-161 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-162 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-163 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-164 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-165 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-166 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-167 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-168 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-169 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-170 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-171 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-172 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-173 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-174 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-175 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-176 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-177 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-178 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-179 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-180 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-181 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-182 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-183 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-184 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-185 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-186 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-187 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-188 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-189 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-190 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-191 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-192 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-193 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-194 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-195 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-196 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-197 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-198 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-199 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-200 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-201 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-202 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-203 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-204 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-205 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-206 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-207 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-208 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-209 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-210 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-211 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-212 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-213 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-214 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-215 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-216 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-217 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-218 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-219 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-220 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-221 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-222 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-223 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-224 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-225 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-226 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-227 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-228 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-229 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-230 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-231 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-232 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-233 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-234 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-235 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-236 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-237 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-238 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-239 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-240 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-241 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-242 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-243 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-244 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-245 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-246 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-247 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-248 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-249 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-250 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-251 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-252 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-253 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-254 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-255 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-256 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-257 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-258 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-259 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-260 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-261 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-262 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-263 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-264 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-265 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-266 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-267 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-268 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-269 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-270 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-271 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-272 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-273 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-274 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-275 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-276 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-277 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-278 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-279 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-280 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-281 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-282 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-283 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-284 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-285 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-286 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-287 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-288 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-289 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-290 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-291 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-292 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-293 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-294 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-295 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-296 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-297 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-298 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-299 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-300 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-301 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-302 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-303 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-304 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-305 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-306 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-307 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-308 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-309 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-310 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-311 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-312 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-313 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-314 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-315 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-316 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-317 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-318 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-319 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-320 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-321 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-322 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-323 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-324 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-325 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-326 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-327 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-328 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-329 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-330 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-331 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-332 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-333 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-334 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-335 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-336 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-337 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-338 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-339 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-340 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-341 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-342 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-343 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-344 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-345 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-346 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-347 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-348 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-349 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-350 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-351 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-352 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-353 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-354 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-355 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-356 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-357 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-358 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-359 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-360 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-361 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-362 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-363 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-364 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-365 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-366 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-367 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-368 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-369 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-370 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-371 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-372 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-373 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-374 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-375 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-376 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-378 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-379 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-380 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-382 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-383 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-384 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-385 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-386 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-387 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-388 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-390 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-391 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-392 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-394 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-395 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-396 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-397 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-398 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-399 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-400 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-402 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-403 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-404 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-406 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-407 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-408 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-409 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-410 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-411 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-412 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-414 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-415 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-416 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-418 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-419 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-420 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-421 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-422 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-423 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-424 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-425 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-426 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-427 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-428 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-429 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-430 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-432 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-433 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-434 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-436 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-437 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-438 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-439 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-440 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-441 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-442 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-444 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-445 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-446 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-448 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-449 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-450 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-451 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-452 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-453 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-454 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-456 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-457 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-458 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-460 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-461 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-462 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-463 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-464 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-465 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-466 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-468 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-469 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-470 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-472 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-473 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-474 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-475 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-476 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-477 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-478 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-479 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-480 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-481 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-482 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-483 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-484 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-486 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-487 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-488 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-490 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-491 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-492 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-493 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-494 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-495 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-496 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-498 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-499 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-500 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-502 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-503 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-504 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-505 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-506 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-507 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-508 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-510 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-511 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-512 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-514 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-515 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-516 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-517 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-518 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-519 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-520 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-522 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-523 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-524 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-526 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-527 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-528 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-529 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-530 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-531 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-532 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-533 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-534 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-535 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-536 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-537 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-538 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-540 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-541 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-542 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-544 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-545 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-546 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-547 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-548 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-549 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-550 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-552 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-553 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-554 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-556 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-557 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-558 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-559 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-560 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-561 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-562 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-564 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-565 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-566 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-568 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-569 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-570 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-571 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-572 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-573 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-574 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-576 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-577 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-578 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-580 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-581 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-582 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-583 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-584 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-585 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-586 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-587 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-588 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-589 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-590 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-591 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-592 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-594 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-595 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-596 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-598 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-599 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-600 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-601 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-602 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-603 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-604 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-606 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-607 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-608 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-610 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-611 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-612 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-613 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-614 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-615 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-616 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-618 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-619 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-620 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-622 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-623 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-624 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-625 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-626 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-627 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-628 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-630 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-631 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-632 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-634 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-635 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-636 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-637 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-638 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-639 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-640 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-641 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-642 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-643 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-644 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-645 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-646 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-648 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-649 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-650 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-652 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-653 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-654 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-655 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-656 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-657 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-658 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-660 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-661 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-662 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-664 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-665 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-666 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-667 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-668 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-669 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-670 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-672 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-673 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-674 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-676 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-677 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-678 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-679 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-680 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-681 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-682 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-684 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-685 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-686 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-688 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-689 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-690 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-691 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-692 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-693 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-694 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-695 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-696 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-697 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-698 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-699 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-700 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-701 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-702 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-703 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-704 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-705 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-706 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-707 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-708 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-709 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-710 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-711 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-712 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-713 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-714 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-715 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-1 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-2 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-3 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-4 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-5 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-6 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-7 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-8 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-9 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-10 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-11 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-12 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-13 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-14 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-15 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-16 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-17 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-18 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-19 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-20 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-21 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-22 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-23 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-24 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-25 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-26 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-27 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-28 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-29 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-30 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-31 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-32 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-33 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-34 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-35 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-36 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-37 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-38 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-39 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-40 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-41 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-42 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-43 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-44 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-45 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-46 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-47 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-48 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-49 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-51 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-52 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-53 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-54 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-55 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-56 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-57 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-58 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-59 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-60 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-61 +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:C --rsource --mask fe00:: --set +-A OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set +-A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-456 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-21 +-A OUTPUT -j logdrop-457 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-0 +-A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 +-A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-100 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-100 -j ACCEPT +-A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1007 -m limit --limit 1/second -j LOG +-A limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-101 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1019 -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1022 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1022 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1023 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1023 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1024 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1024 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1025 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1025 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1026 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1026 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1027 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1027 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1029 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-103 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1031 -m limit --limit 1/second -j LOG +-A limit-1032 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1033 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1034 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1035 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1036 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1037 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1038 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1039 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-104 -m limit --limit 1/second -j LOG +-A limit-104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1040 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1041 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1043 -m limit --limit 1/second -j LOG +-A limit-1044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1045 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1046 -j RETURN +-A limit-1046 -m limit --limit 1/second -j LOG +-A limit-1046 -j DROP +-A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1047 -j RETURN +-A limit-1047 -m limit --limit 1/second -j LOG +-A limit-1047 -j DROP +-A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j RETURN +-A limit-1048 -m limit --limit 1/second -j LOG +-A limit-1048 -j DROP +-A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1049 -j RETURN +-A limit-1049 -m limit --limit 1/second -j LOG +-A limit-1049 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1050 -j RETURN +-A limit-1050 -m limit --limit 1/second -j LOG +-A limit-1050 -j DROP +-A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1051 -j RETURN +-A limit-1051 -m limit --limit 1/second -j LOG +-A limit-1051 -j DROP +-A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j RETURN +-A limit-1052 -m limit --limit 1/second -j LOG +-A limit-1052 -j DROP +-A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1053 -j RETURN +-A limit-1053 -m limit --limit 1/second -j LOG +-A limit-1053 -j DROP +-A limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1054 -j RETURN +-A limit-1054 -j DROP +-A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1055 -j RETURN +-A limit-1055 -j DROP +-A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j RETURN +-A limit-1056 -j DROP +-A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1057 -j RETURN +-A limit-1057 -j DROP +-A limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1058 -j RETURN +-A limit-1058 -j DROP +-A limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1059 -j RETURN +-A limit-1059 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j RETURN +-A limit-1060 -j DROP +-A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1061 -j RETURN +-A limit-1061 -j DROP +-A limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1062 -j RETURN +-A limit-1062 -m limit --limit 1/second -j LOG +-A limit-1062 -j DROP +-A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1063 -j RETURN +-A limit-1063 -m limit --limit 1/second -j LOG +-A limit-1063 -j DROP +-A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j RETURN +-A limit-1064 -m limit --limit 1/second -j LOG +-A limit-1064 -j DROP +-A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1065 -j RETURN +-A limit-1065 -m limit --limit 1/second -j LOG +-A limit-1065 -j DROP +-A limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1066 -j RETURN +-A limit-1066 -j DROP +-A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1067 -j RETURN +-A limit-1067 -j DROP +-A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j RETURN +-A limit-1068 -j DROP +-A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1069 -j RETURN +-A limit-1069 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1070 -j RETURN +-A limit-1070 -j DROP +-A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1071 -j RETURN +-A limit-1071 -j DROP +-A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j RETURN +-A limit-1072 -j DROP +-A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1073 -j RETURN +-A limit-1073 -j DROP +-A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-342 +-A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-343 +-A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-344 +-A limit-1076 -m limit --limit 1/second -j LOG +-A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-345 +-A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-346 +-A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-347 +-A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-108 -j ACCEPT +-A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-348 +-A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-349 +-A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-350 +-A limit-1082 -m limit --limit 1/second -j LOG +-A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-351 +-A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-352 +-A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-353 +-A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-354 +-A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-355 +-A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-356 +-A limit-1088 -m limit --limit 1/second -j LOG +-A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-357 +-A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-109 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-358 +-A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-359 +-A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-360 +-A limit-1092 -j ACCEPT +-A limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-362 +-A limit-1094 -m limit --limit 1/second -j LOG +-A limit-1094 -j ACCEPT +-A limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-363 +-A limit-1095 -m limit --limit 1/second -j LOG +-A limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-364 +-A limit-1096 -j ACCEPT +-A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-366 +-A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-367 +-A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 +-A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-110 -m limit --limit 1/second -j LOG +-A limit-110 -j ACCEPT +-A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-368 +-A limit-1100 -m limit --limit 1/second -j LOG +-A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-369 +-A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-370 +-A limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-371 +-A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-372 +-A limit-1104 -j ACCEPT +-A limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-374 +-A limit-1106 -m limit --limit 1/second -j LOG +-A limit-1106 -j ACCEPT +-A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-375 +-A limit-1107 -m limit --limit 1/second -j LOG +-A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-376 +-A limit-1108 -j ACCEPT +-A limit-111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-111 -m limit --limit 1/second -j LOG +-A limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-378 +-A limit-1110 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-379 +-A limit-1111 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-380 +-A limit-1112 -m limit --limit 1/second -j LOG +-A limit-1112 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-381 +-A limit-1113 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-382 +-A limit-1114 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-383 +-A limit-1115 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-384 +-A limit-1116 -j ACCEPT +-A limit-1118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-386 +-A limit-1118 -m limit --limit 1/second -j LOG +-A limit-1118 -j ACCEPT +-A limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-387 +-A limit-1119 -m limit --limit 1/second -j LOG +-A limit-112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-112 -j ACCEPT +-A limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-388 +-A limit-1120 -j ACCEPT +-A limit-1122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-390 +-A limit-1122 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-391 +-A limit-1123 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-392 +-A limit-1124 -m limit --limit 1/second -j LOG +-A limit-1124 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-393 +-A limit-1125 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-394 +-A limit-1126 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-395 +-A limit-1127 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1128 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-396 +-A limit-1128 -j ACCEPT +-A limit-113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1130 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-398 +-A limit-1130 -m limit --limit 1/second -j LOG +-A limit-1130 -j ACCEPT +-A limit-1131 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-399 +-A limit-1131 -m limit --limit 1/second -j LOG +-A limit-1132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-400 +-A limit-1132 -j ACCEPT +-A limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1135 -m recent --name limit-1135 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1135 -m recent --name limit-1135 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1136 -m recent --name limit-1136 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1136 -m limit --limit 1/second -j LOG +-A limit-1136 -m recent --name limit-1136 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1137 -m recent --name limit-1137 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1137 -m recent --name limit-1137 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1138 -m recent --name limit-1138 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1138 -m recent --name limit-1138 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1139 -m recent --name limit-1139 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1139 -m recent --name limit-1139 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1142 -m limit --limit 1/second -j LOG +-A limit-1142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1145 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1145 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1146 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1146 -j ACCEPT +-A limit-1148 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1148 -m limit --limit 1/second -j LOG +-A limit-1148 -j ACCEPT +-A limit-1149 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1149 -m limit --limit 1/second -j LOG +-A limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1150 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1150 -j ACCEPT +-A limit-1152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1154 -m limit --limit 1/second -j LOG +-A limit-1154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1158 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1158 -j ACCEPT +-A limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-116 -m limit --limit 1/second -j LOG +-A limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1160 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1160 -m limit --limit 1/second -j LOG +-A limit-1160 -j ACCEPT +-A limit-1161 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1161 -m limit --limit 1/second -j LOG +-A limit-1162 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1162 -j ACCEPT +-A limit-1164 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1164 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1165 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1165 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1166 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1166 -m limit --limit 1/second -j LOG +-A limit-1166 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1167 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1167 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1168 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1168 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1169 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1169 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1170 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1170 -j ACCEPT +-A limit-1172 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1172 -m limit --limit 1/second -j LOG +-A limit-1172 -j ACCEPT +-A limit-1173 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1173 -m limit --limit 1/second -j LOG +-A limit-1174 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1174 -j ACCEPT +-A limit-1176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1177 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1178 -m limit --limit 1/second -j LOG +-A limit-1178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1179 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1180 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1180 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1181 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1181 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1182 -j ACCEPT +-A limit-1184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1184 -m limit --limit 1/second -j LOG +-A limit-1184 -j ACCEPT +-A limit-1185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1185 -m limit --limit 1/second -j LOG +-A limit-1186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1186 -j ACCEPT +-A limit-1188 -m recent --name limit-1188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1188 -m recent --name limit-1188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1189 -m recent --name limit-1189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1189 -m recent --name limit-1189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1190 -m recent --name limit-1190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1190 -m limit --limit 1/second -j LOG +-A limit-1190 -m recent --name limit-1190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1191 -m recent --name limit-1191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1191 -m recent --name limit-1191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1192 -m recent --name limit-1192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1192 -m recent --name limit-1192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1193 -m recent --name limit-1193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1193 -m recent --name limit-1193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1196 -m limit --limit 1/second -j LOG +-A limit-1196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 +-A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1200 -j ACCEPT +-A limit-1202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1202 -m limit --limit 1/second -j LOG +-A limit-1202 -j ACCEPT +-A limit-1203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1203 -m limit --limit 1/second -j LOG +-A limit-1204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1204 -j ACCEPT +-A limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1208 -m limit --limit 1/second -j LOG +-A limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1212 -j ACCEPT +-A limit-1214 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1214 -m limit --limit 1/second -j LOG +-A limit-1214 -j ACCEPT +-A limit-1215 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1215 -m limit --limit 1/second -j LOG +-A limit-1216 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1216 -j ACCEPT +-A limit-1218 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1218 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1219 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1219 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-122 -m limit --limit 1/second -j LOG +-A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1220 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1220 -m limit --limit 1/second -j LOG +-A limit-1220 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1221 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1221 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1222 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1222 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1223 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1223 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1224 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1224 -j ACCEPT +-A limit-1226 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1226 -m limit --limit 1/second -j LOG +-A limit-1226 -j ACCEPT +-A limit-1227 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1227 -m limit --limit 1/second -j LOG +-A limit-1228 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1228 -j ACCEPT +-A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1230 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1230 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1231 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1231 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1232 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1232 -m limit --limit 1/second -j LOG +-A limit-1232 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1233 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1233 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1234 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1234 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1235 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1235 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1236 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1236 -j ACCEPT +-A limit-1238 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1238 -m limit --limit 1/second -j LOG +-A limit-1238 -j ACCEPT +-A limit-1239 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1239 -m limit --limit 1/second -j LOG +-A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1240 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1240 -j ACCEPT +-A limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-402 +-A limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 +-A limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 +-A limit-1244 -m limit --limit 1/second -j LOG +-A limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 +-A limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 +-A limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 +-A limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 +-A limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 +-A limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-410 +-A limit-1250 -m limit --limit 1/second -j LOG +-A limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-411 +-A limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-412 +-A limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-413 +-A limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-414 +-A limit-1254 -j ACCEPT +-A limit-1256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 +-A limit-1256 -m limit --limit 1/second -j LOG +-A limit-1256 -j ACCEPT +-A limit-1257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 +-A limit-1257 -m limit --limit 1/second -j LOG +-A limit-1258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 +-A limit-1258 -j ACCEPT +-A limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-126 -j ACCEPT +-A limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-420 +-A limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-421 +-A limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-422 +-A limit-1262 -m limit --limit 1/second -j LOG +-A limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-423 +-A limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-424 +-A limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-425 +-A limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-426 +-A limit-1266 -j ACCEPT +-A limit-1268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-428 +-A limit-1268 -m limit --limit 1/second -j LOG +-A limit-1268 -j ACCEPT +-A limit-1269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-429 +-A limit-1269 -m limit --limit 1/second -j LOG +-A limit-127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-430 +-A limit-1270 -j ACCEPT +-A limit-1272 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-432 +-A limit-1272 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1273 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-433 +-A limit-1273 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1274 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-434 +-A limit-1274 -m limit --limit 1/second -j LOG +-A limit-1274 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1275 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-435 +-A limit-1275 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1276 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-436 +-A limit-1276 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1277 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-437 +-A limit-1277 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-438 +-A limit-1278 -j ACCEPT +-A limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-128 -m limit --limit 1/second -j LOG +-A limit-128 -j ACCEPT +-A limit-1280 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-440 +-A limit-1280 -m limit --limit 1/second -j LOG +-A limit-1280 -j ACCEPT +-A limit-1281 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-441 +-A limit-1281 -m limit --limit 1/second -j LOG +-A limit-1282 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-442 +-A limit-1282 -j ACCEPT +-A limit-1284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-444 +-A limit-1284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 +-A limit-1285 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 +-A limit-1286 -m limit --limit 1/second -j LOG +-A limit-1286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 +-A limit-1287 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1288 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 +-A limit-1288 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1289 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 +-A limit-1289 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-129 -m limit --limit 1/second -j LOG +-A limit-1290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-450 +-A limit-1290 -j ACCEPT +-A limit-1292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 +-A limit-1292 -m limit --limit 1/second -j LOG +-A limit-1292 -j ACCEPT +-A limit-1293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 +-A limit-1293 -m limit --limit 1/second -j LOG +-A limit-1294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 +-A limit-1294 -j ACCEPT +-A limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1297 -m recent --name limit-1297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1297 -m recent --name limit-1297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1298 -m recent --name limit-1298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1298 -m limit --limit 1/second -j LOG +-A limit-1298 -m recent --name limit-1298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 +-A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-130 -j ACCEPT +-A limit-1300 -m recent --name limit-1300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1300 -m recent --name limit-1300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1301 -m recent --name limit-1301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1301 -m recent --name limit-1301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1304 -m limit --limit 1/second -j LOG +-A limit-1304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1308 -j ACCEPT +-A limit-131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1310 -m limit --limit 1/second -j LOG +-A limit-1310 -j ACCEPT +-A limit-1311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1311 -m limit --limit 1/second -j LOG +-A limit-1312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1312 -j ACCEPT +-A limit-1314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1316 -m limit --limit 1/second -j LOG +-A limit-1316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1320 -j ACCEPT +-A limit-1322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1322 -m limit --limit 1/second -j LOG +-A limit-1322 -j ACCEPT +-A limit-1323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1323 -m limit --limit 1/second -j LOG +-A limit-1324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1324 -j ACCEPT +-A limit-1326 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1326 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1327 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1327 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1328 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1328 -m limit --limit 1/second -j LOG +-A limit-1328 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1329 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1329 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1331 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1332 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1332 -j ACCEPT +-A limit-1334 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1334 -m limit --limit 1/second -j LOG +-A limit-1334 -j ACCEPT +-A limit-1335 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1335 -m limit --limit 1/second -j LOG +-A limit-1336 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1336 -j ACCEPT +-A limit-1338 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1338 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1339 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1339 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-134 -m limit --limit 1/second -j LOG +-A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1340 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1340 -m limit --limit 1/second -j LOG +-A limit-1340 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1341 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1341 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1342 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1342 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1343 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1343 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1344 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1344 -j ACCEPT +-A limit-1346 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1346 -m limit --limit 1/second -j LOG +-A limit-1346 -j ACCEPT +-A limit-1347 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1347 -m limit --limit 1/second -j LOG +-A limit-1348 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1348 -j ACCEPT +-A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1352 -m limit --limit 1/second -j LOG +-A limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1358 -m limit --limit 1/second -j LOG +-A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1362 -j ACCEPT +-A limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1364 -m limit --limit 1/second -j LOG +-A limit-1364 -j ACCEPT +-A limit-1365 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1365 -m limit --limit 1/second -j LOG +-A limit-1366 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1366 -j ACCEPT +-A limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1370 -m limit --limit 1/second -j LOG +-A limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1374 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1374 -j ACCEPT +-A limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1376 -m limit --limit 1/second -j LOG +-A limit-1376 -j ACCEPT +-A limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1377 -m limit --limit 1/second -j LOG +-A limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1378 -j ACCEPT +-A limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-138 -j ACCEPT +-A limit-1380 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1380 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1381 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1381 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1382 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1382 -m limit --limit 1/second -j LOG +-A limit-1382 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1383 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1383 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1384 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1384 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1385 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1385 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1386 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1386 -j ACCEPT +-A limit-1388 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1388 -m limit --limit 1/second -j LOG +-A limit-1388 -j ACCEPT +-A limit-1389 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1389 -m limit --limit 1/second -j LOG +-A limit-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1390 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1390 -j ACCEPT +-A limit-1392 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1392 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1393 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1393 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1394 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1394 -m limit --limit 1/second -j LOG +-A limit-1394 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1395 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1395 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1396 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1396 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1397 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1397 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1398 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1398 -j ACCEPT +-A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 +-A limit-14 -m limit --limit 1/second -j LOG +-A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-140 -m limit --limit 1/second -j LOG +-A limit-140 -j ACCEPT +-A limit-1400 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1400 -m limit --limit 1/second -j LOG +-A limit-1400 -j ACCEPT +-A limit-1401 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1401 -m limit --limit 1/second -j LOG +-A limit-1402 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1402 -j ACCEPT +-A limit-1404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1404 -j ACCEPT +-A limit-1404 -m limit --limit 1/second -j LOG +-A limit-1404 -j DROP +-A limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1405 -j RETURN +-A limit-1405 -m limit --limit 1/second -j LOG +-A limit-1405 -j DROP +-A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1406 -j logaccept-14 +-A limit-1406 -m limit --limit 1/second -j LOG +-A limit-1406 -j DROP +-A limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1407 -j ACCEPT +-A limit-1407 -m limit --limit 1/second -j LOG +-A limit-1407 -j DROP +-A limit-1408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1408 -j ACCEPT +-A limit-1408 -m limit --limit 1/second -j LOG +-A limit-1408 -j DROP +-A limit-1409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1409 -j RETURN +-A limit-1409 -m limit --limit 1/second -j LOG +-A limit-1409 -j DROP +-A limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-141 -m limit --limit 1/second -j LOG +-A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1410 -j logaccept-15 +-A limit-1410 -m limit --limit 1/second -j LOG +-A limit-1410 -j DROP +-A limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1411 -j ACCEPT +-A limit-1411 -m limit --limit 1/second -j LOG +-A limit-1411 -j DROP +-A limit-1412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1412 -j ACCEPT +-A limit-1412 -j DROP +-A limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1413 -j RETURN +-A limit-1413 -j DROP +-A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1414 -j logaccept-16 +-A limit-1414 -j DROP +-A limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1415 -j ACCEPT +-A limit-1415 -j DROP +-A limit-1416 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1416 -j ACCEPT +-A limit-1416 -j DROP +-A limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1417 -j RETURN +-A limit-1417 -j DROP +-A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1418 -j logaccept-17 +-A limit-1418 -j DROP +-A limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1419 -j ACCEPT +-A limit-1419 -j DROP +-A limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-142 -j ACCEPT +-A limit-1420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1420 -j ACCEPT +-A limit-1420 -m limit --limit 1/second -j LOG +-A limit-1420 -j DROP +-A limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1421 -j RETURN +-A limit-1421 -m limit --limit 1/second -j LOG +-A limit-1421 -j DROP +-A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1422 -j logaccept-18 +-A limit-1422 -m limit --limit 1/second -j LOG +-A limit-1422 -j DROP +-A limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1423 -j ACCEPT +-A limit-1423 -m limit --limit 1/second -j LOG +-A limit-1423 -j DROP +-A limit-1424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1424 -j ACCEPT +-A limit-1424 -j DROP +-A limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1425 -j RETURN +-A limit-1425 -j DROP +-A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1426 -j logaccept-19 +-A limit-1426 -j DROP +-A limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1427 -j ACCEPT +-A limit-1427 -j DROP +-A limit-1428 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1428 -j ACCEPT +-A limit-1428 -j DROP +-A limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1429 -j RETURN +-A limit-1429 -j DROP +-A limit-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1430 -j logaccept-20 +-A limit-1430 -j DROP +-A limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1431 -j ACCEPT +-A limit-1431 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-145 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-145 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-146 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-146 -m limit --limit 1/second -j LOG +-A limit-146 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-147 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-147 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-148 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-148 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-149 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-149 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 +-A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-150 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-150 -j ACCEPT +-A limit-151 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-152 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-152 -m limit --limit 1/second -j LOG +-A limit-152 -j ACCEPT +-A limit-153 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-153 -m limit --limit 1/second -j LOG +-A limit-154 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-154 -j ACCEPT +-A limit-155 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-157 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-157 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-158 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-158 -m limit --limit 1/second -j LOG +-A limit-158 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-159 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-159 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 +-A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-160 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-160 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-161 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-161 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-162 -j ACCEPT +-A limit-163 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-164 -m limit --limit 1/second -j LOG +-A limit-164 -j ACCEPT +-A limit-165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-165 -m limit --limit 1/second -j LOG +-A limit-166 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-166 -j ACCEPT +-A limit-167 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-60 +-A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 +-A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 +-A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 +-A limit-170 -m limit --limit 1/second -j LOG +-A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 +-A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 +-A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 +-A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 +-A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 +-A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 +-A limit-176 -m limit --limit 1/second -j LOG +-A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 +-A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 +-A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 +-A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-18 +-A limit-18 -j ACCEPT +-A limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-72 +-A limit-180 -j ACCEPT +-A limit-181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 +-A limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 +-A limit-182 -m limit --limit 1/second -j LOG +-A limit-182 -j ACCEPT +-A limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 +-A limit-183 -m limit --limit 1/second -j LOG +-A limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 +-A limit-184 -j ACCEPT +-A limit-185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 +-A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-78 +-A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 +-A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 +-A limit-188 -m limit --limit 1/second -j LOG +-A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 +-A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 +-A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 +-A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-84 +-A limit-192 -j ACCEPT +-A limit-193 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 +-A limit-194 -m limit --limit 1/second -j LOG +-A limit-194 -j ACCEPT +-A limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 +-A limit-195 -m limit --limit 1/second -j LOG +-A limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 +-A limit-196 -j ACCEPT +-A limit-197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-90 +-A limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 +-A limit-199 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 +-A limit-2 -m limit --limit 1/second -j LOG +-A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-20 +-A limit-20 -m limit --limit 1/second -j LOG +-A limit-20 -j ACCEPT +-A limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 +-A limit-200 -m limit --limit 1/second -j LOG +-A limit-200 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 +-A limit-201 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 +-A limit-202 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 +-A limit-203 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-96 +-A limit-204 -j ACCEPT +-A limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 +-A limit-206 -m limit --limit 1/second -j LOG +-A limit-206 -j ACCEPT +-A limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 +-A limit-207 -m limit --limit 1/second -j LOG +-A limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 +-A limit-208 -j ACCEPT +-A limit-209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 +-A limit-21 -m limit --limit 1/second -j LOG +-A limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-102 +-A limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 +-A limit-211 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 +-A limit-212 -m limit --limit 1/second -j LOG +-A limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 +-A limit-213 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 +-A limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 +-A limit-215 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-108 +-A limit-216 -j ACCEPT +-A limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 +-A limit-218 -m limit --limit 1/second -j LOG +-A limit-218 -j ACCEPT +-A limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 +-A limit-219 -m limit --limit 1/second -j LOG +-A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 +-A limit-22 -j ACCEPT +-A limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 +-A limit-220 -j ACCEPT +-A limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 +-A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-224 -m limit --limit 1/second -j LOG +-A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 +-A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-230 -m limit --limit 1/second -j LOG +-A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-234 -j ACCEPT +-A limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-236 -m limit --limit 1/second -j LOG +-A limit-236 -j ACCEPT +-A limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-237 -m limit --limit 1/second -j LOG +-A limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-238 -j ACCEPT +-A limit-239 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-242 -m limit --limit 1/second -j LOG +-A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-246 -j ACCEPT +-A limit-247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m limit --limit 1/second -j LOG +-A limit-248 -j ACCEPT +-A limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-249 -m limit --limit 1/second -j LOG +-A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 +-A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-250 -j ACCEPT +-A limit-251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-252 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-252 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-253 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-253 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-254 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-254 -m limit --limit 1/second -j LOG +-A limit-254 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-255 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-255 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-256 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-256 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-257 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-257 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-258 -j ACCEPT +-A limit-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 +-A limit-26 -m limit --limit 1/second -j LOG +-A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-260 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-260 -m limit --limit 1/second -j LOG +-A limit-260 -j ACCEPT +-A limit-261 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-261 -m limit --limit 1/second -j LOG +-A limit-262 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-262 -j ACCEPT +-A limit-263 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-265 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-266 -m limit --limit 1/second -j LOG +-A limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-267 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-269 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 +-A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-270 -j ACCEPT +-A limit-271 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-272 -m limit --limit 1/second -j LOG +-A limit-272 -j ACCEPT +-A limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-273 -m limit --limit 1/second -j LOG +-A limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-274 -j ACCEPT +-A limit-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-278 -m limit --limit 1/second -j LOG +-A limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 +-A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-284 -m limit --limit 1/second -j LOG +-A limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-288 -j ACCEPT +-A limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 +-A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-290 -m limit --limit 1/second -j LOG +-A limit-290 -j ACCEPT +-A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-291 -m limit --limit 1/second -j LOG +-A limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-292 -j ACCEPT +-A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-296 -m limit --limit 1/second -j LOG +-A limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 +-A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-30 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-30 +-A limit-30 -j ACCEPT +-A limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-300 -j ACCEPT +-A limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-302 -m limit --limit 1/second -j LOG +-A limit-302 -j ACCEPT +-A limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-303 -m limit --limit 1/second -j LOG +-A limit-304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-304 -j ACCEPT +-A limit-305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-307 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-308 -m limit --limit 1/second -j LOG +-A limit-308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-31 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 +-A limit-310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-311 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-312 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-312 -j ACCEPT +-A limit-313 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-314 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-314 -m limit --limit 1/second -j LOG +-A limit-314 -j ACCEPT +-A limit-315 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-315 -m limit --limit 1/second -j LOG +-A limit-316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-316 -j ACCEPT +-A limit-317 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-318 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-318 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-319 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-319 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 +-A limit-32 -m limit --limit 1/second -j LOG +-A limit-32 -j ACCEPT +-A limit-320 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-320 -m limit --limit 1/second -j LOG +-A limit-320 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-321 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-321 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-322 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-322 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-323 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-323 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-324 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-324 -j ACCEPT +-A limit-325 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-326 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-326 -m limit --limit 1/second -j LOG +-A limit-326 -j ACCEPT +-A limit-327 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-327 -m limit --limit 1/second -j LOG +-A limit-328 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-328 -j ACCEPT +-A limit-329 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 +-A limit-33 -m limit --limit 1/second -j LOG +-A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-330 -j ACCEPT +-A limit-330 -m limit --limit 1/second -j LOG +-A limit-330 -j DROP +-A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j RETURN +-A limit-331 -m limit --limit 1/second -j LOG +-A limit-331 -j DROP +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-0 +-A limit-332 -m limit --limit 1/second -j LOG +-A limit-332 -j DROP +-A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j ACCEPT +-A limit-333 -m limit --limit 1/second -j LOG +-A limit-333 -j DROP +-A limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-334 -j ACCEPT +-A limit-334 -m limit --limit 1/second -j LOG +-A limit-334 -j DROP +-A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j RETURN +-A limit-335 -m limit --limit 1/second -j LOG +-A limit-335 -j DROP +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-1 +-A limit-336 -m limit --limit 1/second -j LOG +-A limit-336 -j DROP +-A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-337 -j ACCEPT +-A limit-337 -m limit --limit 1/second -j LOG +-A limit-337 -j DROP +-A limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-338 -j ACCEPT +-A limit-338 -j DROP +-A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-339 -j RETURN +-A limit-339 -j DROP +-A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 +-A limit-34 -j ACCEPT +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-2 +-A limit-340 -j DROP +-A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-341 -j ACCEPT +-A limit-341 -j DROP +-A limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-342 -j ACCEPT +-A limit-342 -j DROP +-A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-343 -j RETURN +-A limit-343 -j DROP +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-3 +-A limit-344 -j DROP +-A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-345 -j ACCEPT +-A limit-345 -j DROP +-A limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-346 -j ACCEPT +-A limit-346 -m limit --limit 1/second -j LOG +-A limit-346 -j DROP +-A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-347 -j RETURN +-A limit-347 -m limit --limit 1/second -j LOG +-A limit-347 -j DROP +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-4 +-A limit-348 -m limit --limit 1/second -j LOG +-A limit-348 -j DROP +-A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-349 -j ACCEPT +-A limit-349 -m limit --limit 1/second -j LOG +-A limit-349 -j DROP +-A limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 +-A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-350 -j ACCEPT +-A limit-350 -j DROP +-A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-351 -j RETURN +-A limit-351 -j DROP +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-5 +-A limit-352 -j DROP +-A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-353 -j ACCEPT +-A limit-353 -j DROP +-A limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-354 -j ACCEPT +-A limit-354 -j DROP +-A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-355 -j RETURN +-A limit-355 -j DROP +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-6 +-A limit-356 -j DROP +-A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-357 -j ACCEPT +-A limit-357 -j DROP +-A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-114 +-A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-36 +-A limit-36 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-360 -m limit --limit 1/second -j LOG +-A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-366 -m limit --limit 1/second -j LOG +-A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-37 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 +-A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-372 -m limit --limit 1/second -j LOG +-A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-376 -j ACCEPT +-A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-378 -m limit --limit 1/second -j LOG +-A limit-378 -j ACCEPT +-A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-379 -m limit --limit 1/second -j LOG +-A limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-38 -m limit --limit 1/second -j LOG +-A limit-38 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-380 -j ACCEPT +-A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-384 -m limit --limit 1/second -j LOG +-A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-388 -j ACCEPT +-A limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 +-A limit-39 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A limit-390 -m limit --limit 1/second -j LOG +-A limit-390 -j ACCEPT +-A limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-391 -m limit --limit 1/second -j LOG +-A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 +-A limit-392 -j ACCEPT +-A limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-150 +-A limit-394 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-395 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 +-A limit-396 -m limit --limit 1/second -j LOG +-A limit-396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-399 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 +-A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-40 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-400 -j ACCEPT +-A limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 +-A limit-402 -m limit --limit 1/second -j LOG +-A limit-402 -j ACCEPT +-A limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-403 -m limit --limit 1/second -j LOG +-A limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 +-A limit-404 -j ACCEPT +-A limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-162 +-A limit-406 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-407 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-408 -m limit --limit 1/second -j LOG +-A limit-408 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-41 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 +-A limit-410 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-411 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-412 -j ACCEPT +-A limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 +-A limit-414 -m limit --limit 1/second -j LOG +-A limit-414 -j ACCEPT +-A limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-415 -m limit --limit 1/second -j LOG +-A limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-416 -j ACCEPT +-A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-42 -j ACCEPT +-A limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-420 -m limit --limit 1/second -j LOG +-A limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-426 -m limit --limit 1/second -j LOG +-A limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-43 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-430 -j ACCEPT +-A limit-432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-432 -m limit --limit 1/second -j LOG +-A limit-432 -j ACCEPT +-A limit-433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-433 -m limit --limit 1/second -j LOG +-A limit-434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-434 -j ACCEPT +-A limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-438 -m limit --limit 1/second -j LOG +-A limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 +-A limit-44 -m limit --limit 1/second -j LOG +-A limit-44 -j ACCEPT +-A limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-442 -j ACCEPT +-A limit-444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-444 -m limit --limit 1/second -j LOG +-A limit-444 -j ACCEPT +-A limit-445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-445 -m limit --limit 1/second -j LOG +-A limit-446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-446 -j ACCEPT +-A limit-448 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-448 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-449 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-449 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 +-A limit-45 -m limit --limit 1/second -j LOG +-A limit-450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-450 -m limit --limit 1/second -j LOG +-A limit-450 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-451 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-451 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-452 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-452 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-453 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-453 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-454 -j ACCEPT +-A limit-456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-456 -m limit --limit 1/second -j LOG +-A limit-456 -j ACCEPT +-A limit-457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-457 -m limit --limit 1/second -j LOG +-A limit-458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-458 -j ACCEPT +-A limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-46 -j ACCEPT +-A limit-460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-461 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-462 -m limit --limit 1/second -j LOG +-A limit-462 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-463 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-464 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-465 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-466 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-466 -j ACCEPT +-A limit-468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-468 -m limit --limit 1/second -j LOG +-A limit-468 -j ACCEPT +-A limit-469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-469 -m limit --limit 1/second -j LOG +-A limit-47 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-470 -j ACCEPT +-A limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-474 -m limit --limit 1/second -j LOG +-A limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-48 +-A limit-48 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-480 -m limit --limit 1/second -j LOG +-A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-484 -j ACCEPT +-A limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-486 -m limit --limit 1/second -j LOG +-A limit-486 -j ACCEPT +-A limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-487 -m limit --limit 1/second -j LOG +-A limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-488 -j ACCEPT +-A limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-49 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-492 -m limit --limit 1/second -j LOG +-A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-496 -j ACCEPT +-A limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-498 -m limit --limit 1/second -j LOG +-A limit-498 -j ACCEPT +-A limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-499 -m limit --limit 1/second -j LOG +-A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 +-A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-50 -m limit --limit 1/second -j LOG +-A limit-50 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-500 -j ACCEPT +-A limit-502 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-502 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-503 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-503 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-504 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-504 -m limit --limit 1/second -j LOG +-A limit-504 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-505 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-505 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-506 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-506 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-507 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-507 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-508 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-508 -j ACCEPT +-A limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 +-A limit-51 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-510 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-510 -m limit --limit 1/second -j LOG +-A limit-510 -j ACCEPT +-A limit-511 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-511 -m limit --limit 1/second -j LOG +-A limit-512 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-512 -j ACCEPT +-A limit-514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-514 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-515 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-516 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-516 -m limit --limit 1/second -j LOG +-A limit-516 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-517 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-517 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-518 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-518 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-519 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-519 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-52 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-520 -j ACCEPT +-A limit-522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-522 -m limit --limit 1/second -j LOG +-A limit-522 -j ACCEPT +-A limit-523 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-523 -m limit --limit 1/second -j LOG +-A limit-524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-524 -j ACCEPT +-A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-174 +-A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 +-A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 +-A limit-528 -m limit --limit 1/second -j LOG +-A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 +-A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-53 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 +-A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 +-A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 +-A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 +-A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 +-A limit-534 -m limit --limit 1/second -j LOG +-A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 +-A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 +-A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 +-A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-538 -j ACCEPT +-A limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-54 -j ACCEPT +-A limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 +-A limit-540 -m limit --limit 1/second -j LOG +-A limit-540 -j ACCEPT +-A limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 +-A limit-541 -m limit --limit 1/second -j LOG +-A limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 +-A limit-542 -j ACCEPT +-A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-192 +-A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 +-A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 +-A limit-546 -m limit --limit 1/second -j LOG +-A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 +-A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 +-A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 +-A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-55 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-198 +-A limit-550 -j ACCEPT +-A limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A limit-552 -m limit --limit 1/second -j LOG +-A limit-552 -j ACCEPT +-A limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 +-A limit-553 -m limit --limit 1/second -j LOG +-A limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 +-A limit-554 -j ACCEPT +-A limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-204 +-A limit-556 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 +-A limit-557 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 +-A limit-558 -m limit --limit 1/second -j LOG +-A limit-558 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 +-A limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 +-A limit-56 -m limit --limit 1/second -j LOG +-A limit-56 -j ACCEPT +-A limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 +-A limit-560 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 +-A limit-561 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-210 +-A limit-562 -j ACCEPT +-A limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 +-A limit-564 -m limit --limit 1/second -j LOG +-A limit-564 -j ACCEPT +-A limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 +-A limit-565 -m limit --limit 1/second -j LOG +-A limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 +-A limit-566 -j ACCEPT +-A limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-216 +-A limit-568 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 +-A limit-569 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-57 -m limit --limit 1/second -j LOG +-A limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 +-A limit-570 -m limit --limit 1/second -j LOG +-A limit-570 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 +-A limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-572 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 +-A limit-573 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-574 -j ACCEPT +-A limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 +-A limit-576 -m limit --limit 1/second -j LOG +-A limit-576 -j ACCEPT +-A limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 +-A limit-577 -m limit --limit 1/second -j LOG +-A limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 +-A limit-578 -j ACCEPT +-A limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-58 -j ACCEPT +-A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-582 -m limit --limit 1/second -j LOG +-A limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-588 -m limit --limit 1/second -j LOG +-A limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-59 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-592 -j ACCEPT +-A limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-594 -m limit --limit 1/second -j LOG +-A limit-594 -j ACCEPT +-A limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-595 -m limit --limit 1/second -j LOG +-A limit-596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-596 -j ACCEPT +-A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 +-A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-600 -m limit --limit 1/second -j LOG +-A limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-604 -j ACCEPT +-A limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-606 -m limit --limit 1/second -j LOG +-A limit-606 -j ACCEPT +-A limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-607 -m limit --limit 1/second -j LOG +-A limit-608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-608 -j ACCEPT +-A limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-610 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-610 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-611 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-611 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-612 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-612 -m limit --limit 1/second -j LOG +-A limit-612 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-613 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-613 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-614 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-614 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-615 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-615 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-616 -j ACCEPT +-A limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-618 -m limit --limit 1/second -j LOG +-A limit-618 -j ACCEPT +-A limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-619 -m limit --limit 1/second -j LOG +-A limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-62 -m limit --limit 1/second -j LOG +-A limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-620 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-620 -j ACCEPT +-A limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-623 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-624 -m limit --limit 1/second -j LOG +-A limit-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-625 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-627 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-628 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-628 -j ACCEPT +-A limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-630 -m limit --limit 1/second -j LOG +-A limit-630 -j ACCEPT +-A limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-631 -m limit --limit 1/second -j LOG +-A limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-632 -j ACCEPT +-A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-636 -m limit --limit 1/second -j LOG +-A limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-642 -m limit --limit 1/second -j LOG +-A limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-646 -j ACCEPT +-A limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-648 -m limit --limit 1/second -j LOG +-A limit-648 -j ACCEPT +-A limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-649 -m limit --limit 1/second -j LOG +-A limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-650 -j ACCEPT +-A limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-654 -m limit --limit 1/second -j LOG +-A limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-658 -j ACCEPT +-A limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-660 -m limit --limit 1/second -j LOG +-A limit-660 -j ACCEPT +-A limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-661 -m limit --limit 1/second -j LOG +-A limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-662 -j ACCEPT +-A limit-664 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-664 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-665 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-665 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-666 -m limit --limit 1/second -j LOG +-A limit-666 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-667 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-668 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-669 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-670 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-670 -j ACCEPT +-A limit-672 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-672 -m limit --limit 1/second -j LOG +-A limit-672 -j ACCEPT +-A limit-673 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-673 -m limit --limit 1/second -j LOG +-A limit-674 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-674 -j ACCEPT +-A limit-676 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-676 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-677 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-677 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-678 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-678 -m limit --limit 1/second -j LOG +-A limit-678 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-679 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-679 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-68 -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-680 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-680 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-681 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-681 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-682 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-682 -j ACCEPT +-A limit-684 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-684 -m limit --limit 1/second -j LOG +-A limit-684 -j ACCEPT +-A limit-685 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-685 -m limit --limit 1/second -j LOG +-A limit-686 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-686 -j ACCEPT +-A limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-688 -j ACCEPT +-A limit-688 -m limit --limit 1/second -j LOG +-A limit-688 -j DROP +-A limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-689 -j RETURN +-A limit-689 -m limit --limit 1/second -j LOG +-A limit-689 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j logaccept-7 +-A limit-690 -m limit --limit 1/second -j LOG +-A limit-690 -j DROP +-A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-691 -j ACCEPT +-A limit-691 -m limit --limit 1/second -j LOG +-A limit-691 -j DROP +-A limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-692 -j ACCEPT +-A limit-692 -m limit --limit 1/second -j LOG +-A limit-692 -j DROP +-A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-693 -j RETURN +-A limit-693 -m limit --limit 1/second -j LOG +-A limit-693 -j DROP +-A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j logaccept-8 +-A limit-694 -m limit --limit 1/second -j LOG +-A limit-694 -j DROP +-A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-695 -j ACCEPT +-A limit-695 -m limit --limit 1/second -j LOG +-A limit-695 -j DROP +-A limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-696 -j ACCEPT +-A limit-696 -j DROP +-A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-697 -j RETURN +-A limit-697 -j DROP +-A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j logaccept-9 +-A limit-698 -j DROP +-A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-699 -j ACCEPT +-A limit-699 -j DROP +-A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 +-A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-700 -j ACCEPT +-A limit-700 -j DROP +-A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-701 -j RETURN +-A limit-701 -j DROP +-A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j logaccept-10 +-A limit-702 -j DROP +-A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-703 -j ACCEPT +-A limit-703 -j DROP +-A limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-704 -j ACCEPT +-A limit-704 -m limit --limit 1/second -j LOG +-A limit-704 -j DROP +-A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-705 -j RETURN +-A limit-705 -m limit --limit 1/second -j LOG +-A limit-705 -j DROP +-A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j logaccept-11 +-A limit-706 -m limit --limit 1/second -j LOG +-A limit-706 -j DROP +-A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-707 -j ACCEPT +-A limit-707 -m limit --limit 1/second -j LOG +-A limit-707 -j DROP +-A limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-708 -j ACCEPT +-A limit-708 -j DROP +-A limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-709 -j RETURN +-A limit-709 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j logaccept-12 +-A limit-710 -j DROP +-A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-711 -j ACCEPT +-A limit-711 -j DROP +-A limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-712 -j ACCEPT +-A limit-712 -j DROP +-A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-713 -j RETURN +-A limit-713 -j DROP +-A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j logaccept-13 +-A limit-714 -j DROP +-A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-715 -j ACCEPT +-A limit-715 -j DROP +-A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-228 +-A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-72 -j ACCEPT +-A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 +-A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 +-A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 +-A limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 +-A limit-737 -m limit --limit 1/second -j LOG +-A limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-739 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 +-A limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-74 -m limit --limit 1/second -j LOG +-A limit-74 -j ACCEPT +-A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-252 +-A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 +-A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 +-A limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 +-A limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 +-A limit-749 -m limit --limit 1/second -j LOG +-A limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-75 -m limit --limit 1/second -j LOG +-A limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-264 +-A limit-752 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-753 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-754 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-756 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-757 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 +-A limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-76 -j ACCEPT +-A limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 +-A limit-761 -m limit --limit 1/second -j LOG +-A limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-276 +-A limit-764 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-765 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 +-A limit-766 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-767 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 +-A limit-768 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 +-A limit-769 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 +-A limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 +-A limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 +-A limit-773 -m limit --limit 1/second -j LOG +-A limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 +-A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-791 -m limit --limit 1/second -j LOG +-A limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 +-A limit-8 -m limit --limit 1/second -j LOG +-A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m limit --limit 1/second -j LOG +-A limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-801 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-803 -m limit --limit 1/second -j LOG +-A limit-804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-806 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-807 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-808 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-808 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-809 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-809 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-810 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-810 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-811 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-811 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-813 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-815 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-815 -m limit --limit 1/second -j LOG +-A limit-816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-817 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-819 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-820 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-822 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-823 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-824 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-825 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-826 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-827 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-827 -m limit --limit 1/second -j LOG +-A limit-828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-829 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-84 -j ACCEPT +-A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-845 -m limit --limit 1/second -j LOG +-A limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-847 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-857 -m limit --limit 1/second -j LOG +-A limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-86 -m limit --limit 1/second -j LOG +-A limit-86 -j ACCEPT +-A limit-860 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-860 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-861 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-861 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-862 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-862 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-863 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-863 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-864 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-864 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-865 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-865 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-866 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-867 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-868 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-869 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-869 -m limit --limit 1/second -j LOG +-A limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-87 -m limit --limit 1/second -j LOG +-A limit-870 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-871 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-872 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-873 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-874 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-875 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-876 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-876 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-877 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-877 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-879 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-88 -j ACCEPT +-A limit-880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-881 -m limit --limit 1/second -j LOG +-A limit-882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-883 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-288 +-A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 +-A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-897 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 +-A limit-899 -m limit --limit 1/second -j LOG +-A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 +-A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-90 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-90 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-901 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-306 +-A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 +-A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-909 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 +-A limit-91 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-91 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 +-A limit-911 -m limit --limit 1/second -j LOG +-A limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-913 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-318 +-A limit-914 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-915 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-916 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-917 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-918 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-919 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-92 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-92 -m limit --limit 1/second -j LOG +-A limit-92 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-921 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 +-A limit-923 -m limit --limit 1/second -j LOG +-A limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-925 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 +-A limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-330 +-A limit-926 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-927 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-928 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-929 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-93 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-93 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-930 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-931 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-933 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 +-A limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 +-A limit-935 -m limit --limit 1/second -j LOG +-A limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-937 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 +-A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-94 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-94 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-95 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-95 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-953 -m limit --limit 1/second -j LOG +-A limit-954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-96 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-96 -j ACCEPT +-A limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-962 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-963 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-964 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-965 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-965 -m limit --limit 1/second -j LOG +-A limit-966 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-967 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-968 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-968 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-969 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-969 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-97 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-970 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-970 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-971 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-971 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-972 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-972 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-973 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-973 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-974 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-975 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-976 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-977 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-977 -m limit --limit 1/second -j LOG +-A limit-978 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-979 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-98 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-98 -m limit --limit 1/second -j LOG +-A limit-98 -j ACCEPT +-A limit-980 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-980 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-981 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-981 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-982 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-982 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-983 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-983 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-984 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-984 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-985 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-985 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-986 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-987 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-988 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-989 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-989 -m limit --limit 1/second -j LOG +-A limit-99 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-99 -m limit --limit 1/second -j LOG +-A limit-990 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-991 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logaccept-1 -m limit --limit 1/second -j LOG +-A logaccept-1 -j ACCEPT +-A logaccept-10 -m limit --limit 1/second -j LOG +-A logaccept-10 -j ACCEPT +-A logaccept-11 -m limit --limit 1/second -j LOG +-A logaccept-11 -j ACCEPT +-A logaccept-12 -m limit --limit 1/second -j LOG +-A logaccept-12 -j ACCEPT +-A logaccept-13 -m limit --limit 1/second -j LOG +-A logaccept-13 -j ACCEPT +-A logaccept-14 -m limit --limit 1/second -j LOG +-A logaccept-14 -j ACCEPT +-A logaccept-15 -m limit --limit 1/second -j LOG +-A logaccept-15 -j ACCEPT +-A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j ACCEPT +-A logaccept-17 -m limit --limit 1/second -j LOG +-A logaccept-17 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-19 -m limit --limit 1/second -j LOG +-A logaccept-19 -j ACCEPT +-A logaccept-2 -m limit --limit 1/second -j LOG +-A logaccept-2 -j ACCEPT +-A logaccept-20 -m limit --limit 1/second -j LOG +-A logaccept-20 -j ACCEPT +-A logaccept-21 -m limit --limit 1/second -j LOG +-A logaccept-21 -j ACCEPT +-A logaccept-3 -m limit --limit 1/second -j LOG +-A logaccept-3 -j ACCEPT +-A logaccept-4 -m limit --limit 1/second -j LOG +-A logaccept-4 -j ACCEPT +-A logaccept-5 -m limit --limit 1/second -j LOG +-A logaccept-5 -j ACCEPT +-A logaccept-6 -m limit --limit 1/second -j LOG +-A logaccept-6 -j ACCEPT +-A logaccept-7 -m limit --limit 1/second -j LOG +-A logaccept-7 -j ACCEPT +-A logaccept-8 -m limit --limit 1/second -j LOG +-A logaccept-8 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG +-A logaccept-9 -j ACCEPT +-A logaccept-final-0 -m limit --limit 1/second -j LOG +-A logaccept-final-0 -j ACCEPT +-A logaccept-final-1 -m limit --limit 1/second -j LOG +-A logaccept-final-1 -j ACCEPT +-A logaccept-final-10 -m limit --limit 1/second -j LOG +-A logaccept-final-10 -j ACCEPT +-A logaccept-final-11 -m limit --limit 1/second -j LOG +-A logaccept-final-11 -j ACCEPT +-A logaccept-final-12 -m limit --limit 1/second -j LOG +-A logaccept-final-12 -j ACCEPT +-A logaccept-final-13 -m limit --limit 1/second -j LOG +-A logaccept-final-13 -j ACCEPT +-A logaccept-final-14 -m limit --limit 1/second -j LOG +-A logaccept-final-14 -j ACCEPT +-A logaccept-final-15 -m limit --limit 1/second -j LOG +-A logaccept-final-15 -j ACCEPT +-A logaccept-final-16 -m limit --limit 1/second -j LOG +-A logaccept-final-16 -j ACCEPT +-A logaccept-final-17 -m limit --limit 1/second -j LOG +-A logaccept-final-17 -j ACCEPT +-A logaccept-final-18 -m limit --limit 1/second -j LOG +-A logaccept-final-18 -j ACCEPT +-A logaccept-final-19 -m limit --limit 1/second -j LOG +-A logaccept-final-19 -j ACCEPT +-A logaccept-final-2 -m limit --limit 1/second -j LOG +-A logaccept-final-2 -j ACCEPT +-A logaccept-final-20 -m limit --limit 1/second -j LOG +-A logaccept-final-20 -j ACCEPT +-A logaccept-final-21 -m limit --limit 1/second -j LOG +-A logaccept-final-21 -j ACCEPT +-A logaccept-final-22 -m limit --limit 1/second -j LOG +-A logaccept-final-22 -j ACCEPT +-A logaccept-final-23 -m limit --limit 1/second -j LOG +-A logaccept-final-23 -j ACCEPT +-A logaccept-final-24 -m limit --limit 1/second -j LOG +-A logaccept-final-24 -j ACCEPT +-A logaccept-final-25 -m limit --limit 1/second -j LOG +-A logaccept-final-25 -j ACCEPT +-A logaccept-final-26 -m limit --limit 1/second -j LOG +-A logaccept-final-26 -j ACCEPT +-A logaccept-final-27 -m limit --limit 1/second -j LOG +-A logaccept-final-27 -j ACCEPT +-A logaccept-final-28 -m limit --limit 1/second -j LOG +-A logaccept-final-28 -j ACCEPT +-A logaccept-final-29 -m limit --limit 1/second -j LOG +-A logaccept-final-29 -j ACCEPT +-A logaccept-final-3 -m limit --limit 1/second -j LOG +-A logaccept-final-3 -j ACCEPT +-A logaccept-final-30 -m limit --limit 1/second -j LOG +-A logaccept-final-30 -j ACCEPT +-A logaccept-final-31 -m limit --limit 1/second -j LOG +-A logaccept-final-31 -j ACCEPT +-A logaccept-final-32 -m limit --limit 1/second -j LOG +-A logaccept-final-32 -j ACCEPT +-A logaccept-final-33 -m limit --limit 1/second -j LOG +-A logaccept-final-33 -j ACCEPT +-A logaccept-final-34 -m limit --limit 1/second -j LOG +-A logaccept-final-34 -j ACCEPT +-A logaccept-final-35 -m limit --limit 1/second -j LOG +-A logaccept-final-35 -j ACCEPT +-A logaccept-final-36 -m limit --limit 1/second -j LOG +-A logaccept-final-36 -j ACCEPT +-A logaccept-final-37 -m limit --limit 1/second -j LOG +-A logaccept-final-37 -j ACCEPT +-A logaccept-final-38 -m limit --limit 1/second -j LOG +-A logaccept-final-38 -j ACCEPT +-A logaccept-final-39 -m limit --limit 1/second -j LOG +-A logaccept-final-39 -j ACCEPT +-A logaccept-final-4 -m limit --limit 1/second -j LOG +-A logaccept-final-4 -j ACCEPT +-A logaccept-final-40 -m limit --limit 1/second -j LOG +-A logaccept-final-40 -j ACCEPT +-A logaccept-final-41 -m limit --limit 1/second -j LOG +-A logaccept-final-41 -j ACCEPT +-A logaccept-final-42 -m limit --limit 1/second -j LOG +-A logaccept-final-42 -j ACCEPT +-A logaccept-final-43 -m limit --limit 1/second -j LOG +-A logaccept-final-43 -j ACCEPT +-A logaccept-final-44 -m limit --limit 1/second -j LOG +-A logaccept-final-44 -j ACCEPT +-A logaccept-final-45 -m limit --limit 1/second -j LOG +-A logaccept-final-45 -j ACCEPT +-A logaccept-final-46 -m limit --limit 1/second -j LOG +-A logaccept-final-46 -j ACCEPT +-A logaccept-final-47 -m limit --limit 1/second -j LOG +-A logaccept-final-47 -j ACCEPT +-A logaccept-final-48 -m limit --limit 1/second -j LOG +-A logaccept-final-48 -j ACCEPT +-A logaccept-final-49 -m limit --limit 1/second -j LOG +-A logaccept-final-49 -j ACCEPT +-A logaccept-final-5 -m limit --limit 1/second -j LOG +-A logaccept-final-5 -j ACCEPT +-A logaccept-final-50 -m limit --limit 1/second -j LOG +-A logaccept-final-50 -j ACCEPT +-A logaccept-final-51 -m limit --limit 1/second -j LOG +-A logaccept-final-51 -j ACCEPT +-A logaccept-final-52 -m limit --limit 1/second -j LOG +-A logaccept-final-52 -j ACCEPT +-A logaccept-final-53 -m limit --limit 1/second -j LOG +-A logaccept-final-53 -j ACCEPT +-A logaccept-final-54 -m limit --limit 1/second -j LOG +-A logaccept-final-54 -j ACCEPT +-A logaccept-final-55 -m limit --limit 1/second -j LOG +-A logaccept-final-55 -j ACCEPT +-A logaccept-final-56 -m limit --limit 1/second -j LOG +-A logaccept-final-56 -j ACCEPT +-A logaccept-final-57 -m limit --limit 1/second -j LOG +-A logaccept-final-57 -j ACCEPT +-A logaccept-final-58 -m limit --limit 1/second -j LOG +-A logaccept-final-58 -j ACCEPT +-A logaccept-final-59 -m limit --limit 1/second -j LOG +-A logaccept-final-59 -j ACCEPT +-A logaccept-final-6 -m limit --limit 1/second -j LOG +-A logaccept-final-6 -j ACCEPT +-A logaccept-final-60 -m limit --limit 1/second -j LOG +-A logaccept-final-60 -j ACCEPT +-A logaccept-final-61 -m limit --limit 1/second -j LOG +-A logaccept-final-61 -j ACCEPT +-A logaccept-final-7 -m limit --limit 1/second -j LOG +-A logaccept-final-7 -j ACCEPT +-A logaccept-final-8 -m limit --limit 1/second -j LOG +-A logaccept-final-8 -j ACCEPT +-A logaccept-final-9 -m limit --limit 1/second -j LOG +-A logaccept-final-9 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logdrop-10 -m limit --limit 1/second -j LOG +-A logdrop-10 -j DROP +-A logdrop-100 -m limit --limit 1/second -j LOG +-A logdrop-100 -j DROP +-A logdrop-101 -m limit --limit 1/second -j LOG +-A logdrop-101 -j DROP +-A logdrop-102 -m limit --limit 1/second -j LOG +-A logdrop-102 -j DROP +-A logdrop-103 -m limit --limit 1/second -j LOG +-A logdrop-103 -j DROP +-A logdrop-104 -m limit --limit 1/second -j LOG +-A logdrop-104 -j DROP +-A logdrop-105 -m limit --limit 1/second -j LOG +-A logdrop-105 -j DROP +-A logdrop-106 -m limit --limit 1/second -j LOG +-A logdrop-106 -j DROP +-A logdrop-107 -m limit --limit 1/second -j LOG +-A logdrop-107 -j DROP +-A logdrop-108 -m limit --limit 1/second -j LOG +-A logdrop-108 -j DROP +-A logdrop-109 -m limit --limit 1/second -j LOG +-A logdrop-109 -j DROP +-A logdrop-11 -m limit --limit 1/second -j LOG +-A logdrop-11 -j DROP +-A logdrop-110 -m limit --limit 1/second -j LOG +-A logdrop-110 -j DROP +-A logdrop-111 -m limit --limit 1/second -j LOG +-A logdrop-111 -j DROP +-A logdrop-112 -m limit --limit 1/second -j LOG +-A logdrop-112 -j DROP +-A logdrop-113 -m limit --limit 1/second -j LOG +-A logdrop-113 -j DROP +-A logdrop-114 -m limit --limit 1/second -j LOG +-A logdrop-114 -j DROP +-A logdrop-115 -m limit --limit 1/second -j LOG +-A logdrop-115 -j DROP +-A logdrop-116 -m limit --limit 1/second -j LOG +-A logdrop-116 -j DROP +-A logdrop-117 -m limit --limit 1/second -j LOG +-A logdrop-117 -j DROP +-A logdrop-118 -m limit --limit 1/second -j LOG +-A logdrop-118 -j DROP +-A logdrop-119 -m limit --limit 1/second -j LOG +-A logdrop-119 -j DROP +-A logdrop-12 -m limit --limit 1/second -j LOG +-A logdrop-12 -j DROP +-A logdrop-120 -m limit --limit 1/second -j LOG +-A logdrop-120 -j DROP +-A logdrop-121 -m limit --limit 1/second -j LOG +-A logdrop-121 -j DROP +-A logdrop-122 -m limit --limit 1/second -j LOG +-A logdrop-122 -j DROP +-A logdrop-123 -m limit --limit 1/second -j LOG +-A logdrop-123 -j DROP +-A logdrop-124 -m limit --limit 1/second -j LOG +-A logdrop-124 -j DROP +-A logdrop-125 -m limit --limit 1/second -j LOG +-A logdrop-125 -j DROP +-A logdrop-126 -m limit --limit 1/second -j LOG +-A logdrop-126 -j DROP +-A logdrop-127 -m limit --limit 1/second -j LOG +-A logdrop-127 -j DROP +-A logdrop-128 -m limit --limit 1/second -j LOG +-A logdrop-128 -j DROP +-A logdrop-129 -m limit --limit 1/second -j LOG +-A logdrop-129 -j DROP +-A logdrop-13 -m limit --limit 1/second -j LOG +-A logdrop-13 -j DROP +-A logdrop-130 -m limit --limit 1/second -j LOG +-A logdrop-130 -j DROP +-A logdrop-131 -m limit --limit 1/second -j LOG +-A logdrop-131 -j DROP +-A logdrop-132 -m limit --limit 1/second -j LOG +-A logdrop-132 -j DROP +-A logdrop-133 -m limit --limit 1/second -j LOG +-A logdrop-133 -j DROP +-A logdrop-134 -m limit --limit 1/second -j LOG +-A logdrop-134 -j DROP +-A logdrop-135 -m limit --limit 1/second -j LOG +-A logdrop-135 -j DROP +-A logdrop-136 -m limit --limit 1/second -j LOG +-A logdrop-136 -j DROP +-A logdrop-137 -m limit --limit 1/second -j LOG +-A logdrop-137 -j DROP +-A logdrop-138 -m limit --limit 1/second -j LOG +-A logdrop-138 -j DROP +-A logdrop-139 -m limit --limit 1/second -j LOG +-A logdrop-139 -j DROP +-A logdrop-14 -m limit --limit 1/second -j LOG +-A logdrop-14 -j DROP +-A logdrop-140 -m limit --limit 1/second -j LOG +-A logdrop-140 -j DROP +-A logdrop-141 -m limit --limit 1/second -j LOG +-A logdrop-141 -j DROP +-A logdrop-142 -m limit --limit 1/second -j LOG +-A logdrop-142 -j DROP +-A logdrop-143 -m limit --limit 1/second -j LOG +-A logdrop-143 -j DROP +-A logdrop-144 -m limit --limit 1/second -j LOG +-A logdrop-144 -j DROP +-A logdrop-145 -m limit --limit 1/second -j LOG +-A logdrop-145 -j DROP +-A logdrop-146 -m limit --limit 1/second -j LOG +-A logdrop-146 -j DROP +-A logdrop-147 -m limit --limit 1/second -j LOG +-A logdrop-147 -j DROP +-A logdrop-148 -m limit --limit 1/second -j LOG +-A logdrop-148 -j DROP +-A logdrop-149 -m limit --limit 1/second -j LOG +-A logdrop-149 -j DROP +-A logdrop-15 -m limit --limit 1/second -j LOG +-A logdrop-15 -j DROP +-A logdrop-150 -m limit --limit 1/second -j LOG +-A logdrop-150 -j DROP +-A logdrop-151 -m limit --limit 1/second -j LOG +-A logdrop-151 -j DROP +-A logdrop-152 -m limit --limit 1/second -j LOG +-A logdrop-152 -j DROP +-A logdrop-153 -m limit --limit 1/second -j LOG +-A logdrop-153 -j DROP +-A logdrop-154 -m limit --limit 1/second -j LOG +-A logdrop-154 -j DROP +-A logdrop-155 -m limit --limit 1/second -j LOG +-A logdrop-155 -j DROP +-A logdrop-156 -m limit --limit 1/second -j LOG +-A logdrop-156 -j DROP +-A logdrop-157 -m limit --limit 1/second -j LOG +-A logdrop-157 -j DROP +-A logdrop-158 -m limit --limit 1/second -j LOG +-A logdrop-158 -j DROP +-A logdrop-159 -m limit --limit 1/second -j LOG +-A logdrop-159 -j DROP +-A logdrop-16 -m limit --limit 1/second -j LOG +-A logdrop-16 -j DROP +-A logdrop-160 -m limit --limit 1/second -j LOG +-A logdrop-160 -j DROP +-A logdrop-161 -m limit --limit 1/second -j LOG +-A logdrop-161 -j DROP +-A logdrop-162 -m limit --limit 1/second -j LOG +-A logdrop-162 -j DROP +-A logdrop-163 -m limit --limit 1/second -j LOG +-A logdrop-163 -j DROP +-A logdrop-164 -m limit --limit 1/second -j LOG +-A logdrop-164 -j DROP +-A logdrop-165 -m limit --limit 1/second -j LOG +-A logdrop-165 -j DROP +-A logdrop-166 -m limit --limit 1/second -j LOG +-A logdrop-166 -j DROP +-A logdrop-167 -m limit --limit 1/second -j LOG +-A logdrop-167 -j DROP +-A logdrop-168 -m limit --limit 1/second -j LOG +-A logdrop-168 -j DROP +-A logdrop-169 -m limit --limit 1/second -j LOG +-A logdrop-169 -j DROP +-A logdrop-17 -m limit --limit 1/second -j LOG +-A logdrop-17 -j DROP +-A logdrop-170 -m limit --limit 1/second -j LOG +-A logdrop-170 -j DROP +-A logdrop-171 -m limit --limit 1/second -j LOG +-A logdrop-171 -j DROP +-A logdrop-172 -m limit --limit 1/second -j LOG +-A logdrop-172 -j DROP +-A logdrop-173 -m limit --limit 1/second -j LOG +-A logdrop-173 -j DROP +-A logdrop-174 -m limit --limit 1/second -j LOG +-A logdrop-174 -j DROP +-A logdrop-175 -m limit --limit 1/second -j LOG +-A logdrop-175 -j DROP +-A logdrop-176 -m limit --limit 1/second -j LOG +-A logdrop-176 -j DROP +-A logdrop-177 -m limit --limit 1/second -j LOG +-A logdrop-177 -j DROP +-A logdrop-178 -m limit --limit 1/second -j LOG +-A logdrop-178 -j DROP +-A logdrop-179 -m limit --limit 1/second -j LOG +-A logdrop-179 -j DROP +-A logdrop-18 -m limit --limit 1/second -j LOG +-A logdrop-18 -j DROP +-A logdrop-180 -m limit --limit 1/second -j LOG +-A logdrop-180 -j DROP +-A logdrop-181 -m limit --limit 1/second -j LOG +-A logdrop-181 -j DROP +-A logdrop-182 -m limit --limit 1/second -j LOG +-A logdrop-182 -j DROP +-A logdrop-183 -m limit --limit 1/second -j LOG +-A logdrop-183 -j DROP +-A logdrop-184 -m limit --limit 1/second -j LOG +-A logdrop-184 -j DROP +-A logdrop-185 -m limit --limit 1/second -j LOG +-A logdrop-185 -j DROP +-A logdrop-186 -m limit --limit 1/second -j LOG +-A logdrop-186 -j DROP +-A logdrop-187 -m limit --limit 1/second -j LOG +-A logdrop-187 -j DROP +-A logdrop-188 -m limit --limit 1/second -j LOG +-A logdrop-188 -j DROP +-A logdrop-189 -m limit --limit 1/second -j LOG +-A logdrop-189 -j DROP +-A logdrop-19 -m limit --limit 1/second -j LOG +-A logdrop-19 -j DROP +-A logdrop-190 -m limit --limit 1/second -j LOG +-A logdrop-190 -j DROP +-A logdrop-191 -m limit --limit 1/second -j LOG +-A logdrop-191 -j DROP +-A logdrop-192 -m limit --limit 1/second -j LOG +-A logdrop-192 -j DROP +-A logdrop-193 -m limit --limit 1/second -j LOG +-A logdrop-193 -j DROP +-A logdrop-194 -m limit --limit 1/second -j LOG +-A logdrop-194 -j DROP +-A logdrop-195 -m limit --limit 1/second -j LOG +-A logdrop-195 -j DROP +-A logdrop-196 -m limit --limit 1/second -j LOG +-A logdrop-196 -j DROP +-A logdrop-197 -m limit --limit 1/second -j LOG +-A logdrop-197 -j DROP +-A logdrop-198 -m limit --limit 1/second -j LOG +-A logdrop-198 -j DROP +-A logdrop-199 -m limit --limit 1/second -j LOG +-A logdrop-199 -j DROP +-A logdrop-2 -m limit --limit 1/second -j LOG +-A logdrop-2 -j DROP +-A logdrop-20 -m limit --limit 1/second -j LOG +-A logdrop-20 -j DROP +-A logdrop-200 -m limit --limit 1/second -j LOG +-A logdrop-200 -j DROP +-A logdrop-201 -m limit --limit 1/second -j LOG +-A logdrop-201 -j DROP +-A logdrop-202 -m limit --limit 1/second -j LOG +-A logdrop-202 -j DROP +-A logdrop-203 -m limit --limit 1/second -j LOG +-A logdrop-203 -j DROP +-A logdrop-204 -m limit --limit 1/second -j LOG +-A logdrop-204 -j DROP +-A logdrop-205 -m limit --limit 1/second -j LOG +-A logdrop-205 -j DROP +-A logdrop-206 -m limit --limit 1/second -j LOG +-A logdrop-206 -j DROP +-A logdrop-207 -m limit --limit 1/second -j LOG +-A logdrop-207 -j DROP +-A logdrop-208 -m limit --limit 1/second -j LOG +-A logdrop-208 -j DROP +-A logdrop-209 -m limit --limit 1/second -j LOG +-A logdrop-209 -j DROP +-A logdrop-21 -m limit --limit 1/second -j LOG +-A logdrop-21 -j DROP +-A logdrop-210 -m limit --limit 1/second -j LOG +-A logdrop-210 -j DROP +-A logdrop-211 -m limit --limit 1/second -j LOG +-A logdrop-211 -j DROP +-A logdrop-212 -m limit --limit 1/second -j LOG +-A logdrop-212 -j DROP +-A logdrop-213 -m limit --limit 1/second -j LOG +-A logdrop-213 -j DROP +-A logdrop-214 -m limit --limit 1/second -j LOG +-A logdrop-214 -j DROP +-A logdrop-215 -m limit --limit 1/second -j LOG +-A logdrop-215 -j DROP +-A logdrop-216 -m limit --limit 1/second -j LOG +-A logdrop-216 -j DROP +-A logdrop-217 -m limit --limit 1/second -j LOG +-A logdrop-217 -j DROP +-A logdrop-218 -m limit --limit 1/second -j LOG +-A logdrop-218 -j DROP +-A logdrop-219 -m limit --limit 1/second -j LOG +-A logdrop-219 -j DROP +-A logdrop-22 -m limit --limit 1/second -j LOG +-A logdrop-22 -j DROP +-A logdrop-220 -m limit --limit 1/second -j LOG +-A logdrop-220 -j DROP +-A logdrop-221 -m limit --limit 1/second -j LOG +-A logdrop-221 -j DROP +-A logdrop-222 -m limit --limit 1/second -j LOG +-A logdrop-222 -j DROP +-A logdrop-223 -m limit --limit 1/second -j LOG +-A logdrop-223 -j DROP +-A logdrop-224 -m limit --limit 1/second -j LOG +-A logdrop-224 -j DROP +-A logdrop-225 -m limit --limit 1/second -j LOG +-A logdrop-225 -j DROP +-A logdrop-226 -m limit --limit 1/second -j LOG +-A logdrop-226 -j DROP +-A logdrop-227 -m limit --limit 1/second -j LOG +-A logdrop-227 -j DROP +-A logdrop-228 -m limit --limit 1/second -j LOG +-A logdrop-228 -j DROP +-A logdrop-229 -m limit --limit 1/second -j LOG +-A logdrop-229 -j DROP +-A logdrop-23 -m limit --limit 1/second -j LOG +-A logdrop-23 -j DROP +-A logdrop-230 -m limit --limit 1/second -j LOG +-A logdrop-230 -j DROP +-A logdrop-231 -m limit --limit 1/second -j LOG +-A logdrop-231 -j DROP +-A logdrop-232 -m limit --limit 1/second -j LOG +-A logdrop-232 -j DROP +-A logdrop-233 -m limit --limit 1/second -j LOG +-A logdrop-233 -j DROP +-A logdrop-234 -m limit --limit 1/second -j LOG +-A logdrop-234 -j DROP +-A logdrop-235 -m limit --limit 1/second -j LOG +-A logdrop-235 -j DROP +-A logdrop-236 -m limit --limit 1/second -j LOG +-A logdrop-236 -j DROP +-A logdrop-237 -m limit --limit 1/second -j LOG +-A logdrop-237 -j DROP +-A logdrop-238 -m limit --limit 1/second -j LOG +-A logdrop-238 -j DROP +-A logdrop-239 -m limit --limit 1/second -j LOG +-A logdrop-239 -j DROP +-A logdrop-24 -m limit --limit 1/second -j LOG +-A logdrop-24 -j DROP +-A logdrop-240 -m limit --limit 1/second -j LOG +-A logdrop-240 -j DROP +-A logdrop-241 -m limit --limit 1/second -j LOG +-A logdrop-241 -j DROP +-A logdrop-242 -m limit --limit 1/second -j LOG +-A logdrop-242 -j DROP +-A logdrop-243 -m limit --limit 1/second -j LOG +-A logdrop-243 -j DROP +-A logdrop-244 -m limit --limit 1/second -j LOG +-A logdrop-244 -j DROP +-A logdrop-245 -m limit --limit 1/second -j LOG +-A logdrop-245 -j DROP +-A logdrop-246 -m limit --limit 1/second -j LOG +-A logdrop-246 -j DROP +-A logdrop-247 -m limit --limit 1/second -j LOG +-A logdrop-247 -j DROP +-A logdrop-248 -m limit --limit 1/second -j LOG +-A logdrop-248 -j DROP +-A logdrop-249 -m limit --limit 1/second -j LOG +-A logdrop-249 -j DROP +-A logdrop-25 -m limit --limit 1/second -j LOG +-A logdrop-25 -j DROP +-A logdrop-250 -m limit --limit 1/second -j LOG +-A logdrop-250 -j DROP +-A logdrop-251 -m limit --limit 1/second -j LOG +-A logdrop-251 -j DROP +-A logdrop-252 -m limit --limit 1/second -j LOG +-A logdrop-252 -j DROP +-A logdrop-253 -m limit --limit 1/second -j LOG +-A logdrop-253 -j DROP +-A logdrop-254 -m limit --limit 1/second -j LOG +-A logdrop-254 -j DROP +-A logdrop-255 -m limit --limit 1/second -j LOG +-A logdrop-255 -j DROP +-A logdrop-256 -m limit --limit 1/second -j LOG +-A logdrop-256 -j DROP +-A logdrop-257 -m limit --limit 1/second -j LOG +-A logdrop-257 -j DROP +-A logdrop-258 -m limit --limit 1/second -j LOG +-A logdrop-258 -j DROP +-A logdrop-259 -m limit --limit 1/second -j LOG +-A logdrop-259 -j DROP +-A logdrop-26 -m limit --limit 1/second -j LOG +-A logdrop-26 -j DROP +-A logdrop-260 -m limit --limit 1/second -j LOG +-A logdrop-260 -j DROP +-A logdrop-261 -m limit --limit 1/second -j LOG +-A logdrop-261 -j DROP +-A logdrop-262 -m limit --limit 1/second -j LOG +-A logdrop-262 -j DROP +-A logdrop-263 -m limit --limit 1/second -j LOG +-A logdrop-263 -j DROP +-A logdrop-264 -m limit --limit 1/second -j LOG +-A logdrop-264 -j DROP +-A logdrop-265 -m limit --limit 1/second -j LOG +-A logdrop-265 -j DROP +-A logdrop-266 -m limit --limit 1/second -j LOG +-A logdrop-266 -j DROP +-A logdrop-267 -m limit --limit 1/second -j LOG +-A logdrop-267 -j DROP +-A logdrop-268 -m limit --limit 1/second -j LOG +-A logdrop-268 -j DROP +-A logdrop-269 -m limit --limit 1/second -j LOG +-A logdrop-269 -j DROP +-A logdrop-27 -m limit --limit 1/second -j LOG +-A logdrop-27 -j DROP +-A logdrop-270 -m limit --limit 1/second -j LOG +-A logdrop-270 -j DROP +-A logdrop-271 -m limit --limit 1/second -j LOG +-A logdrop-271 -j DROP +-A logdrop-272 -m limit --limit 1/second -j LOG +-A logdrop-272 -j DROP +-A logdrop-273 -m limit --limit 1/second -j LOG +-A logdrop-273 -j DROP +-A logdrop-274 -m limit --limit 1/second -j LOG +-A logdrop-274 -j DROP +-A logdrop-275 -m limit --limit 1/second -j LOG +-A logdrop-275 -j DROP +-A logdrop-276 -m limit --limit 1/second -j LOG +-A logdrop-276 -j DROP +-A logdrop-277 -m limit --limit 1/second -j LOG +-A logdrop-277 -j DROP +-A logdrop-278 -m limit --limit 1/second -j LOG +-A logdrop-278 -j DROP +-A logdrop-279 -m limit --limit 1/second -j LOG +-A logdrop-279 -j DROP +-A logdrop-28 -m limit --limit 1/second -j LOG +-A logdrop-28 -j DROP +-A logdrop-280 -m limit --limit 1/second -j LOG +-A logdrop-280 -j DROP +-A logdrop-281 -m limit --limit 1/second -j LOG +-A logdrop-281 -j DROP +-A logdrop-282 -m limit --limit 1/second -j LOG +-A logdrop-282 -j DROP +-A logdrop-283 -m limit --limit 1/second -j LOG +-A logdrop-283 -j DROP +-A logdrop-284 -m limit --limit 1/second -j LOG +-A logdrop-284 -j DROP +-A logdrop-285 -m limit --limit 1/second -j LOG +-A logdrop-285 -j DROP +-A logdrop-286 -m limit --limit 1/second -j LOG +-A logdrop-286 -j DROP +-A logdrop-287 -m limit --limit 1/second -j LOG +-A logdrop-287 -j DROP +-A logdrop-288 -m limit --limit 1/second -j LOG +-A logdrop-288 -j DROP +-A logdrop-289 -m limit --limit 1/second -j LOG +-A logdrop-289 -j DROP +-A logdrop-29 -m limit --limit 1/second -j LOG +-A logdrop-29 -j DROP +-A logdrop-290 -m limit --limit 1/second -j LOG +-A logdrop-290 -j DROP +-A logdrop-291 -m limit --limit 1/second -j LOG +-A logdrop-291 -j DROP +-A logdrop-292 -m limit --limit 1/second -j LOG +-A logdrop-292 -j DROP +-A logdrop-293 -m limit --limit 1/second -j LOG +-A logdrop-293 -j DROP +-A logdrop-294 -m limit --limit 1/second -j LOG +-A logdrop-294 -j DROP +-A logdrop-295 -m limit --limit 1/second -j LOG +-A logdrop-295 -j DROP +-A logdrop-296 -m limit --limit 1/second -j LOG +-A logdrop-296 -j DROP +-A logdrop-297 -m limit --limit 1/second -j LOG +-A logdrop-297 -j DROP +-A logdrop-298 -m limit --limit 1/second -j LOG +-A logdrop-298 -j DROP +-A logdrop-299 -m limit --limit 1/second -j LOG +-A logdrop-299 -j DROP +-A logdrop-3 -m limit --limit 1/second -j LOG +-A logdrop-3 -j DROP +-A logdrop-30 -m limit --limit 1/second -j LOG +-A logdrop-30 -j DROP +-A logdrop-300 -m limit --limit 1/second -j LOG +-A logdrop-300 -j DROP +-A logdrop-301 -m limit --limit 1/second -j LOG +-A logdrop-301 -j DROP +-A logdrop-302 -m limit --limit 1/second -j LOG +-A logdrop-302 -j DROP +-A logdrop-303 -m limit --limit 1/second -j LOG +-A logdrop-303 -j DROP +-A logdrop-304 -m limit --limit 1/second -j LOG +-A logdrop-304 -j DROP +-A logdrop-305 -m limit --limit 1/second -j LOG +-A logdrop-305 -j DROP +-A logdrop-306 -m limit --limit 1/second -j LOG +-A logdrop-306 -j DROP +-A logdrop-307 -m limit --limit 1/second -j LOG +-A logdrop-307 -j DROP +-A logdrop-308 -m limit --limit 1/second -j LOG +-A logdrop-308 -j DROP +-A logdrop-309 -m limit --limit 1/second -j LOG +-A logdrop-309 -j DROP +-A logdrop-31 -m limit --limit 1/second -j LOG +-A logdrop-31 -j DROP +-A logdrop-310 -m limit --limit 1/second -j LOG +-A logdrop-310 -j DROP +-A logdrop-311 -m limit --limit 1/second -j LOG +-A logdrop-311 -j DROP +-A logdrop-312 -m limit --limit 1/second -j LOG +-A logdrop-312 -j DROP +-A logdrop-313 -m limit --limit 1/second -j LOG +-A logdrop-313 -j DROP +-A logdrop-314 -m limit --limit 1/second -j LOG +-A logdrop-314 -j DROP +-A logdrop-315 -m limit --limit 1/second -j LOG +-A logdrop-315 -j DROP +-A logdrop-316 -m limit --limit 1/second -j LOG +-A logdrop-316 -j DROP +-A logdrop-317 -m limit --limit 1/second -j LOG +-A logdrop-317 -j DROP +-A logdrop-318 -m limit --limit 1/second -j LOG +-A logdrop-318 -j DROP +-A logdrop-319 -m limit --limit 1/second -j LOG +-A logdrop-319 -j DROP +-A logdrop-32 -m limit --limit 1/second -j LOG +-A logdrop-32 -j DROP +-A logdrop-320 -m limit --limit 1/second -j LOG +-A logdrop-320 -j DROP +-A logdrop-321 -m limit --limit 1/second -j LOG +-A logdrop-321 -j DROP +-A logdrop-322 -m limit --limit 1/second -j LOG +-A logdrop-322 -j DROP +-A logdrop-323 -m limit --limit 1/second -j LOG +-A logdrop-323 -j DROP +-A logdrop-324 -m limit --limit 1/second -j LOG +-A logdrop-324 -j DROP +-A logdrop-325 -m limit --limit 1/second -j LOG +-A logdrop-325 -j DROP +-A logdrop-326 -m limit --limit 1/second -j LOG +-A logdrop-326 -j DROP +-A logdrop-327 -m limit --limit 1/second -j LOG +-A logdrop-327 -j DROP +-A logdrop-328 -m limit --limit 1/second -j LOG +-A logdrop-328 -j DROP +-A logdrop-329 -m limit --limit 1/second -j LOG +-A logdrop-329 -j DROP +-A logdrop-33 -m limit --limit 1/second -j LOG +-A logdrop-33 -j DROP +-A logdrop-330 -m limit --limit 1/second -j LOG +-A logdrop-330 -j DROP +-A logdrop-331 -m limit --limit 1/second -j LOG +-A logdrop-331 -j DROP +-A logdrop-332 -m limit --limit 1/second -j LOG +-A logdrop-332 -j DROP +-A logdrop-333 -m limit --limit 1/second -j LOG +-A logdrop-333 -j DROP +-A logdrop-334 -m limit --limit 1/second -j LOG +-A logdrop-334 -j DROP +-A logdrop-335 -m limit --limit 1/second -j LOG +-A logdrop-335 -j DROP +-A logdrop-336 -m limit --limit 1/second -j LOG +-A logdrop-336 -j DROP +-A logdrop-337 -m limit --limit 1/second -j LOG +-A logdrop-337 -j DROP +-A logdrop-338 -m limit --limit 1/second -j LOG +-A logdrop-338 -j DROP +-A logdrop-339 -m limit --limit 1/second -j LOG +-A logdrop-339 -j DROP +-A logdrop-34 -m limit --limit 1/second -j LOG +-A logdrop-34 -j DROP +-A logdrop-340 -m limit --limit 1/second -j LOG +-A logdrop-340 -j DROP +-A logdrop-341 -m limit --limit 1/second -j LOG +-A logdrop-341 -j DROP +-A logdrop-342 -m limit --limit 1/second -j LOG +-A logdrop-342 -j DROP +-A logdrop-343 -m limit --limit 1/second -j LOG +-A logdrop-343 -j DROP +-A logdrop-344 -m limit --limit 1/second -j LOG +-A logdrop-344 -j DROP +-A logdrop-345 -m limit --limit 1/second -j LOG +-A logdrop-345 -j DROP +-A logdrop-346 -m limit --limit 1/second -j LOG +-A logdrop-346 -j DROP +-A logdrop-347 -m limit --limit 1/second -j LOG +-A logdrop-347 -j DROP +-A logdrop-348 -m limit --limit 1/second -j LOG +-A logdrop-348 -j DROP +-A logdrop-349 -m limit --limit 1/second -j LOG +-A logdrop-349 -j DROP +-A logdrop-35 -m limit --limit 1/second -j LOG +-A logdrop-35 -j DROP +-A logdrop-350 -m limit --limit 1/second -j LOG +-A logdrop-350 -j DROP +-A logdrop-351 -m limit --limit 1/second -j LOG +-A logdrop-351 -j DROP +-A logdrop-352 -m limit --limit 1/second -j LOG +-A logdrop-352 -j DROP +-A logdrop-353 -m limit --limit 1/second -j LOG +-A logdrop-353 -j DROP +-A logdrop-354 -m limit --limit 1/second -j LOG +-A logdrop-354 -j DROP +-A logdrop-355 -m limit --limit 1/second -j LOG +-A logdrop-355 -j DROP +-A logdrop-356 -m limit --limit 1/second -j LOG +-A logdrop-356 -j DROP +-A logdrop-357 -m limit --limit 1/second -j LOG +-A logdrop-357 -j DROP +-A logdrop-358 -m limit --limit 1/second -j LOG +-A logdrop-358 -j DROP +-A logdrop-359 -m limit --limit 1/second -j LOG +-A logdrop-359 -j DROP +-A logdrop-36 -m limit --limit 1/second -j LOG +-A logdrop-36 -j DROP +-A logdrop-360 -m limit --limit 1/second -j LOG +-A logdrop-360 -j DROP +-A logdrop-361 -m limit --limit 1/second -j LOG +-A logdrop-361 -j DROP +-A logdrop-362 -m limit --limit 1/second -j LOG +-A logdrop-362 -j DROP +-A logdrop-363 -m limit --limit 1/second -j LOG +-A logdrop-363 -j DROP +-A logdrop-364 -m limit --limit 1/second -j LOG +-A logdrop-364 -j DROP +-A logdrop-365 -m limit --limit 1/second -j LOG +-A logdrop-365 -j DROP +-A logdrop-366 -m limit --limit 1/second -j LOG +-A logdrop-366 -j DROP +-A logdrop-367 -m limit --limit 1/second -j LOG +-A logdrop-367 -j DROP +-A logdrop-368 -m limit --limit 1/second -j LOG +-A logdrop-368 -j DROP +-A logdrop-369 -m limit --limit 1/second -j LOG +-A logdrop-369 -j DROP +-A logdrop-37 -m limit --limit 1/second -j LOG +-A logdrop-37 -j DROP +-A logdrop-370 -m limit --limit 1/second -j LOG +-A logdrop-370 -j DROP +-A logdrop-371 -m limit --limit 1/second -j LOG +-A logdrop-371 -j DROP +-A logdrop-372 -m limit --limit 1/second -j LOG +-A logdrop-372 -j DROP +-A logdrop-373 -m limit --limit 1/second -j LOG +-A logdrop-373 -j DROP +-A logdrop-374 -m limit --limit 1/second -j LOG +-A logdrop-374 -j DROP +-A logdrop-375 -m limit --limit 1/second -j LOG +-A logdrop-375 -j DROP +-A logdrop-376 -m limit --limit 1/second -j LOG +-A logdrop-376 -j DROP +-A logdrop-377 -m limit --limit 1/second -j LOG +-A logdrop-377 -j DROP +-A logdrop-378 -m limit --limit 1/second -j LOG +-A logdrop-378 -j DROP +-A logdrop-379 -m limit --limit 1/second -j LOG +-A logdrop-379 -j DROP +-A logdrop-38 -m limit --limit 1/second -j LOG +-A logdrop-38 -j DROP +-A logdrop-380 -m limit --limit 1/second -j LOG +-A logdrop-380 -j DROP +-A logdrop-381 -m limit --limit 1/second -j LOG +-A logdrop-381 -j DROP +-A logdrop-382 -m limit --limit 1/second -j LOG +-A logdrop-382 -j DROP +-A logdrop-383 -m limit --limit 1/second -j LOG +-A logdrop-383 -j DROP +-A logdrop-384 -m limit --limit 1/second -j LOG +-A logdrop-384 -j DROP +-A logdrop-385 -m limit --limit 1/second -j LOG +-A logdrop-385 -j DROP +-A logdrop-386 -m limit --limit 1/second -j LOG +-A logdrop-386 -j DROP +-A logdrop-387 -m limit --limit 1/second -j LOG +-A logdrop-387 -j DROP +-A logdrop-388 -m limit --limit 1/second -j LOG +-A logdrop-388 -j DROP +-A logdrop-389 -m limit --limit 1/second -j LOG +-A logdrop-389 -j DROP +-A logdrop-39 -m limit --limit 1/second -j LOG +-A logdrop-39 -j DROP +-A logdrop-390 -m limit --limit 1/second -j LOG +-A logdrop-390 -j DROP +-A logdrop-391 -m limit --limit 1/second -j LOG +-A logdrop-391 -j DROP +-A logdrop-392 -m limit --limit 1/second -j LOG +-A logdrop-392 -j DROP +-A logdrop-393 -m limit --limit 1/second -j LOG +-A logdrop-393 -j DROP +-A logdrop-394 -m limit --limit 1/second -j LOG +-A logdrop-394 -j DROP +-A logdrop-395 -m limit --limit 1/second -j LOG +-A logdrop-395 -j DROP +-A logdrop-396 -m limit --limit 1/second -j LOG +-A logdrop-396 -j DROP +-A logdrop-397 -m limit --limit 1/second -j LOG +-A logdrop-397 -j DROP +-A logdrop-398 -m limit --limit 1/second -j LOG +-A logdrop-398 -j DROP +-A logdrop-399 -m limit --limit 1/second -j LOG +-A logdrop-399 -j DROP +-A logdrop-4 -m limit --limit 1/second -j LOG +-A logdrop-4 -j DROP +-A logdrop-40 -m limit --limit 1/second -j LOG +-A logdrop-40 -j DROP +-A logdrop-400 -m limit --limit 1/second -j LOG +-A logdrop-400 -j DROP +-A logdrop-401 -m limit --limit 1/second -j LOG +-A logdrop-401 -j DROP +-A logdrop-402 -m limit --limit 1/second -j LOG +-A logdrop-402 -j DROP +-A logdrop-403 -m limit --limit 1/second -j LOG +-A logdrop-403 -j DROP +-A logdrop-404 -m limit --limit 1/second -j LOG +-A logdrop-404 -j DROP +-A logdrop-405 -m limit --limit 1/second -j LOG +-A logdrop-405 -j DROP +-A logdrop-406 -m limit --limit 1/second -j LOG +-A logdrop-406 -j DROP +-A logdrop-407 -m limit --limit 1/second -j LOG +-A logdrop-407 -j DROP +-A logdrop-408 -m limit --limit 1/second -j LOG +-A logdrop-408 -j DROP +-A logdrop-409 -m limit --limit 1/second -j LOG +-A logdrop-409 -j DROP +-A logdrop-41 -m limit --limit 1/second -j LOG +-A logdrop-41 -j DROP +-A logdrop-410 -m limit --limit 1/second -j LOG +-A logdrop-410 -j DROP +-A logdrop-411 -m limit --limit 1/second -j LOG +-A logdrop-411 -j DROP +-A logdrop-412 -m limit --limit 1/second -j LOG +-A logdrop-412 -j DROP +-A logdrop-413 -m limit --limit 1/second -j LOG +-A logdrop-413 -j DROP +-A logdrop-414 -m limit --limit 1/second -j LOG +-A logdrop-414 -j DROP +-A logdrop-415 -m limit --limit 1/second -j LOG +-A logdrop-415 -j DROP +-A logdrop-416 -m limit --limit 1/second -j LOG +-A logdrop-416 -j DROP +-A logdrop-417 -m limit --limit 1/second -j LOG +-A logdrop-417 -j DROP +-A logdrop-418 -m limit --limit 1/second -j LOG +-A logdrop-418 -j DROP +-A logdrop-419 -m limit --limit 1/second -j LOG +-A logdrop-419 -j DROP +-A logdrop-42 -m limit --limit 1/second -j LOG +-A logdrop-42 -j DROP +-A logdrop-420 -m limit --limit 1/second -j LOG +-A logdrop-420 -j DROP +-A logdrop-421 -m limit --limit 1/second -j LOG +-A logdrop-421 -j DROP +-A logdrop-422 -m limit --limit 1/second -j LOG +-A logdrop-422 -j DROP +-A logdrop-423 -m limit --limit 1/second -j LOG +-A logdrop-423 -j DROP +-A logdrop-424 -m limit --limit 1/second -j LOG +-A logdrop-424 -j DROP +-A logdrop-425 -m limit --limit 1/second -j LOG +-A logdrop-425 -j DROP +-A logdrop-426 -m limit --limit 1/second -j LOG +-A logdrop-426 -j DROP +-A logdrop-427 -m limit --limit 1/second -j LOG +-A logdrop-427 -j DROP +-A logdrop-428 -m limit --limit 1/second -j LOG +-A logdrop-428 -j DROP +-A logdrop-429 -m limit --limit 1/second -j LOG +-A logdrop-429 -j DROP +-A logdrop-43 -m limit --limit 1/second -j LOG +-A logdrop-43 -j DROP +-A logdrop-430 -m limit --limit 1/second -j LOG +-A logdrop-430 -j DROP +-A logdrop-431 -m limit --limit 1/second -j LOG +-A logdrop-431 -j DROP +-A logdrop-432 -m limit --limit 1/second -j LOG +-A logdrop-432 -j DROP +-A logdrop-433 -m limit --limit 1/second -j LOG +-A logdrop-433 -j DROP +-A logdrop-434 -m limit --limit 1/second -j LOG +-A logdrop-434 -j DROP +-A logdrop-435 -m limit --limit 1/second -j LOG +-A logdrop-435 -j DROP +-A logdrop-436 -m limit --limit 1/second -j LOG +-A logdrop-436 -j DROP +-A logdrop-437 -m limit --limit 1/second -j LOG +-A logdrop-437 -j DROP +-A logdrop-438 -m limit --limit 1/second -j LOG +-A logdrop-438 -j DROP +-A logdrop-439 -m limit --limit 1/second -j LOG +-A logdrop-439 -j DROP +-A logdrop-44 -m limit --limit 1/second -j LOG +-A logdrop-44 -j DROP +-A logdrop-440 -m limit --limit 1/second -j LOG +-A logdrop-440 -j DROP +-A logdrop-441 -m limit --limit 1/second -j LOG +-A logdrop-441 -j DROP +-A logdrop-442 -m limit --limit 1/second -j LOG +-A logdrop-442 -j DROP +-A logdrop-443 -m limit --limit 1/second -j LOG +-A logdrop-443 -j DROP +-A logdrop-444 -m limit --limit 1/second -j LOG +-A logdrop-444 -j DROP +-A logdrop-445 -m limit --limit 1/second -j LOG +-A logdrop-445 -j DROP +-A logdrop-446 -m limit --limit 1/second -j LOG +-A logdrop-446 -j DROP +-A logdrop-447 -m limit --limit 1/second -j LOG +-A logdrop-447 -j DROP +-A logdrop-448 -m limit --limit 1/second -j LOG +-A logdrop-448 -j DROP +-A logdrop-449 -m limit --limit 1/second -j LOG +-A logdrop-449 -j DROP +-A logdrop-45 -m limit --limit 1/second -j LOG +-A logdrop-45 -j DROP +-A logdrop-450 -m limit --limit 1/second -j LOG +-A logdrop-450 -j DROP +-A logdrop-451 -m limit --limit 1/second -j LOG +-A logdrop-451 -j DROP +-A logdrop-452 -m limit --limit 1/second -j LOG +-A logdrop-452 -j DROP +-A logdrop-453 -m limit --limit 1/second -j LOG +-A logdrop-453 -j DROP +-A logdrop-454 -m limit --limit 1/second -j LOG +-A logdrop-454 -j DROP +-A logdrop-455 -m limit --limit 1/second -j LOG +-A logdrop-455 -j DROP +-A logdrop-456 -m limit --limit 1/second -j LOG +-A logdrop-456 -j DROP +-A logdrop-457 -m limit --limit 1/second -j LOG +-A logdrop-457 -j DROP +-A logdrop-46 -m limit --limit 1/second -j LOG +-A logdrop-46 -j DROP +-A logdrop-47 -m limit --limit 1/second -j LOG +-A logdrop-47 -j DROP +-A logdrop-48 -m limit --limit 1/second -j LOG +-A logdrop-48 -j DROP +-A logdrop-49 -m limit --limit 1/second -j LOG +-A logdrop-49 -j DROP +-A logdrop-5 -m limit --limit 1/second -j LOG +-A logdrop-5 -j DROP +-A logdrop-50 -m limit --limit 1/second -j LOG +-A logdrop-50 -j DROP +-A logdrop-51 -m limit --limit 1/second -j LOG +-A logdrop-51 -j DROP +-A logdrop-52 -m limit --limit 1/second -j LOG +-A logdrop-52 -j DROP +-A logdrop-53 -m limit --limit 1/second -j LOG +-A logdrop-53 -j DROP +-A logdrop-54 -m limit --limit 1/second -j LOG +-A logdrop-54 -j DROP +-A logdrop-55 -m limit --limit 1/second -j LOG +-A logdrop-55 -j DROP +-A logdrop-56 -m limit --limit 1/second -j LOG +-A logdrop-56 -j DROP +-A logdrop-57 -m limit --limit 1/second -j LOG +-A logdrop-57 -j DROP +-A logdrop-58 -m limit --limit 1/second -j LOG +-A logdrop-58 -j DROP +-A logdrop-59 -m limit --limit 1/second -j LOG +-A logdrop-59 -j DROP +-A logdrop-6 -m limit --limit 1/second -j LOG +-A logdrop-6 -j DROP +-A logdrop-60 -m limit --limit 1/second -j LOG +-A logdrop-60 -j DROP +-A logdrop-61 -m limit --limit 1/second -j LOG +-A logdrop-61 -j DROP +-A logdrop-62 -m limit --limit 1/second -j LOG +-A logdrop-62 -j DROP +-A logdrop-63 -m limit --limit 1/second -j LOG +-A logdrop-63 -j DROP +-A logdrop-64 -m limit --limit 1/second -j LOG +-A logdrop-64 -j DROP +-A logdrop-65 -m limit --limit 1/second -j LOG +-A logdrop-65 -j DROP +-A logdrop-66 -m limit --limit 1/second -j LOG +-A logdrop-66 -j DROP +-A logdrop-67 -m limit --limit 1/second -j LOG +-A logdrop-67 -j DROP +-A logdrop-68 -m limit --limit 1/second -j LOG +-A logdrop-68 -j DROP +-A logdrop-69 -m limit --limit 1/second -j LOG +-A logdrop-69 -j DROP +-A logdrop-7 -m limit --limit 1/second -j LOG +-A logdrop-7 -j DROP +-A logdrop-70 -m limit --limit 1/second -j LOG +-A logdrop-70 -j DROP +-A logdrop-71 -m limit --limit 1/second -j LOG +-A logdrop-71 -j DROP +-A logdrop-72 -m limit --limit 1/second -j LOG +-A logdrop-72 -j DROP +-A logdrop-73 -m limit --limit 1/second -j LOG +-A logdrop-73 -j DROP +-A logdrop-74 -m limit --limit 1/second -j LOG +-A logdrop-74 -j DROP +-A logdrop-75 -m limit --limit 1/second -j LOG +-A logdrop-75 -j DROP +-A logdrop-76 -m limit --limit 1/second -j LOG +-A logdrop-76 -j DROP +-A logdrop-77 -m limit --limit 1/second -j LOG +-A logdrop-77 -j DROP +-A logdrop-78 -m limit --limit 1/second -j LOG +-A logdrop-78 -j DROP +-A logdrop-79 -m limit --limit 1/second -j LOG +-A logdrop-79 -j DROP +-A logdrop-8 -m limit --limit 1/second -j LOG +-A logdrop-8 -j DROP +-A logdrop-80 -m limit --limit 1/second -j LOG +-A logdrop-80 -j DROP +-A logdrop-81 -m limit --limit 1/second -j LOG +-A logdrop-81 -j DROP +-A logdrop-82 -m limit --limit 1/second -j LOG +-A logdrop-82 -j DROP +-A logdrop-83 -m limit --limit 1/second -j LOG +-A logdrop-83 -j DROP +-A logdrop-84 -m limit --limit 1/second -j LOG +-A logdrop-84 -j DROP +-A logdrop-85 -m limit --limit 1/second -j LOG +-A logdrop-85 -j DROP +-A logdrop-86 -m limit --limit 1/second -j LOG +-A logdrop-86 -j DROP +-A logdrop-87 -m limit --limit 1/second -j LOG +-A logdrop-87 -j DROP +-A logdrop-88 -m limit --limit 1/second -j LOG +-A logdrop-88 -j DROP +-A logdrop-89 -m limit --limit 1/second -j LOG +-A logdrop-89 -j DROP +-A logdrop-9 -m limit --limit 1/second -j LOG +-A logdrop-9 -j DROP +-A logdrop-90 -m limit --limit 1/second -j LOG +-A logdrop-90 -j DROP +-A logdrop-91 -m limit --limit 1/second -j LOG +-A logdrop-91 -j DROP +-A logdrop-92 -m limit --limit 1/second -j LOG +-A logdrop-92 -j DROP +-A logdrop-93 -m limit --limit 1/second -j LOG +-A logdrop-93 -j DROP +-A logdrop-94 -m limit --limit 1/second -j LOG +-A logdrop-94 -j DROP +-A logdrop-95 -m limit --limit 1/second -j LOG +-A logdrop-95 -j DROP +-A logdrop-96 -m limit --limit 1/second -j LOG +-A logdrop-96 -j DROP +-A logdrop-97 -m limit --limit 1/second -j LOG +-A logdrop-97 -j DROP +-A logdrop-98 -m limit --limit 1/second -j LOG +-A logdrop-98 -j DROP +-A logdrop-99 -m limit --limit 1/second -j LOG +-A logdrop-99 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT + diff --git a/test/output/filter-limit/ipset-awall-masquerade b/test/output/filter-limit/ipset-awall-masquerade new file mode 100644 index 0000000..b3a47fd --- /dev/null +++ b/test/output/filter-limit/ipset-awall-masquerade @@ -0,0 +1,2 @@ +# ipset awall-masquerade +hash:net family inet diff --git a/test/output/filter-limit/rules-save b/test/output/filter-limit/rules-save new file mode 100644 index 0000000..d4f2a44 --- /dev/null +++ b/test/output/filter-limit/rules-save @@ -0,0 +1,9641 @@ +# rules-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:limit-0 - [0:0] +:limit-1 - [0:0] +:limit-10 - [0:0] +:limit-100 - [0:0] +:limit-1000 - [0:0] +:limit-1001 - [0:0] +:limit-1002 - [0:0] +:limit-1003 - [0:0] +:limit-1004 - [0:0] +:limit-1005 - [0:0] +:limit-1006 - [0:0] +:limit-1007 - [0:0] +:limit-1008 - [0:0] +:limit-1009 - [0:0] +:limit-101 - [0:0] +:limit-1010 - [0:0] +:limit-1011 - [0:0] +:limit-1012 - [0:0] +:limit-1013 - [0:0] +:limit-1014 - [0:0] +:limit-1015 - [0:0] +:limit-1016 - [0:0] +:limit-1017 - [0:0] +:limit-1018 - [0:0] +:limit-1019 - [0:0] +:limit-102 - [0:0] +:limit-1020 - [0:0] +:limit-1021 - [0:0] +:limit-1022 - [0:0] +:limit-1023 - [0:0] +:limit-1024 - [0:0] +:limit-1025 - [0:0] +:limit-1026 - [0:0] +:limit-1027 - [0:0] +:limit-1028 - [0:0] +:limit-1029 - [0:0] +:limit-103 - [0:0] +:limit-1030 - [0:0] +:limit-1031 - [0:0] +:limit-1032 - [0:0] +:limit-1033 - [0:0] +:limit-1034 - [0:0] +:limit-1035 - [0:0] +:limit-1036 - [0:0] +:limit-1037 - [0:0] +:limit-1038 - [0:0] +:limit-1039 - [0:0] +:limit-104 - [0:0] +:limit-1040 - [0:0] +:limit-1041 - [0:0] +:limit-1042 - [0:0] +:limit-1043 - [0:0] +:limit-1044 - [0:0] +:limit-1045 - [0:0] +:limit-1046 - [0:0] +:limit-1047 - [0:0] +:limit-1048 - [0:0] +:limit-1049 - [0:0] +:limit-105 - [0:0] +:limit-1050 - [0:0] +:limit-1051 - [0:0] +:limit-1052 - [0:0] +:limit-1053 - [0:0] +:limit-1054 - [0:0] +:limit-1055 - [0:0] +:limit-1056 - [0:0] +:limit-1057 - [0:0] +:limit-1058 - [0:0] +:limit-1059 - [0:0] +:limit-106 - [0:0] +:limit-1060 - [0:0] +:limit-1061 - [0:0] +:limit-1062 - [0:0] +:limit-1063 - [0:0] +:limit-1064 - [0:0] +:limit-1065 - [0:0] +:limit-1066 - [0:0] +:limit-1067 - [0:0] +:limit-1068 - [0:0] +:limit-1069 - [0:0] +:limit-107 - [0:0] +:limit-1070 - [0:0] +:limit-1071 - [0:0] +:limit-1072 - [0:0] +:limit-1073 - [0:0] +:limit-1074 - [0:0] +:limit-1075 - [0:0] +:limit-1076 - [0:0] +:limit-1077 - [0:0] +:limit-1078 - [0:0] +:limit-1079 - [0:0] +:limit-108 - [0:0] +:limit-1080 - [0:0] +:limit-1081 - [0:0] +:limit-1082 - [0:0] +:limit-1083 - [0:0] +:limit-1084 - [0:0] +:limit-1085 - [0:0] +:limit-1086 - [0:0] +:limit-1087 - [0:0] +:limit-1088 - [0:0] +:limit-1089 - [0:0] +:limit-109 - [0:0] +:limit-1090 - [0:0] +:limit-1091 - [0:0] +:limit-1092 - [0:0] +:limit-1094 - [0:0] +:limit-1095 - [0:0] +:limit-1096 - [0:0] +:limit-1098 - [0:0] +:limit-1099 - [0:0] +:limit-11 - [0:0] +:limit-110 - [0:0] +:limit-1100 - [0:0] +:limit-1101 - [0:0] +:limit-1102 - [0:0] +:limit-1103 - [0:0] +:limit-1104 - [0:0] +:limit-1106 - [0:0] +:limit-1107 - [0:0] +:limit-1108 - [0:0] +:limit-111 - [0:0] +:limit-1110 - [0:0] +:limit-1111 - [0:0] +:limit-1112 - [0:0] +:limit-1113 - [0:0] +:limit-1114 - [0:0] +:limit-1115 - [0:0] +:limit-1116 - [0:0] +:limit-1118 - [0:0] +:limit-1119 - [0:0] +:limit-112 - [0:0] +:limit-1120 - [0:0] +:limit-1122 - [0:0] +:limit-1123 - [0:0] +:limit-1124 - [0:0] +:limit-1125 - [0:0] +:limit-1126 - [0:0] +:limit-1127 - [0:0] +:limit-1128 - [0:0] +:limit-113 - [0:0] +:limit-1130 - [0:0] +:limit-1131 - [0:0] +:limit-1132 - [0:0] +:limit-1134 - [0:0] +:limit-1135 - [0:0] +:limit-1136 - [0:0] +:limit-1137 - [0:0] +:limit-1138 - [0:0] +:limit-1139 - [0:0] +:limit-114 - [0:0] +:limit-1140 - [0:0] +:limit-1141 - [0:0] +:limit-1142 - [0:0] +:limit-1143 - [0:0] +:limit-1144 - [0:0] +:limit-1145 - [0:0] +:limit-1146 - [0:0] +:limit-1148 - [0:0] +:limit-1149 - [0:0] +:limit-115 - [0:0] +:limit-1150 - [0:0] +:limit-1152 - [0:0] +:limit-1153 - [0:0] +:limit-1154 - [0:0] +:limit-1155 - [0:0] +:limit-1156 - [0:0] +:limit-1157 - [0:0] +:limit-1158 - [0:0] +:limit-116 - [0:0] +:limit-1160 - [0:0] +:limit-1161 - [0:0] +:limit-1162 - [0:0] +:limit-1164 - [0:0] +:limit-1165 - [0:0] +:limit-1166 - [0:0] +:limit-1167 - [0:0] +:limit-1168 - [0:0] +:limit-1169 - [0:0] +:limit-117 - [0:0] +:limit-1170 - [0:0] +:limit-1172 - [0:0] +:limit-1173 - [0:0] +:limit-1174 - [0:0] +:limit-1176 - [0:0] +:limit-1177 - [0:0] +:limit-1178 - [0:0] +:limit-1179 - [0:0] +:limit-118 - [0:0] +:limit-1180 - [0:0] +:limit-1181 - [0:0] +:limit-1182 - [0:0] +:limit-1184 - [0:0] +:limit-1185 - [0:0] +:limit-1186 - [0:0] +:limit-1188 - [0:0] +:limit-1189 - [0:0] +:limit-119 - [0:0] +:limit-1190 - [0:0] +:limit-1191 - [0:0] +:limit-1192 - [0:0] +:limit-1193 - [0:0] +:limit-1194 - [0:0] +:limit-1195 - [0:0] +:limit-1196 - [0:0] +:limit-1197 - [0:0] +:limit-1198 - [0:0] +:limit-1199 - [0:0] +:limit-12 - [0:0] +:limit-120 - [0:0] +:limit-1200 - [0:0] +:limit-1202 - [0:0] +:limit-1203 - [0:0] +:limit-1204 - [0:0] +:limit-1206 - [0:0] +:limit-1207 - [0:0] +:limit-1208 - [0:0] +:limit-1209 - [0:0] +:limit-121 - [0:0] +:limit-1210 - [0:0] +:limit-1211 - [0:0] +:limit-1212 - [0:0] +:limit-1214 - [0:0] +:limit-1215 - [0:0] +:limit-1216 - [0:0] +:limit-1218 - [0:0] +:limit-1219 - [0:0] +:limit-122 - [0:0] +:limit-1220 - [0:0] +:limit-1221 - [0:0] +:limit-1222 - [0:0] +:limit-1223 - [0:0] +:limit-1224 - [0:0] +:limit-1226 - [0:0] +:limit-1227 - [0:0] +:limit-1228 - [0:0] +:limit-123 - [0:0] +:limit-1230 - [0:0] +:limit-1231 - [0:0] +:limit-1232 - [0:0] +:limit-1233 - [0:0] +:limit-1234 - [0:0] +:limit-1235 - [0:0] +:limit-1236 - [0:0] +:limit-1238 - [0:0] +:limit-1239 - [0:0] +:limit-124 - [0:0] +:limit-1240 - [0:0] +:limit-1242 - [0:0] +:limit-1243 - [0:0] +:limit-1244 - [0:0] +:limit-1245 - [0:0] +:limit-1246 - [0:0] +:limit-1247 - [0:0] +:limit-1248 - [0:0] +:limit-1249 - [0:0] +:limit-125 - [0:0] +:limit-1250 - [0:0] +:limit-1251 - [0:0] +:limit-1252 - [0:0] +:limit-1253 - [0:0] +:limit-1254 - [0:0] +:limit-1256 - [0:0] +:limit-1257 - [0:0] +:limit-1258 - [0:0] +:limit-126 - [0:0] +:limit-1260 - [0:0] +:limit-1261 - [0:0] +:limit-1262 - [0:0] +:limit-1263 - [0:0] +:limit-1264 - [0:0] +:limit-1265 - [0:0] +:limit-1266 - [0:0] +:limit-1268 - [0:0] +:limit-1269 - [0:0] +:limit-127 - [0:0] +:limit-1270 - [0:0] +:limit-1272 - [0:0] +:limit-1273 - [0:0] +:limit-1274 - [0:0] +:limit-1275 - [0:0] +:limit-1276 - [0:0] +:limit-1277 - [0:0] +:limit-1278 - [0:0] +:limit-128 - [0:0] +:limit-1280 - [0:0] +:limit-1281 - [0:0] +:limit-1282 - [0:0] +:limit-1284 - [0:0] +:limit-1285 - [0:0] +:limit-1286 - [0:0] +:limit-1287 - [0:0] +:limit-1288 - [0:0] +:limit-1289 - [0:0] +:limit-129 - [0:0] +:limit-1290 - [0:0] +:limit-1292 - [0:0] +:limit-1293 - [0:0] +:limit-1294 - [0:0] +:limit-1296 - [0:0] +:limit-1297 - [0:0] +:limit-1298 - [0:0] +:limit-1299 - [0:0] +:limit-13 - [0:0] +:limit-130 - [0:0] +:limit-1300 - [0:0] +:limit-1301 - [0:0] +:limit-1302 - [0:0] +:limit-1303 - [0:0] +:limit-1304 - [0:0] +:limit-1305 - [0:0] +:limit-1306 - [0:0] +:limit-1307 - [0:0] +:limit-1308 - [0:0] +:limit-131 - [0:0] +:limit-1310 - [0:0] +:limit-1311 - [0:0] +:limit-1312 - [0:0] +:limit-1314 - [0:0] +:limit-1315 - [0:0] +:limit-1316 - [0:0] +:limit-1317 - [0:0] +:limit-1318 - [0:0] +:limit-1319 - [0:0] +:limit-132 - [0:0] +:limit-1320 - [0:0] +:limit-1322 - [0:0] +:limit-1323 - [0:0] +:limit-1324 - [0:0] +:limit-1326 - [0:0] +:limit-1327 - [0:0] +:limit-1328 - [0:0] +:limit-1329 - [0:0] +:limit-133 - [0:0] +:limit-1330 - [0:0] +:limit-1331 - [0:0] +:limit-1332 - [0:0] +:limit-1334 - [0:0] +:limit-1335 - [0:0] +:limit-1336 - [0:0] +:limit-1338 - [0:0] +:limit-1339 - [0:0] +:limit-134 - [0:0] +:limit-1340 - [0:0] +:limit-1341 - [0:0] +:limit-1342 - [0:0] +:limit-1343 - [0:0] +:limit-1344 - [0:0] +:limit-1346 - [0:0] +:limit-1347 - [0:0] +:limit-1348 - [0:0] +:limit-135 - [0:0] +:limit-1350 - [0:0] +:limit-1351 - [0:0] +:limit-1352 - [0:0] +:limit-1353 - [0:0] +:limit-1354 - [0:0] +:limit-1355 - [0:0] +:limit-1356 - [0:0] +:limit-1357 - [0:0] +:limit-1358 - [0:0] +:limit-1359 - [0:0] +:limit-136 - [0:0] +:limit-1360 - [0:0] +:limit-1361 - [0:0] +:limit-1362 - [0:0] +:limit-1364 - [0:0] +:limit-1365 - [0:0] +:limit-1366 - [0:0] +:limit-1368 - [0:0] +:limit-1369 - [0:0] +:limit-137 - [0:0] +:limit-1370 - [0:0] +:limit-1371 - [0:0] +:limit-1372 - [0:0] +:limit-1373 - [0:0] +:limit-1374 - [0:0] +:limit-1376 - [0:0] +:limit-1377 - [0:0] +:limit-1378 - [0:0] +:limit-138 - [0:0] +:limit-1380 - [0:0] +:limit-1381 - [0:0] +:limit-1382 - [0:0] +:limit-1383 - [0:0] +:limit-1384 - [0:0] +:limit-1385 - [0:0] +:limit-1386 - [0:0] +:limit-1388 - [0:0] +:limit-1389 - [0:0] +:limit-139 - [0:0] +:limit-1390 - [0:0] +:limit-1392 - [0:0] +:limit-1393 - [0:0] +:limit-1394 - [0:0] +:limit-1395 - [0:0] +:limit-1396 - [0:0] +:limit-1397 - [0:0] +:limit-1398 - [0:0] +:limit-14 - [0:0] +:limit-140 - [0:0] +:limit-1400 - [0:0] +:limit-1401 - [0:0] +:limit-1402 - [0:0] +:limit-1404 - [0:0] +:limit-1405 - [0:0] +:limit-1406 - [0:0] +:limit-1407 - [0:0] +:limit-1408 - [0:0] +:limit-1409 - [0:0] +:limit-141 - [0:0] +:limit-1410 - [0:0] +:limit-1411 - [0:0] +:limit-1412 - [0:0] +:limit-1413 - [0:0] +:limit-1414 - [0:0] +:limit-1415 - [0:0] +:limit-1416 - [0:0] +:limit-1417 - [0:0] +:limit-1418 - [0:0] +:limit-1419 - [0:0] +:limit-142 - [0:0] +:limit-1420 - [0:0] +:limit-1421 - [0:0] +:limit-1422 - [0:0] +:limit-1423 - [0:0] +:limit-1424 - [0:0] +:limit-1425 - [0:0] +:limit-1426 - [0:0] +:limit-1427 - [0:0] +:limit-1428 - [0:0] +:limit-1429 - [0:0] +:limit-143 - [0:0] +:limit-1430 - [0:0] +:limit-1431 - [0:0] +:limit-144 - [0:0] +:limit-145 - [0:0] +:limit-146 - [0:0] +:limit-147 - [0:0] +:limit-148 - [0:0] +:limit-149 - [0:0] +:limit-15 - [0:0] +:limit-150 - [0:0] +:limit-151 - [0:0] +:limit-152 - [0:0] +:limit-153 - [0:0] +:limit-154 - [0:0] +:limit-155 - [0:0] +:limit-156 - [0:0] +:limit-157 - [0:0] +:limit-158 - [0:0] +:limit-159 - [0:0] +:limit-16 - [0:0] +:limit-160 - [0:0] +:limit-161 - [0:0] +:limit-162 - [0:0] +:limit-163 - [0:0] +:limit-164 - [0:0] +:limit-165 - [0:0] +:limit-166 - [0:0] +:limit-167 - [0:0] +:limit-168 - [0:0] +:limit-169 - [0:0] +:limit-17 - [0:0] +:limit-170 - [0:0] +:limit-171 - [0:0] +:limit-172 - [0:0] +:limit-173 - [0:0] +:limit-174 - [0:0] +:limit-175 - [0:0] +:limit-176 - [0:0] +:limit-177 - [0:0] +:limit-178 - [0:0] +:limit-179 - [0:0] +:limit-18 - [0:0] +:limit-180 - [0:0] +:limit-181 - [0:0] +:limit-182 - [0:0] +:limit-183 - [0:0] +:limit-184 - [0:0] +:limit-185 - [0:0] +:limit-186 - [0:0] +:limit-187 - [0:0] +:limit-188 - [0:0] +:limit-189 - [0:0] +:limit-19 - [0:0] +:limit-190 - [0:0] +:limit-191 - [0:0] +:limit-192 - [0:0] +:limit-193 - [0:0] +:limit-194 - [0:0] +:limit-195 - [0:0] +:limit-196 - [0:0] +:limit-197 - [0:0] +:limit-198 - [0:0] +:limit-199 - [0:0] +:limit-2 - [0:0] +:limit-20 - [0:0] +:limit-200 - [0:0] +:limit-201 - [0:0] +:limit-202 - [0:0] +:limit-203 - [0:0] +:limit-204 - [0:0] +:limit-205 - [0:0] +:limit-206 - [0:0] +:limit-207 - [0:0] +:limit-208 - [0:0] +:limit-209 - [0:0] +:limit-21 - [0:0] +:limit-210 - [0:0] +:limit-211 - [0:0] +:limit-212 - [0:0] +:limit-213 - [0:0] +:limit-214 - [0:0] +:limit-215 - [0:0] +:limit-216 - [0:0] +:limit-217 - [0:0] +:limit-218 - [0:0] +:limit-219 - [0:0] +:limit-22 - [0:0] +:limit-220 - [0:0] +:limit-221 - [0:0] +:limit-222 - [0:0] +:limit-223 - [0:0] +:limit-224 - [0:0] +:limit-225 - [0:0] +:limit-226 - [0:0] +:limit-227 - [0:0] +:limit-228 - [0:0] +:limit-229 - [0:0] +:limit-23 - [0:0] +:limit-230 - [0:0] +:limit-231 - [0:0] +:limit-232 - [0:0] +:limit-233 - [0:0] +:limit-234 - [0:0] +:limit-235 - [0:0] +:limit-236 - [0:0] +:limit-237 - [0:0] +:limit-238 - [0:0] +:limit-239 - [0:0] +:limit-24 - [0:0] +:limit-240 - [0:0] +:limit-241 - [0:0] +:limit-242 - [0:0] +:limit-243 - [0:0] +:limit-244 - [0:0] +:limit-245 - [0:0] +:limit-246 - [0:0] +:limit-247 - [0:0] +:limit-248 - [0:0] +:limit-249 - [0:0] +:limit-25 - [0:0] +:limit-250 - [0:0] +:limit-251 - [0:0] +:limit-252 - [0:0] +:limit-253 - [0:0] +:limit-254 - [0:0] +:limit-255 - [0:0] +:limit-256 - [0:0] +:limit-257 - [0:0] +:limit-258 - [0:0] +:limit-259 - [0:0] +:limit-26 - [0:0] +:limit-260 - [0:0] +:limit-261 - [0:0] +:limit-262 - [0:0] +:limit-263 - [0:0] +:limit-264 - [0:0] +:limit-265 - [0:0] +:limit-266 - [0:0] +:limit-267 - [0:0] +:limit-268 - [0:0] +:limit-269 - [0:0] +:limit-27 - [0:0] +:limit-270 - [0:0] +:limit-271 - [0:0] +:limit-272 - [0:0] +:limit-273 - [0:0] +:limit-274 - [0:0] +:limit-275 - [0:0] +:limit-276 - [0:0] +:limit-277 - [0:0] +:limit-278 - [0:0] +:limit-279 - [0:0] +:limit-28 - [0:0] +:limit-280 - [0:0] +:limit-281 - [0:0] +:limit-282 - [0:0] +:limit-283 - [0:0] +:limit-284 - [0:0] +:limit-285 - [0:0] +:limit-286 - [0:0] +:limit-287 - [0:0] +:limit-288 - [0:0] +:limit-289 - [0:0] +:limit-29 - [0:0] +:limit-290 - [0:0] +:limit-291 - [0:0] +:limit-292 - [0:0] +:limit-293 - [0:0] +:limit-294 - [0:0] +:limit-295 - [0:0] +:limit-296 - [0:0] +:limit-297 - [0:0] +:limit-298 - [0:0] +:limit-299 - [0:0] +:limit-3 - [0:0] +:limit-30 - [0:0] +:limit-300 - [0:0] +:limit-301 - [0:0] +:limit-302 - [0:0] +:limit-303 - [0:0] +:limit-304 - [0:0] +:limit-305 - [0:0] +:limit-306 - [0:0] +:limit-307 - [0:0] +:limit-308 - [0:0] +:limit-309 - [0:0] +:limit-31 - [0:0] +:limit-310 - [0:0] +:limit-311 - [0:0] +:limit-312 - [0:0] +:limit-313 - [0:0] +:limit-314 - [0:0] +:limit-315 - [0:0] +:limit-316 - [0:0] +:limit-317 - [0:0] +:limit-318 - [0:0] +:limit-319 - [0:0] +:limit-32 - [0:0] +:limit-320 - [0:0] +:limit-321 - [0:0] +:limit-322 - [0:0] +:limit-323 - [0:0] +:limit-324 - [0:0] +:limit-325 - [0:0] +:limit-326 - [0:0] +:limit-327 - [0:0] +:limit-328 - [0:0] +:limit-329 - [0:0] +:limit-33 - [0:0] +:limit-330 - [0:0] +:limit-331 - [0:0] +:limit-332 - [0:0] +:limit-333 - [0:0] +:limit-334 - [0:0] +:limit-335 - [0:0] +:limit-336 - [0:0] +:limit-337 - [0:0] +:limit-338 - [0:0] +:limit-339 - [0:0] +:limit-34 - [0:0] +:limit-340 - [0:0] +:limit-341 - [0:0] +:limit-342 - [0:0] +:limit-343 - [0:0] +:limit-344 - [0:0] +:limit-345 - [0:0] +:limit-346 - [0:0] +:limit-347 - [0:0] +:limit-348 - [0:0] +:limit-349 - [0:0] +:limit-35 - [0:0] +:limit-350 - [0:0] +:limit-351 - [0:0] +:limit-352 - [0:0] +:limit-353 - [0:0] +:limit-354 - [0:0] +:limit-355 - [0:0] +:limit-356 - [0:0] +:limit-357 - [0:0] +:limit-358 - [0:0] +:limit-359 - [0:0] +:limit-36 - [0:0] +:limit-360 - [0:0] +:limit-361 - [0:0] +:limit-362 - [0:0] +:limit-363 - [0:0] +:limit-364 - [0:0] +:limit-365 - [0:0] +:limit-366 - [0:0] +:limit-367 - [0:0] +:limit-368 - [0:0] +:limit-369 - [0:0] +:limit-37 - [0:0] +:limit-370 - [0:0] +:limit-371 - [0:0] +:limit-372 - [0:0] +:limit-373 - [0:0] +:limit-374 - [0:0] +:limit-375 - [0:0] +:limit-376 - [0:0] +:limit-378 - [0:0] +:limit-379 - [0:0] +:limit-38 - [0:0] +:limit-380 - [0:0] +:limit-382 - [0:0] +:limit-383 - [0:0] +:limit-384 - [0:0] +:limit-385 - [0:0] +:limit-386 - [0:0] +:limit-387 - [0:0] +:limit-388 - [0:0] +:limit-39 - [0:0] +:limit-390 - [0:0] +:limit-391 - [0:0] +:limit-392 - [0:0] +:limit-394 - [0:0] +:limit-395 - [0:0] +:limit-396 - [0:0] +:limit-397 - [0:0] +:limit-398 - [0:0] +:limit-399 - [0:0] +:limit-4 - [0:0] +:limit-40 - [0:0] +:limit-400 - [0:0] +:limit-402 - [0:0] +:limit-403 - [0:0] +:limit-404 - [0:0] +:limit-406 - [0:0] +:limit-407 - [0:0] +:limit-408 - [0:0] +:limit-409 - [0:0] +:limit-41 - [0:0] +:limit-410 - [0:0] +:limit-411 - [0:0] +:limit-412 - [0:0] +:limit-414 - [0:0] +:limit-415 - [0:0] +:limit-416 - [0:0] +:limit-418 - [0:0] +:limit-419 - [0:0] +:limit-42 - [0:0] +:limit-420 - [0:0] +:limit-421 - [0:0] +:limit-422 - [0:0] +:limit-423 - [0:0] +:limit-424 - [0:0] +:limit-425 - [0:0] +:limit-426 - [0:0] +:limit-427 - [0:0] +:limit-428 - [0:0] +:limit-429 - [0:0] +:limit-43 - [0:0] +:limit-430 - [0:0] +:limit-432 - [0:0] +:limit-433 - [0:0] +:limit-434 - [0:0] +:limit-436 - [0:0] +:limit-437 - [0:0] +:limit-438 - [0:0] +:limit-439 - [0:0] +:limit-44 - [0:0] +:limit-440 - [0:0] +:limit-441 - [0:0] +:limit-442 - [0:0] +:limit-444 - [0:0] +:limit-445 - [0:0] +:limit-446 - [0:0] +:limit-448 - [0:0] +:limit-449 - [0:0] +:limit-45 - [0:0] +:limit-450 - [0:0] +:limit-451 - [0:0] +:limit-452 - [0:0] +:limit-453 - [0:0] +:limit-454 - [0:0] +:limit-456 - [0:0] +:limit-457 - [0:0] +:limit-458 - [0:0] +:limit-46 - [0:0] +:limit-460 - [0:0] +:limit-461 - [0:0] +:limit-462 - [0:0] +:limit-463 - [0:0] +:limit-464 - [0:0] +:limit-465 - [0:0] +:limit-466 - [0:0] +:limit-468 - [0:0] +:limit-469 - [0:0] +:limit-47 - [0:0] +:limit-470 - [0:0] +:limit-472 - [0:0] +:limit-473 - [0:0] +:limit-474 - [0:0] +:limit-475 - [0:0] +:limit-476 - [0:0] +:limit-477 - [0:0] +:limit-478 - [0:0] +:limit-479 - [0:0] +:limit-48 - [0:0] +:limit-480 - [0:0] +:limit-481 - [0:0] +:limit-482 - [0:0] +:limit-483 - [0:0] +:limit-484 - [0:0] +:limit-486 - [0:0] +:limit-487 - [0:0] +:limit-488 - [0:0] +:limit-49 - [0:0] +:limit-490 - [0:0] +:limit-491 - [0:0] +:limit-492 - [0:0] +:limit-493 - [0:0] +:limit-494 - [0:0] +:limit-495 - [0:0] +:limit-496 - [0:0] +:limit-498 - [0:0] +:limit-499 - [0:0] +:limit-5 - [0:0] +:limit-50 - [0:0] +:limit-500 - [0:0] +:limit-502 - [0:0] +:limit-503 - [0:0] +:limit-504 - [0:0] +:limit-505 - [0:0] +:limit-506 - [0:0] +:limit-507 - [0:0] +:limit-508 - [0:0] +:limit-51 - [0:0] +:limit-510 - [0:0] +:limit-511 - [0:0] +:limit-512 - [0:0] +:limit-514 - [0:0] +:limit-515 - [0:0] +:limit-516 - [0:0] +:limit-517 - [0:0] +:limit-518 - [0:0] +:limit-519 - [0:0] +:limit-52 - [0:0] +:limit-520 - [0:0] +:limit-522 - [0:0] +:limit-523 - [0:0] +:limit-524 - [0:0] +:limit-526 - [0:0] +:limit-527 - [0:0] +:limit-528 - [0:0] +:limit-529 - [0:0] +:limit-53 - [0:0] +:limit-530 - [0:0] +:limit-531 - [0:0] +:limit-532 - [0:0] +:limit-533 - [0:0] +:limit-534 - [0:0] +:limit-535 - [0:0] +:limit-536 - [0:0] +:limit-537 - [0:0] +:limit-538 - [0:0] +:limit-54 - [0:0] +:limit-540 - [0:0] +:limit-541 - [0:0] +:limit-542 - [0:0] +:limit-544 - [0:0] +:limit-545 - [0:0] +:limit-546 - [0:0] +:limit-547 - [0:0] +:limit-548 - [0:0] +:limit-549 - [0:0] +:limit-55 - [0:0] +:limit-550 - [0:0] +:limit-552 - [0:0] +:limit-553 - [0:0] +:limit-554 - [0:0] +:limit-556 - [0:0] +:limit-557 - [0:0] +:limit-558 - [0:0] +:limit-559 - [0:0] +:limit-56 - [0:0] +:limit-560 - [0:0] +:limit-561 - [0:0] +:limit-562 - [0:0] +:limit-564 - [0:0] +:limit-565 - [0:0] +:limit-566 - [0:0] +:limit-568 - [0:0] +:limit-569 - [0:0] +:limit-57 - [0:0] +:limit-570 - [0:0] +:limit-571 - [0:0] +:limit-572 - [0:0] +:limit-573 - [0:0] +:limit-574 - [0:0] +:limit-576 - [0:0] +:limit-577 - [0:0] +:limit-578 - [0:0] +:limit-58 - [0:0] +:limit-580 - [0:0] +:limit-581 - [0:0] +:limit-582 - [0:0] +:limit-583 - [0:0] +:limit-584 - [0:0] +:limit-585 - [0:0] +:limit-586 - [0:0] +:limit-587 - [0:0] +:limit-588 - [0:0] +:limit-589 - [0:0] +:limit-59 - [0:0] +:limit-590 - [0:0] +:limit-591 - [0:0] +:limit-592 - [0:0] +:limit-594 - [0:0] +:limit-595 - [0:0] +:limit-596 - [0:0] +:limit-598 - [0:0] +:limit-599 - [0:0] +:limit-6 - [0:0] +:limit-60 - [0:0] +:limit-600 - [0:0] +:limit-601 - [0:0] +:limit-602 - [0:0] +:limit-603 - [0:0] +:limit-604 - [0:0] +:limit-606 - [0:0] +:limit-607 - [0:0] +:limit-608 - [0:0] +:limit-61 - [0:0] +:limit-610 - [0:0] +:limit-611 - [0:0] +:limit-612 - [0:0] +:limit-613 - [0:0] +:limit-614 - [0:0] +:limit-615 - [0:0] +:limit-616 - [0:0] +:limit-618 - [0:0] +:limit-619 - [0:0] +:limit-62 - [0:0] +:limit-620 - [0:0] +:limit-622 - [0:0] +:limit-623 - [0:0] +:limit-624 - [0:0] +:limit-625 - [0:0] +:limit-626 - [0:0] +:limit-627 - [0:0] +:limit-628 - [0:0] +:limit-63 - [0:0] +:limit-630 - [0:0] +:limit-631 - [0:0] +:limit-632 - [0:0] +:limit-634 - [0:0] +:limit-635 - [0:0] +:limit-636 - [0:0] +:limit-637 - [0:0] +:limit-638 - [0:0] +:limit-639 - [0:0] +:limit-64 - [0:0] +:limit-640 - [0:0] +:limit-641 - [0:0] +:limit-642 - [0:0] +:limit-643 - [0:0] +:limit-644 - [0:0] +:limit-645 - [0:0] +:limit-646 - [0:0] +:limit-648 - [0:0] +:limit-649 - [0:0] +:limit-65 - [0:0] +:limit-650 - [0:0] +:limit-652 - [0:0] +:limit-653 - [0:0] +:limit-654 - [0:0] +:limit-655 - [0:0] +:limit-656 - [0:0] +:limit-657 - [0:0] +:limit-658 - [0:0] +:limit-66 - [0:0] +:limit-660 - [0:0] +:limit-661 - [0:0] +:limit-662 - [0:0] +:limit-664 - [0:0] +:limit-665 - [0:0] +:limit-666 - [0:0] +:limit-667 - [0:0] +:limit-668 - [0:0] +:limit-669 - [0:0] +:limit-67 - [0:0] +:limit-670 - [0:0] +:limit-672 - [0:0] +:limit-673 - [0:0] +:limit-674 - [0:0] +:limit-676 - [0:0] +:limit-677 - [0:0] +:limit-678 - [0:0] +:limit-679 - [0:0] +:limit-68 - [0:0] +:limit-680 - [0:0] +:limit-681 - [0:0] +:limit-682 - [0:0] +:limit-684 - [0:0] +:limit-685 - [0:0] +:limit-686 - [0:0] +:limit-688 - [0:0] +:limit-689 - [0:0] +:limit-69 - [0:0] +:limit-690 - [0:0] +:limit-691 - [0:0] +:limit-692 - [0:0] +:limit-693 - [0:0] +:limit-694 - [0:0] +:limit-695 - [0:0] +:limit-696 - [0:0] +:limit-697 - [0:0] +:limit-698 - [0:0] +:limit-699 - [0:0] +:limit-7 - [0:0] +:limit-70 - [0:0] +:limit-700 - [0:0] +:limit-701 - [0:0] +:limit-702 - [0:0] +:limit-703 - [0:0] +:limit-704 - [0:0] +:limit-705 - [0:0] +:limit-706 - [0:0] +:limit-707 - [0:0] +:limit-708 - [0:0] +:limit-709 - [0:0] +:limit-71 - [0:0] +:limit-710 - [0:0] +:limit-711 - [0:0] +:limit-712 - [0:0] +:limit-713 - [0:0] +:limit-714 - [0:0] +:limit-715 - [0:0] +:limit-716 - [0:0] +:limit-717 - [0:0] +:limit-718 - [0:0] +:limit-719 - [0:0] +:limit-72 - [0:0] +:limit-720 - [0:0] +:limit-721 - [0:0] +:limit-722 - [0:0] +:limit-723 - [0:0] +:limit-724 - [0:0] +:limit-725 - [0:0] +:limit-726 - [0:0] +:limit-727 - [0:0] +:limit-728 - [0:0] +:limit-729 - [0:0] +:limit-73 - [0:0] +:limit-730 - [0:0] +:limit-731 - [0:0] +:limit-732 - [0:0] +:limit-733 - [0:0] +:limit-734 - [0:0] +:limit-735 - [0:0] +:limit-736 - [0:0] +:limit-737 - [0:0] +:limit-738 - [0:0] +:limit-739 - [0:0] +:limit-74 - [0:0] +:limit-740 - [0:0] +:limit-741 - [0:0] +:limit-742 - [0:0] +:limit-743 - [0:0] +:limit-744 - [0:0] +:limit-745 - [0:0] +:limit-746 - [0:0] +:limit-747 - [0:0] +:limit-748 - [0:0] +:limit-749 - [0:0] +:limit-75 - [0:0] +:limit-750 - [0:0] +:limit-751 - [0:0] +:limit-752 - [0:0] +:limit-753 - [0:0] +:limit-754 - [0:0] +:limit-755 - [0:0] +:limit-756 - [0:0] +:limit-757 - [0:0] +:limit-758 - [0:0] +:limit-759 - [0:0] +:limit-76 - [0:0] +:limit-760 - [0:0] +:limit-761 - [0:0] +:limit-762 - [0:0] +:limit-763 - [0:0] +:limit-764 - [0:0] +:limit-765 - [0:0] +:limit-766 - [0:0] +:limit-767 - [0:0] +:limit-768 - [0:0] +:limit-769 - [0:0] +:limit-77 - [0:0] +:limit-770 - [0:0] +:limit-771 - [0:0] +:limit-772 - [0:0] +:limit-773 - [0:0] +:limit-774 - [0:0] +:limit-775 - [0:0] +:limit-776 - [0:0] +:limit-777 - [0:0] +:limit-778 - [0:0] +:limit-779 - [0:0] +:limit-78 - [0:0] +:limit-780 - [0:0] +:limit-781 - [0:0] +:limit-782 - [0:0] +:limit-783 - [0:0] +:limit-784 - [0:0] +:limit-785 - [0:0] +:limit-786 - [0:0] +:limit-787 - [0:0] +:limit-788 - [0:0] +:limit-789 - [0:0] +:limit-79 - [0:0] +:limit-790 - [0:0] +:limit-791 - [0:0] +:limit-792 - [0:0] +:limit-793 - [0:0] +:limit-794 - [0:0] +:limit-795 - [0:0] +:limit-796 - [0:0] +:limit-797 - [0:0] +:limit-798 - [0:0] +:limit-799 - [0:0] +:limit-8 - [0:0] +:limit-80 - [0:0] +:limit-800 - [0:0] +:limit-801 - [0:0] +:limit-802 - [0:0] +:limit-803 - [0:0] +:limit-804 - [0:0] +:limit-805 - [0:0] +:limit-806 - [0:0] +:limit-807 - [0:0] +:limit-808 - [0:0] +:limit-809 - [0:0] +:limit-81 - [0:0] +:limit-810 - [0:0] +:limit-811 - [0:0] +:limit-812 - [0:0] +:limit-813 - [0:0] +:limit-814 - [0:0] +:limit-815 - [0:0] +:limit-816 - [0:0] +:limit-817 - [0:0] +:limit-818 - [0:0] +:limit-819 - [0:0] +:limit-82 - [0:0] +:limit-820 - [0:0] +:limit-821 - [0:0] +:limit-822 - [0:0] +:limit-823 - [0:0] +:limit-824 - [0:0] +:limit-825 - [0:0] +:limit-826 - [0:0] +:limit-827 - [0:0] +:limit-828 - [0:0] +:limit-829 - [0:0] +:limit-83 - [0:0] +:limit-830 - [0:0] +:limit-831 - [0:0] +:limit-832 - [0:0] +:limit-833 - [0:0] +:limit-834 - [0:0] +:limit-835 - [0:0] +:limit-836 - [0:0] +:limit-837 - [0:0] +:limit-838 - [0:0] +:limit-839 - [0:0] +:limit-84 - [0:0] +:limit-840 - [0:0] +:limit-841 - [0:0] +:limit-842 - [0:0] +:limit-843 - [0:0] +:limit-844 - [0:0] +:limit-845 - [0:0] +:limit-846 - [0:0] +:limit-847 - [0:0] +:limit-848 - [0:0] +:limit-849 - [0:0] +:limit-85 - [0:0] +:limit-850 - [0:0] +:limit-851 - [0:0] +:limit-852 - [0:0] +:limit-853 - [0:0] +:limit-854 - [0:0] +:limit-855 - [0:0] +:limit-856 - [0:0] +:limit-857 - [0:0] +:limit-858 - [0:0] +:limit-859 - [0:0] +:limit-86 - [0:0] +:limit-860 - [0:0] +:limit-861 - [0:0] +:limit-862 - [0:0] +:limit-863 - [0:0] +:limit-864 - [0:0] +:limit-865 - [0:0] +:limit-866 - [0:0] +:limit-867 - [0:0] +:limit-868 - [0:0] +:limit-869 - [0:0] +:limit-87 - [0:0] +:limit-870 - [0:0] +:limit-871 - [0:0] +:limit-872 - [0:0] +:limit-873 - [0:0] +:limit-874 - [0:0] +:limit-875 - [0:0] +:limit-876 - [0:0] +:limit-877 - [0:0] +:limit-878 - [0:0] +:limit-879 - [0:0] +:limit-88 - [0:0] +:limit-880 - [0:0] +:limit-881 - [0:0] +:limit-882 - [0:0] +:limit-883 - [0:0] +:limit-884 - [0:0] +:limit-885 - [0:0] +:limit-886 - [0:0] +:limit-887 - [0:0] +:limit-888 - [0:0] +:limit-889 - [0:0] +:limit-89 - [0:0] +:limit-890 - [0:0] +:limit-891 - [0:0] +:limit-892 - [0:0] +:limit-893 - [0:0] +:limit-894 - [0:0] +:limit-895 - [0:0] +:limit-896 - [0:0] +:limit-897 - [0:0] +:limit-898 - [0:0] +:limit-899 - [0:0] +:limit-9 - [0:0] +:limit-90 - [0:0] +:limit-900 - [0:0] +:limit-901 - [0:0] +:limit-902 - [0:0] +:limit-903 - [0:0] +:limit-904 - [0:0] +:limit-905 - [0:0] +:limit-906 - [0:0] +:limit-907 - [0:0] +:limit-908 - [0:0] +:limit-909 - [0:0] +:limit-91 - [0:0] +:limit-910 - [0:0] +:limit-911 - [0:0] +:limit-912 - [0:0] +:limit-913 - [0:0] +:limit-914 - [0:0] +:limit-915 - [0:0] +:limit-916 - [0:0] +:limit-917 - [0:0] +:limit-918 - [0:0] +:limit-919 - [0:0] +:limit-92 - [0:0] +:limit-920 - [0:0] +:limit-921 - [0:0] +:limit-922 - [0:0] +:limit-923 - [0:0] +:limit-924 - [0:0] +:limit-925 - [0:0] +:limit-926 - [0:0] +:limit-927 - [0:0] +:limit-928 - [0:0] +:limit-929 - [0:0] +:limit-93 - [0:0] +:limit-930 - [0:0] +:limit-931 - [0:0] +:limit-932 - [0:0] +:limit-933 - [0:0] +:limit-934 - [0:0] +:limit-935 - [0:0] +:limit-936 - [0:0] +:limit-937 - [0:0] +:limit-938 - [0:0] +:limit-939 - [0:0] +:limit-94 - [0:0] +:limit-940 - [0:0] +:limit-941 - [0:0] +:limit-942 - [0:0] +:limit-943 - [0:0] +:limit-944 - [0:0] +:limit-945 - [0:0] +:limit-946 - [0:0] +:limit-947 - [0:0] +:limit-948 - [0:0] +:limit-949 - [0:0] +:limit-95 - [0:0] +:limit-950 - [0:0] +:limit-951 - [0:0] +:limit-952 - [0:0] +:limit-953 - [0:0] +:limit-954 - [0:0] +:limit-955 - [0:0] +:limit-956 - [0:0] +:limit-957 - [0:0] +:limit-958 - [0:0] +:limit-959 - [0:0] +:limit-96 - [0:0] +:limit-960 - [0:0] +:limit-961 - [0:0] +:limit-962 - [0:0] +:limit-963 - [0:0] +:limit-964 - [0:0] +:limit-965 - [0:0] +:limit-966 - [0:0] +:limit-967 - [0:0] +:limit-968 - [0:0] +:limit-969 - [0:0] +:limit-97 - [0:0] +:limit-970 - [0:0] +:limit-971 - [0:0] +:limit-972 - [0:0] +:limit-973 - [0:0] +:limit-974 - [0:0] +:limit-975 - [0:0] +:limit-976 - [0:0] +:limit-977 - [0:0] +:limit-978 - [0:0] +:limit-979 - [0:0] +:limit-98 - [0:0] +:limit-980 - [0:0] +:limit-981 - [0:0] +:limit-982 - [0:0] +:limit-983 - [0:0] +:limit-984 - [0:0] +:limit-985 - [0:0] +:limit-986 - [0:0] +:limit-987 - [0:0] +:limit-988 - [0:0] +:limit-989 - [0:0] +:limit-99 - [0:0] +:limit-990 - [0:0] +:limit-991 - [0:0] +:limit-992 - [0:0] +:limit-993 - [0:0] +:limit-994 - [0:0] +:limit-995 - [0:0] +:limit-996 - [0:0] +:limit-997 - [0:0] +:limit-998 - [0:0] +:limit-999 - [0:0] +:logaccept-0 - [0:0] +:logaccept-1 - [0:0] +:logaccept-10 - [0:0] +:logaccept-11 - [0:0] +:logaccept-12 - [0:0] +:logaccept-13 - [0:0] +:logaccept-14 - [0:0] +:logaccept-15 - [0:0] +:logaccept-16 - [0:0] +:logaccept-17 - [0:0] +:logaccept-18 - [0:0] +:logaccept-19 - [0:0] +:logaccept-2 - [0:0] +:logaccept-20 - [0:0] +:logaccept-21 - [0:0] +:logaccept-3 - [0:0] +:logaccept-4 - [0:0] +:logaccept-5 - [0:0] +:logaccept-6 - [0:0] +:logaccept-7 - [0:0] +:logaccept-8 - [0:0] +:logaccept-9 - [0:0] +:logaccept-final-0 - [0:0] +:logaccept-final-1 - [0:0] +:logaccept-final-10 - [0:0] +:logaccept-final-11 - [0:0] +:logaccept-final-12 - [0:0] +:logaccept-final-13 - [0:0] +:logaccept-final-14 - [0:0] +:logaccept-final-15 - [0:0] +:logaccept-final-16 - [0:0] +:logaccept-final-17 - [0:0] +:logaccept-final-18 - [0:0] +:logaccept-final-19 - [0:0] +:logaccept-final-2 - [0:0] +:logaccept-final-20 - [0:0] +:logaccept-final-21 - [0:0] +:logaccept-final-22 - [0:0] +:logaccept-final-23 - [0:0] +:logaccept-final-24 - [0:0] +:logaccept-final-25 - [0:0] +:logaccept-final-26 - [0:0] +:logaccept-final-27 - [0:0] +:logaccept-final-28 - [0:0] +:logaccept-final-29 - [0:0] +:logaccept-final-3 - [0:0] +:logaccept-final-30 - [0:0] +:logaccept-final-31 - [0:0] +:logaccept-final-32 - [0:0] +:logaccept-final-33 - [0:0] +:logaccept-final-34 - [0:0] +:logaccept-final-35 - [0:0] +:logaccept-final-36 - [0:0] +:logaccept-final-37 - [0:0] +:logaccept-final-38 - [0:0] +:logaccept-final-39 - [0:0] +:logaccept-final-4 - [0:0] +:logaccept-final-40 - [0:0] +:logaccept-final-41 - [0:0] +:logaccept-final-42 - [0:0] +:logaccept-final-43 - [0:0] +:logaccept-final-44 - [0:0] +:logaccept-final-45 - [0:0] +:logaccept-final-46 - [0:0] +:logaccept-final-47 - [0:0] +:logaccept-final-48 - [0:0] +:logaccept-final-49 - [0:0] +:logaccept-final-5 - [0:0] +:logaccept-final-50 - [0:0] +:logaccept-final-51 - [0:0] +:logaccept-final-52 - [0:0] +:logaccept-final-53 - [0:0] +:logaccept-final-54 - [0:0] +:logaccept-final-55 - [0:0] +:logaccept-final-56 - [0:0] +:logaccept-final-57 - [0:0] +:logaccept-final-58 - [0:0] +:logaccept-final-59 - [0:0] +:logaccept-final-6 - [0:0] +:logaccept-final-60 - [0:0] +:logaccept-final-61 - [0:0] +:logaccept-final-7 - [0:0] +:logaccept-final-8 - [0:0] +:logaccept-final-9 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logdrop-10 - [0:0] +:logdrop-100 - [0:0] +:logdrop-101 - [0:0] +:logdrop-102 - [0:0] +:logdrop-103 - [0:0] +:logdrop-104 - [0:0] +:logdrop-105 - [0:0] +:logdrop-106 - [0:0] +:logdrop-107 - [0:0] +:logdrop-108 - [0:0] +:logdrop-109 - [0:0] +:logdrop-11 - [0:0] +:logdrop-110 - [0:0] +:logdrop-111 - [0:0] +:logdrop-112 - [0:0] +:logdrop-113 - [0:0] +:logdrop-114 - [0:0] +:logdrop-115 - [0:0] +:logdrop-116 - [0:0] +:logdrop-117 - [0:0] +:logdrop-118 - [0:0] +:logdrop-119 - [0:0] +:logdrop-12 - [0:0] +:logdrop-120 - [0:0] +:logdrop-121 - [0:0] +:logdrop-122 - [0:0] +:logdrop-123 - [0:0] +:logdrop-124 - [0:0] +:logdrop-125 - [0:0] +:logdrop-126 - [0:0] +:logdrop-127 - [0:0] +:logdrop-128 - [0:0] +:logdrop-129 - [0:0] +:logdrop-13 - [0:0] +:logdrop-130 - [0:0] +:logdrop-131 - [0:0] +:logdrop-132 - [0:0] +:logdrop-133 - [0:0] +:logdrop-134 - [0:0] +:logdrop-135 - [0:0] +:logdrop-136 - [0:0] +:logdrop-137 - [0:0] +:logdrop-138 - [0:0] +:logdrop-139 - [0:0] +:logdrop-14 - [0:0] +:logdrop-140 - [0:0] +:logdrop-141 - [0:0] +:logdrop-142 - [0:0] +:logdrop-143 - [0:0] +:logdrop-144 - [0:0] +:logdrop-145 - [0:0] +:logdrop-146 - [0:0] +:logdrop-147 - [0:0] +:logdrop-148 - [0:0] +:logdrop-149 - [0:0] +:logdrop-15 - [0:0] +:logdrop-150 - [0:0] +:logdrop-151 - [0:0] +:logdrop-152 - [0:0] +:logdrop-153 - [0:0] +:logdrop-154 - [0:0] +:logdrop-155 - [0:0] +:logdrop-156 - [0:0] +:logdrop-157 - [0:0] +:logdrop-158 - [0:0] +:logdrop-159 - [0:0] +:logdrop-16 - [0:0] +:logdrop-160 - [0:0] +:logdrop-161 - [0:0] +:logdrop-162 - [0:0] +:logdrop-163 - [0:0] +:logdrop-164 - [0:0] +:logdrop-165 - [0:0] +:logdrop-166 - [0:0] +:logdrop-167 - [0:0] +:logdrop-168 - [0:0] +:logdrop-169 - [0:0] +:logdrop-17 - [0:0] +:logdrop-170 - [0:0] +:logdrop-171 - [0:0] +:logdrop-172 - [0:0] +:logdrop-173 - [0:0] +:logdrop-174 - [0:0] +:logdrop-175 - [0:0] +:logdrop-176 - [0:0] +:logdrop-177 - [0:0] +:logdrop-178 - [0:0] +:logdrop-179 - [0:0] +:logdrop-18 - [0:0] +:logdrop-180 - [0:0] +:logdrop-181 - [0:0] +:logdrop-182 - [0:0] +:logdrop-183 - [0:0] +:logdrop-184 - [0:0] +:logdrop-185 - [0:0] +:logdrop-186 - [0:0] +:logdrop-187 - [0:0] +:logdrop-188 - [0:0] +:logdrop-189 - [0:0] +:logdrop-19 - [0:0] +:logdrop-190 - [0:0] +:logdrop-191 - [0:0] +:logdrop-192 - [0:0] +:logdrop-193 - [0:0] +:logdrop-194 - [0:0] +:logdrop-195 - [0:0] +:logdrop-196 - [0:0] +:logdrop-197 - [0:0] +:logdrop-198 - [0:0] +:logdrop-199 - [0:0] +:logdrop-2 - [0:0] +:logdrop-20 - [0:0] +:logdrop-200 - [0:0] +:logdrop-201 - [0:0] +:logdrop-202 - [0:0] +:logdrop-203 - [0:0] +:logdrop-204 - [0:0] +:logdrop-205 - [0:0] +:logdrop-206 - [0:0] +:logdrop-207 - [0:0] +:logdrop-208 - [0:0] +:logdrop-209 - [0:0] +:logdrop-21 - [0:0] +:logdrop-210 - [0:0] +:logdrop-211 - [0:0] +:logdrop-212 - [0:0] +:logdrop-213 - [0:0] +:logdrop-214 - [0:0] +:logdrop-215 - [0:0] +:logdrop-216 - [0:0] +:logdrop-217 - [0:0] +:logdrop-218 - [0:0] +:logdrop-219 - [0:0] +:logdrop-22 - [0:0] +:logdrop-220 - [0:0] +:logdrop-221 - [0:0] +:logdrop-222 - [0:0] +:logdrop-223 - [0:0] +:logdrop-224 - [0:0] +:logdrop-225 - [0:0] +:logdrop-226 - [0:0] +:logdrop-227 - [0:0] +:logdrop-228 - [0:0] +:logdrop-229 - [0:0] +:logdrop-23 - [0:0] +:logdrop-230 - [0:0] +:logdrop-231 - [0:0] +:logdrop-232 - [0:0] +:logdrop-233 - [0:0] +:logdrop-234 - [0:0] +:logdrop-235 - [0:0] +:logdrop-236 - [0:0] +:logdrop-237 - [0:0] +:logdrop-238 - [0:0] +:logdrop-239 - [0:0] +:logdrop-24 - [0:0] +:logdrop-240 - [0:0] +:logdrop-241 - [0:0] +:logdrop-242 - [0:0] +:logdrop-243 - [0:0] +:logdrop-244 - [0:0] +:logdrop-245 - [0:0] +:logdrop-246 - [0:0] +:logdrop-247 - [0:0] +:logdrop-248 - [0:0] +:logdrop-249 - [0:0] +:logdrop-25 - [0:0] +:logdrop-250 - [0:0] +:logdrop-251 - [0:0] +:logdrop-252 - [0:0] +:logdrop-253 - [0:0] +:logdrop-254 - [0:0] +:logdrop-255 - [0:0] +:logdrop-256 - [0:0] +:logdrop-257 - [0:0] +:logdrop-258 - [0:0] +:logdrop-259 - [0:0] +:logdrop-26 - [0:0] +:logdrop-260 - [0:0] +:logdrop-261 - [0:0] +:logdrop-262 - [0:0] +:logdrop-263 - [0:0] +:logdrop-264 - [0:0] +:logdrop-265 - [0:0] +:logdrop-266 - [0:0] +:logdrop-267 - [0:0] +:logdrop-268 - [0:0] +:logdrop-269 - [0:0] +:logdrop-27 - [0:0] +:logdrop-270 - [0:0] +:logdrop-271 - [0:0] +:logdrop-272 - [0:0] +:logdrop-273 - [0:0] +:logdrop-274 - [0:0] +:logdrop-275 - [0:0] +:logdrop-276 - [0:0] +:logdrop-277 - [0:0] +:logdrop-278 - [0:0] +:logdrop-279 - [0:0] +:logdrop-28 - [0:0] +:logdrop-280 - [0:0] +:logdrop-281 - [0:0] +:logdrop-282 - [0:0] +:logdrop-283 - [0:0] +:logdrop-284 - [0:0] +:logdrop-285 - [0:0] +:logdrop-286 - [0:0] +:logdrop-287 - [0:0] +:logdrop-288 - [0:0] +:logdrop-289 - [0:0] +:logdrop-29 - [0:0] +:logdrop-290 - [0:0] +:logdrop-291 - [0:0] +:logdrop-292 - [0:0] +:logdrop-293 - [0:0] +:logdrop-294 - [0:0] +:logdrop-295 - [0:0] +:logdrop-296 - [0:0] +:logdrop-297 - [0:0] +:logdrop-298 - [0:0] +:logdrop-299 - [0:0] +:logdrop-3 - [0:0] +:logdrop-30 - [0:0] +:logdrop-300 - [0:0] +:logdrop-301 - [0:0] +:logdrop-302 - [0:0] +:logdrop-303 - [0:0] +:logdrop-304 - [0:0] +:logdrop-305 - [0:0] +:logdrop-306 - [0:0] +:logdrop-307 - [0:0] +:logdrop-308 - [0:0] +:logdrop-309 - [0:0] +:logdrop-31 - [0:0] +:logdrop-310 - [0:0] +:logdrop-311 - [0:0] +:logdrop-312 - [0:0] +:logdrop-313 - [0:0] +:logdrop-314 - [0:0] +:logdrop-315 - [0:0] +:logdrop-316 - [0:0] +:logdrop-317 - [0:0] +:logdrop-318 - [0:0] +:logdrop-319 - [0:0] +:logdrop-32 - [0:0] +:logdrop-320 - [0:0] +:logdrop-321 - [0:0] +:logdrop-322 - [0:0] +:logdrop-323 - [0:0] +:logdrop-324 - [0:0] +:logdrop-325 - [0:0] +:logdrop-326 - [0:0] +:logdrop-327 - [0:0] +:logdrop-328 - [0:0] +:logdrop-329 - [0:0] +:logdrop-33 - [0:0] +:logdrop-330 - [0:0] +:logdrop-331 - [0:0] +:logdrop-332 - [0:0] +:logdrop-333 - [0:0] +:logdrop-334 - [0:0] +:logdrop-335 - [0:0] +:logdrop-336 - [0:0] +:logdrop-337 - [0:0] +:logdrop-338 - [0:0] +:logdrop-339 - [0:0] +:logdrop-34 - [0:0] +:logdrop-340 - [0:0] +:logdrop-341 - [0:0] +:logdrop-342 - [0:0] +:logdrop-343 - [0:0] +:logdrop-344 - [0:0] +:logdrop-345 - [0:0] +:logdrop-346 - [0:0] +:logdrop-347 - [0:0] +:logdrop-348 - [0:0] +:logdrop-349 - [0:0] +:logdrop-35 - [0:0] +:logdrop-350 - [0:0] +:logdrop-351 - [0:0] +:logdrop-352 - [0:0] +:logdrop-353 - [0:0] +:logdrop-354 - [0:0] +:logdrop-355 - [0:0] +:logdrop-356 - [0:0] +:logdrop-357 - [0:0] +:logdrop-358 - [0:0] +:logdrop-359 - [0:0] +:logdrop-36 - [0:0] +:logdrop-360 - [0:0] +:logdrop-361 - [0:0] +:logdrop-362 - [0:0] +:logdrop-363 - [0:0] +:logdrop-364 - [0:0] +:logdrop-365 - [0:0] +:logdrop-366 - [0:0] +:logdrop-367 - [0:0] +:logdrop-368 - [0:0] +:logdrop-369 - [0:0] +:logdrop-37 - [0:0] +:logdrop-370 - [0:0] +:logdrop-371 - [0:0] +:logdrop-372 - [0:0] +:logdrop-373 - [0:0] +:logdrop-374 - [0:0] +:logdrop-375 - [0:0] +:logdrop-376 - [0:0] +:logdrop-377 - [0:0] +:logdrop-378 - [0:0] +:logdrop-379 - [0:0] +:logdrop-38 - [0:0] +:logdrop-380 - [0:0] +:logdrop-381 - [0:0] +:logdrop-382 - [0:0] +:logdrop-383 - [0:0] +:logdrop-384 - [0:0] +:logdrop-385 - [0:0] +:logdrop-386 - [0:0] +:logdrop-387 - [0:0] +:logdrop-388 - [0:0] +:logdrop-389 - [0:0] +:logdrop-39 - [0:0] +:logdrop-390 - [0:0] +:logdrop-391 - [0:0] +:logdrop-392 - [0:0] +:logdrop-393 - [0:0] +:logdrop-394 - [0:0] +:logdrop-395 - [0:0] +:logdrop-396 - [0:0] +:logdrop-397 - [0:0] +:logdrop-398 - [0:0] +:logdrop-399 - [0:0] +:logdrop-4 - [0:0] +:logdrop-40 - [0:0] +:logdrop-400 - [0:0] +:logdrop-401 - [0:0] +:logdrop-402 - [0:0] +:logdrop-403 - [0:0] +:logdrop-404 - [0:0] +:logdrop-405 - [0:0] +:logdrop-406 - [0:0] +:logdrop-407 - [0:0] +:logdrop-408 - [0:0] +:logdrop-409 - [0:0] +:logdrop-41 - [0:0] +:logdrop-410 - [0:0] +:logdrop-411 - [0:0] +:logdrop-412 - [0:0] +:logdrop-413 - [0:0] +:logdrop-414 - [0:0] +:logdrop-415 - [0:0] +:logdrop-416 - [0:0] +:logdrop-417 - [0:0] +:logdrop-418 - [0:0] +:logdrop-419 - [0:0] +:logdrop-42 - [0:0] +:logdrop-420 - [0:0] +:logdrop-421 - [0:0] +:logdrop-422 - [0:0] +:logdrop-423 - [0:0] +:logdrop-424 - [0:0] +:logdrop-425 - [0:0] +:logdrop-426 - [0:0] +:logdrop-427 - [0:0] +:logdrop-428 - [0:0] +:logdrop-429 - [0:0] +:logdrop-43 - [0:0] +:logdrop-430 - [0:0] +:logdrop-431 - [0:0] +:logdrop-432 - [0:0] +:logdrop-433 - [0:0] +:logdrop-434 - [0:0] +:logdrop-435 - [0:0] +:logdrop-436 - [0:0] +:logdrop-437 - [0:0] +:logdrop-438 - [0:0] +:logdrop-439 - [0:0] +:logdrop-44 - [0:0] +:logdrop-440 - [0:0] +:logdrop-441 - [0:0] +:logdrop-442 - [0:0] +:logdrop-443 - [0:0] +:logdrop-444 - [0:0] +:logdrop-445 - [0:0] +:logdrop-446 - [0:0] +:logdrop-447 - [0:0] +:logdrop-448 - [0:0] +:logdrop-449 - [0:0] +:logdrop-45 - [0:0] +:logdrop-450 - [0:0] +:logdrop-451 - [0:0] +:logdrop-452 - [0:0] +:logdrop-453 - [0:0] +:logdrop-454 - [0:0] +:logdrop-455 - [0:0] +:logdrop-456 - [0:0] +:logdrop-457 - [0:0] +:logdrop-46 - [0:0] +:logdrop-47 - [0:0] +:logdrop-48 - [0:0] +:logdrop-49 - [0:0] +:logdrop-5 - [0:0] +:logdrop-50 - [0:0] +:logdrop-51 - [0:0] +:logdrop-52 - [0:0] +:logdrop-53 - [0:0] +:logdrop-54 - [0:0] +:logdrop-55 - [0:0] +:logdrop-56 - [0:0] +:logdrop-57 - [0:0] +:logdrop-58 - [0:0] +:logdrop-59 - [0:0] +:logdrop-6 - [0:0] +:logdrop-60 - [0:0] +:logdrop-61 - [0:0] +:logdrop-62 - [0:0] +:logdrop-63 - [0:0] +:logdrop-64 - [0:0] +:logdrop-65 - [0:0] +:logdrop-66 - [0:0] +:logdrop-67 - [0:0] +:logdrop-68 - [0:0] +:logdrop-69 - [0:0] +:logdrop-7 - [0:0] +:logdrop-70 - [0:0] +:logdrop-71 - [0:0] +:logdrop-72 - [0:0] +:logdrop-73 - [0:0] +:logdrop-74 - [0:0] +:logdrop-75 - [0:0] +:logdrop-76 - [0:0] +:logdrop-77 - [0:0] +:logdrop-78 - [0:0] +:logdrop-79 - [0:0] +:logdrop-8 - [0:0] +:logdrop-80 - [0:0] +:logdrop-81 - [0:0] +:logdrop-82 - [0:0] +:logdrop-83 - [0:0] +:logdrop-84 - [0:0] +:logdrop-85 - [0:0] +:logdrop-86 - [0:0] +:logdrop-87 - [0:0] +:logdrop-88 - [0:0] +:logdrop-89 - [0:0] +:logdrop-9 - [0:0] +:logdrop-90 - [0:0] +:logdrop-91 - [0:0] +:logdrop-92 - [0:0] +:logdrop-93 - [0:0] +:logdrop-94 - [0:0] +:logdrop-95 - [0:0] +:logdrop-96 - [0:0] +:logdrop-97 - [0:0] +:logdrop-98 - [0:0] +:logdrop-99 - [0:0] +:logpass-0 - [0:0] +-A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A FORWARD -j limit-1073 +-A FORWARD -j limit-1072 +-A FORWARD -j limit-1071 +-A FORWARD -j limit-1070 +-A FORWARD -j limit-1069 +-A FORWARD -j limit-1068 +-A FORWARD -j limit-1067 +-A FORWARD -j limit-1066 +-A FORWARD -j limit-1065 +-A FORWARD -j limit-1064 +-A FORWARD -j limit-1063 +-A FORWARD -j limit-1062 +-A FORWARD -j limit-1061 +-A FORWARD -j limit-1060 +-A FORWARD -j limit-1059 +-A FORWARD -j limit-1058 +-A FORWARD -j limit-1057 +-A FORWARD -j limit-1056 +-A FORWARD -j limit-1055 +-A FORWARD -j limit-1054 +-A FORWARD -j limit-1053 +-A FORWARD -j limit-1052 +-A FORWARD -j limit-1051 +-A FORWARD -j limit-1050 +-A FORWARD -j limit-1049 +-A FORWARD -j limit-1048 +-A FORWARD -j limit-1047 +-A FORWARD -j limit-1046 +-A FORWARD -j limit-1045 +-A FORWARD -j limit-1044 +-A FORWARD -j limit-1043 +-A FORWARD -j limit-1042 +-A FORWARD -j limit-1041 +-A FORWARD -j limit-1040 +-A FORWARD -j limit-1039 +-A FORWARD -j limit-1038 +-A FORWARD -j limit-1037 +-A FORWARD -j limit-1036 +-A FORWARD -j limit-1035 +-A FORWARD -j limit-1034 +-A FORWARD -j limit-1033 +-A FORWARD -j limit-1032 +-A FORWARD -j limit-1031 +-A FORWARD -j limit-1030 +-A FORWARD -j limit-1029 +-A FORWARD -j limit-1028 +-A FORWARD -j limit-1027 +-A FORWARD -j limit-1026 +-A FORWARD -j limit-1025 +-A FORWARD -j limit-1024 +-A FORWARD -j limit-1023 +-A FORWARD -j limit-1022 +-A FORWARD -j limit-1021 +-A FORWARD -j limit-1020 +-A FORWARD -j limit-1019 +-A FORWARD -j limit-1018 +-A FORWARD -j limit-1017 +-A FORWARD -j limit-1016 +-A FORWARD -j limit-1015 +-A FORWARD -j limit-1014 +-A FORWARD -j limit-1013 +-A FORWARD -j limit-1012 +-A FORWARD -j limit-1011 +-A FORWARD -j limit-1010 +-A FORWARD -j limit-1009 +-A FORWARD -j limit-1008 +-A FORWARD -j limit-1007 +-A FORWARD -j limit-1006 +-A FORWARD -j limit-1005 +-A FORWARD -j limit-1004 +-A FORWARD -j limit-1003 +-A FORWARD -j limit-1002 +-A FORWARD -j limit-1001 +-A FORWARD -j limit-1000 +-A FORWARD -j limit-999 +-A FORWARD -j limit-998 +-A FORWARD -j limit-997 +-A FORWARD -j limit-996 +-A FORWARD -j limit-995 +-A FORWARD -j limit-994 +-A FORWARD -j limit-993 +-A FORWARD -j limit-992 +-A FORWARD -j limit-991 +-A FORWARD -j limit-990 +-A FORWARD -j limit-989 +-A FORWARD -j limit-988 +-A FORWARD -j limit-987 +-A FORWARD -j limit-986 +-A FORWARD -j limit-985 +-A FORWARD -j limit-984 +-A FORWARD -j limit-983 +-A FORWARD -j limit-982 +-A FORWARD -j limit-981 +-A FORWARD -j limit-980 +-A FORWARD -j limit-979 +-A FORWARD -j limit-978 +-A FORWARD -j limit-977 +-A FORWARD -j limit-976 +-A FORWARD -j limit-975 +-A FORWARD -j limit-974 +-A FORWARD -j limit-973 +-A FORWARD -j limit-972 +-A FORWARD -j limit-971 +-A FORWARD -j limit-970 +-A FORWARD -j limit-969 +-A FORWARD -j limit-968 +-A FORWARD -j limit-967 +-A FORWARD -j limit-966 +-A FORWARD -j limit-965 +-A FORWARD -j limit-964 +-A FORWARD -j limit-963 +-A FORWARD -j limit-962 +-A FORWARD -j limit-961 +-A FORWARD -j limit-960 +-A FORWARD -j limit-959 +-A FORWARD -j limit-958 +-A FORWARD -j limit-957 +-A FORWARD -j limit-956 +-A FORWARD -j limit-955 +-A FORWARD -j limit-954 +-A FORWARD -j limit-953 +-A FORWARD -j limit-952 +-A FORWARD -j limit-951 +-A FORWARD -j limit-950 +-A FORWARD -j limit-949 +-A FORWARD -j limit-948 +-A FORWARD -j limit-947 +-A FORWARD -j limit-946 +-A FORWARD -j limit-945 +-A FORWARD -j limit-944 +-A FORWARD -j limit-943 +-A FORWARD -j limit-942 +-A FORWARD -j limit-941 +-A FORWARD -j limit-940 +-A FORWARD -j limit-939 +-A FORWARD -j limit-938 +-A FORWARD -j limit-937 +-A FORWARD -j limit-936 +-A FORWARD -j limit-935 +-A FORWARD -j limit-934 +-A FORWARD -j limit-933 +-A FORWARD -j limit-932 +-A FORWARD -j limit-931 +-A FORWARD -j limit-930 +-A FORWARD -j limit-929 +-A FORWARD -j limit-928 +-A FORWARD -j limit-927 +-A FORWARD -j limit-926 +-A FORWARD -j limit-925 +-A FORWARD -j limit-924 +-A FORWARD -j limit-923 +-A FORWARD -j limit-922 +-A FORWARD -j limit-921 +-A FORWARD -j limit-920 +-A FORWARD -j limit-919 +-A FORWARD -j limit-918 +-A FORWARD -j limit-917 +-A FORWARD -j limit-916 +-A FORWARD -j limit-915 +-A FORWARD -j limit-914 +-A FORWARD -j limit-913 +-A FORWARD -j limit-912 +-A FORWARD -j limit-911 +-A FORWARD -j limit-910 +-A FORWARD -j limit-909 +-A FORWARD -j limit-908 +-A FORWARD -j limit-907 +-A FORWARD -j limit-906 +-A FORWARD -j limit-905 +-A FORWARD -j limit-904 +-A FORWARD -j limit-903 +-A FORWARD -j limit-902 +-A FORWARD -j limit-901 +-A FORWARD -j limit-900 +-A FORWARD -j limit-899 +-A FORWARD -j limit-898 +-A FORWARD -j limit-897 +-A FORWARD -j limit-896 +-A FORWARD -j limit-895 +-A FORWARD -j limit-894 +-A FORWARD -j limit-893 +-A FORWARD -j limit-892 +-A FORWARD -j limit-891 +-A FORWARD -j limit-890 +-A FORWARD -j limit-889 +-A FORWARD -j limit-888 +-A FORWARD -j limit-887 +-A FORWARD -j limit-886 +-A FORWARD -j limit-885 +-A FORWARD -j limit-884 +-A FORWARD -j limit-883 +-A FORWARD -j limit-882 +-A FORWARD -j limit-881 +-A FORWARD -j limit-880 +-A FORWARD -j limit-879 +-A FORWARD -j limit-878 +-A FORWARD -j limit-877 +-A FORWARD -j limit-876 +-A FORWARD -j limit-875 +-A FORWARD -j limit-874 +-A FORWARD -j limit-873 +-A FORWARD -j limit-872 +-A FORWARD -j limit-871 +-A FORWARD -j limit-870 +-A FORWARD -j limit-869 +-A FORWARD -j limit-868 +-A FORWARD -j limit-867 +-A FORWARD -j limit-866 +-A FORWARD -j limit-865 +-A FORWARD -j limit-864 +-A FORWARD -j limit-863 +-A FORWARD -j limit-862 +-A FORWARD -j limit-861 +-A FORWARD -j limit-860 +-A FORWARD -j limit-859 +-A FORWARD -j limit-858 +-A FORWARD -j limit-857 +-A FORWARD -j limit-856 +-A FORWARD -j limit-855 +-A FORWARD -j limit-854 +-A FORWARD -j limit-853 +-A FORWARD -j limit-852 +-A FORWARD -j limit-851 +-A FORWARD -j limit-850 +-A FORWARD -j limit-849 +-A FORWARD -j limit-848 +-A FORWARD -j limit-847 +-A FORWARD -j limit-846 +-A FORWARD -j limit-845 +-A FORWARD -j limit-844 +-A FORWARD -j limit-843 +-A FORWARD -j limit-842 +-A FORWARD -j limit-841 +-A FORWARD -j limit-840 +-A FORWARD -j limit-839 +-A FORWARD -j limit-838 +-A FORWARD -j limit-837 +-A FORWARD -j limit-836 +-A FORWARD -j limit-835 +-A FORWARD -j limit-834 +-A FORWARD -j limit-833 +-A FORWARD -j limit-832 +-A FORWARD -j limit-831 +-A FORWARD -j limit-830 +-A FORWARD -j limit-829 +-A FORWARD -j limit-828 +-A FORWARD -j limit-827 +-A FORWARD -j limit-826 +-A FORWARD -j limit-825 +-A FORWARD -j limit-824 +-A FORWARD -j limit-823 +-A FORWARD -j limit-822 +-A FORWARD -j limit-821 +-A FORWARD -j limit-820 +-A FORWARD -j limit-819 +-A FORWARD -j limit-818 +-A FORWARD -j limit-817 +-A FORWARD -j limit-816 +-A FORWARD -j limit-815 +-A FORWARD -j limit-814 +-A FORWARD -j limit-813 +-A FORWARD -j limit-812 +-A FORWARD -j limit-811 +-A FORWARD -j limit-810 +-A FORWARD -j limit-809 +-A FORWARD -j limit-808 +-A FORWARD -j limit-807 +-A FORWARD -j limit-806 +-A FORWARD -j limit-805 +-A FORWARD -j limit-804 +-A FORWARD -j limit-803 +-A FORWARD -j limit-802 +-A FORWARD -j limit-801 +-A FORWARD -j limit-800 +-A FORWARD -j limit-799 +-A FORWARD -j limit-798 +-A FORWARD -j limit-797 +-A FORWARD -j limit-796 +-A FORWARD -j limit-795 +-A FORWARD -j limit-794 +-A FORWARD -j limit-793 +-A FORWARD -j limit-792 +-A FORWARD -j limit-791 +-A FORWARD -j limit-790 +-A FORWARD -j limit-789 +-A FORWARD -j limit-788 +-A FORWARD -j limit-787 +-A FORWARD -j limit-786 +-A FORWARD -j limit-785 +-A FORWARD -j limit-784 +-A FORWARD -j limit-783 +-A FORWARD -j limit-782 +-A FORWARD -j limit-781 +-A FORWARD -j limit-780 +-A FORWARD -j limit-779 +-A FORWARD -j limit-778 +-A FORWARD -j limit-777 +-A FORWARD -j limit-776 +-A FORWARD -j limit-775 +-A FORWARD -j limit-774 +-A FORWARD -j limit-773 +-A FORWARD -j limit-772 +-A FORWARD -j limit-771 +-A FORWARD -j limit-770 +-A FORWARD -j limit-769 +-A FORWARD -j limit-768 +-A FORWARD -j limit-767 +-A FORWARD -j limit-766 +-A FORWARD -j limit-765 +-A FORWARD -j limit-764 +-A FORWARD -j limit-763 +-A FORWARD -j limit-762 +-A FORWARD -j limit-761 +-A FORWARD -j limit-760 +-A FORWARD -j limit-759 +-A FORWARD -j limit-758 +-A FORWARD -j limit-757 +-A FORWARD -j limit-756 +-A FORWARD -j limit-755 +-A FORWARD -j limit-754 +-A FORWARD -j limit-753 +-A FORWARD -j limit-752 +-A FORWARD -j limit-751 +-A FORWARD -j limit-750 +-A FORWARD -j limit-749 +-A FORWARD -j limit-748 +-A FORWARD -j limit-747 +-A FORWARD -j limit-746 +-A FORWARD -j limit-745 +-A FORWARD -j limit-744 +-A FORWARD -j limit-743 +-A FORWARD -j limit-742 +-A FORWARD -j limit-741 +-A FORWARD -j limit-740 +-A FORWARD -j limit-739 +-A FORWARD -j limit-738 +-A FORWARD -j limit-737 +-A FORWARD -j limit-736 +-A FORWARD -j limit-735 +-A FORWARD -j limit-734 +-A FORWARD -j limit-733 +-A FORWARD -j limit-732 +-A FORWARD -j limit-731 +-A FORWARD -j limit-730 +-A FORWARD -j limit-729 +-A FORWARD -j limit-728 +-A FORWARD -j limit-727 +-A FORWARD -j limit-726 +-A FORWARD -j limit-725 +-A FORWARD -j limit-724 +-A FORWARD -j limit-723 +-A FORWARD -j limit-722 +-A FORWARD -j limit-721 +-A FORWARD -j limit-720 +-A FORWARD -j limit-719 +-A FORWARD -j limit-718 +-A FORWARD -j limit-717 +-A FORWARD -j limit-716 +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-0 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-2 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-3 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-4 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-5 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-6 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-7 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-8 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-10 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-14 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-16 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-17 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-18 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-19 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-20 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-21 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-22 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-23 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-24 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-25 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-26 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-27 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-28 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-29 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-30 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-31 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-32 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-33 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-34 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-35 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-36 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-37 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-38 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-39 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-43 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-47 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-55 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-59 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-69 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-73 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-77 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-85 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-89 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-97 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-101 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-105 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-109 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-113 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-117 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-127 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-131 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-135 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-139 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-143 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-147 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-151 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-155 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-159 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-163 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-167 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-177 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-181 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-185 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-189 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-193 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-197 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-201 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-205 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-209 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-217 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-221 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-235 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-239 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-247 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-251 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-259 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-263 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-271 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-275 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-289 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-293 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-301 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-305 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-313 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-317 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-325 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-329 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-0 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-1 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-2 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-3 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-4 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-5 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-6 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-7 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-8 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-9 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-10 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-11 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-12 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-13 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-14 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-15 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-16 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-17 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-18 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-19 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-20 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-21 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-22 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-23 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-24 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-25 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-26 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-27 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-28 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-29 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-30 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-31 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-32 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-33 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-34 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-35 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-36 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-37 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-38 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-39 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-40 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-41 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-42 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-43 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-44 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-45 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-46 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-47 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-48 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-49 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-50 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-51 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-52 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-53 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-54 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-55 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-56 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-57 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-58 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-59 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-60 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-61 +-A FORWARD -j ACCEPT +-A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A FORWARD -m recent --name user:D --rsource --mask 255.255.252.0 --set +-A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-456 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-21 +-A FORWARD -j logdrop-457 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmp -j icmp-routing +-A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A INPUT -j limit-1073 +-A INPUT -j limit-1072 +-A INPUT -j limit-1071 +-A INPUT -j limit-1070 +-A INPUT -j limit-1069 +-A INPUT -j limit-1068 +-A INPUT -j limit-1067 +-A INPUT -j limit-1066 +-A INPUT -j limit-1065 +-A INPUT -j limit-1064 +-A INPUT -j limit-1063 +-A INPUT -j limit-1062 +-A INPUT -j limit-1061 +-A INPUT -j limit-1060 +-A INPUT -j limit-1059 +-A INPUT -j limit-1058 +-A INPUT -j limit-1057 +-A INPUT -j limit-1056 +-A INPUT -j limit-1055 +-A INPUT -j limit-1054 +-A INPUT -j limit-1053 +-A INPUT -j limit-1052 +-A INPUT -j limit-1051 +-A INPUT -j limit-1050 +-A INPUT -j limit-1049 +-A INPUT -j limit-1048 +-A INPUT -j limit-1047 +-A INPUT -j limit-1046 +-A INPUT -j limit-1045 +-A INPUT -j limit-1044 +-A INPUT -j limit-1043 +-A INPUT -j limit-1042 +-A INPUT -j limit-1041 +-A INPUT -j limit-1040 +-A INPUT -j limit-1039 +-A INPUT -j limit-1038 +-A INPUT -j limit-1037 +-A INPUT -j limit-1036 +-A INPUT -j limit-1035 +-A INPUT -j limit-1034 +-A INPUT -j limit-1033 +-A INPUT -j limit-1032 +-A INPUT -j limit-1031 +-A INPUT -j limit-1030 +-A INPUT -j limit-1029 +-A INPUT -j limit-1028 +-A INPUT -j limit-1027 +-A INPUT -j limit-1026 +-A INPUT -j limit-1025 +-A INPUT -j limit-1024 +-A INPUT -j limit-1023 +-A INPUT -j limit-1022 +-A INPUT -j limit-1021 +-A INPUT -j limit-1020 +-A INPUT -j limit-1019 +-A INPUT -j limit-1018 +-A INPUT -j limit-1017 +-A INPUT -j limit-1016 +-A INPUT -j limit-1015 +-A INPUT -j limit-1014 +-A INPUT -j limit-1013 +-A INPUT -j limit-1012 +-A INPUT -j limit-1011 +-A INPUT -j limit-1010 +-A INPUT -j limit-1009 +-A INPUT -j limit-1008 +-A INPUT -j limit-1007 +-A INPUT -j limit-1006 +-A INPUT -j limit-1005 +-A INPUT -j limit-1004 +-A INPUT -j limit-1003 +-A INPUT -j limit-1002 +-A INPUT -j limit-1001 +-A INPUT -j limit-1000 +-A INPUT -j limit-999 +-A INPUT -j limit-998 +-A INPUT -j limit-997 +-A INPUT -j limit-996 +-A INPUT -j limit-995 +-A INPUT -j limit-994 +-A INPUT -j limit-993 +-A INPUT -j limit-992 +-A INPUT -j limit-991 +-A INPUT -j limit-990 +-A INPUT -j limit-989 +-A INPUT -j limit-988 +-A INPUT -j limit-987 +-A INPUT -j limit-986 +-A INPUT -j limit-985 +-A INPUT -j limit-984 +-A INPUT -j limit-983 +-A INPUT -j limit-982 +-A INPUT -j limit-981 +-A INPUT -j limit-980 +-A INPUT -j limit-979 +-A INPUT -j limit-978 +-A INPUT -j limit-977 +-A INPUT -j limit-976 +-A INPUT -j limit-975 +-A INPUT -j limit-974 +-A INPUT -j limit-973 +-A INPUT -j limit-972 +-A INPUT -j limit-971 +-A INPUT -j limit-970 +-A INPUT -j limit-969 +-A INPUT -j limit-968 +-A INPUT -j limit-967 +-A INPUT -j limit-966 +-A INPUT -j limit-965 +-A INPUT -j limit-964 +-A INPUT -j limit-963 +-A INPUT -j limit-962 +-A INPUT -j limit-961 +-A INPUT -j limit-960 +-A INPUT -j limit-959 +-A INPUT -j limit-958 +-A INPUT -j limit-957 +-A INPUT -j limit-956 +-A INPUT -j limit-955 +-A INPUT -j limit-954 +-A INPUT -j limit-953 +-A INPUT -j limit-952 +-A INPUT -j limit-951 +-A INPUT -j limit-950 +-A INPUT -j limit-949 +-A INPUT -j limit-948 +-A INPUT -j limit-947 +-A INPUT -j limit-946 +-A INPUT -j limit-945 +-A INPUT -j limit-944 +-A INPUT -j limit-943 +-A INPUT -j limit-942 +-A INPUT -j limit-941 +-A INPUT -j limit-940 +-A INPUT -j limit-939 +-A INPUT -j limit-938 +-A INPUT -j limit-937 +-A INPUT -j limit-936 +-A INPUT -j limit-935 +-A INPUT -j limit-934 +-A INPUT -j limit-933 +-A INPUT -j limit-932 +-A INPUT -j limit-931 +-A INPUT -j limit-930 +-A INPUT -j limit-929 +-A INPUT -j limit-928 +-A INPUT -j limit-927 +-A INPUT -j limit-926 +-A INPUT -j limit-925 +-A INPUT -j limit-924 +-A INPUT -j limit-923 +-A INPUT -j limit-922 +-A INPUT -j limit-921 +-A INPUT -j limit-920 +-A INPUT -j limit-919 +-A INPUT -j limit-918 +-A INPUT -j limit-917 +-A INPUT -j limit-916 +-A INPUT -j limit-915 +-A INPUT -j limit-914 +-A INPUT -j limit-913 +-A INPUT -j limit-912 +-A INPUT -j limit-911 +-A INPUT -j limit-910 +-A INPUT -j limit-909 +-A INPUT -j limit-908 +-A INPUT -j limit-907 +-A INPUT -j limit-906 +-A INPUT -j limit-905 +-A INPUT -j limit-904 +-A INPUT -j limit-903 +-A INPUT -j limit-902 +-A INPUT -j limit-901 +-A INPUT -j limit-900 +-A INPUT -j limit-899 +-A INPUT -j limit-898 +-A INPUT -j limit-897 +-A INPUT -j limit-896 +-A INPUT -j limit-895 +-A INPUT -j limit-894 +-A INPUT -j limit-893 +-A INPUT -j limit-892 +-A INPUT -j limit-891 +-A INPUT -j limit-890 +-A INPUT -j limit-889 +-A INPUT -j limit-888 +-A INPUT -j limit-887 +-A INPUT -j limit-886 +-A INPUT -j limit-885 +-A INPUT -j limit-884 +-A INPUT -j limit-883 +-A INPUT -j limit-882 +-A INPUT -j limit-881 +-A INPUT -j limit-880 +-A INPUT -j limit-879 +-A INPUT -j limit-878 +-A INPUT -j limit-877 +-A INPUT -j limit-876 +-A INPUT -j limit-875 +-A INPUT -j limit-874 +-A INPUT -j limit-873 +-A INPUT -j limit-872 +-A INPUT -j limit-871 +-A INPUT -j limit-870 +-A INPUT -j limit-869 +-A INPUT -j limit-868 +-A INPUT -j limit-867 +-A INPUT -j limit-866 +-A INPUT -j limit-865 +-A INPUT -j limit-864 +-A INPUT -j limit-863 +-A INPUT -j limit-862 +-A INPUT -j limit-861 +-A INPUT -j limit-860 +-A INPUT -j limit-859 +-A INPUT -j limit-858 +-A INPUT -j limit-857 +-A INPUT -j limit-856 +-A INPUT -j limit-855 +-A INPUT -j limit-854 +-A INPUT -j limit-853 +-A INPUT -j limit-852 +-A INPUT -j limit-851 +-A INPUT -j limit-850 +-A INPUT -j limit-849 +-A INPUT -j limit-848 +-A INPUT -j limit-847 +-A INPUT -j limit-846 +-A INPUT -j limit-845 +-A INPUT -j limit-844 +-A INPUT -j limit-843 +-A INPUT -j limit-842 +-A INPUT -j limit-841 +-A INPUT -j limit-840 +-A INPUT -j limit-839 +-A INPUT -j limit-838 +-A INPUT -j limit-837 +-A INPUT -j limit-836 +-A INPUT -j limit-835 +-A INPUT -j limit-834 +-A INPUT -j limit-833 +-A INPUT -j limit-832 +-A INPUT -j limit-831 +-A INPUT -j limit-830 +-A INPUT -j limit-829 +-A INPUT -j limit-828 +-A INPUT -j limit-827 +-A INPUT -j limit-826 +-A INPUT -j limit-825 +-A INPUT -j limit-824 +-A INPUT -j limit-823 +-A INPUT -j limit-822 +-A INPUT -j limit-821 +-A INPUT -j limit-820 +-A INPUT -j limit-819 +-A INPUT -j limit-818 +-A INPUT -j limit-817 +-A INPUT -j limit-816 +-A INPUT -j limit-815 +-A INPUT -j limit-814 +-A INPUT -j limit-813 +-A INPUT -j limit-812 +-A INPUT -j limit-811 +-A INPUT -j limit-810 +-A INPUT -j limit-809 +-A INPUT -j limit-808 +-A INPUT -j limit-807 +-A INPUT -j limit-806 +-A INPUT -j limit-805 +-A INPUT -j limit-804 +-A INPUT -j limit-803 +-A INPUT -j limit-802 +-A INPUT -j limit-801 +-A INPUT -j limit-800 +-A INPUT -j limit-799 +-A INPUT -j limit-798 +-A INPUT -j limit-797 +-A INPUT -j limit-796 +-A INPUT -j limit-795 +-A INPUT -j limit-794 +-A INPUT -j limit-793 +-A INPUT -j limit-792 +-A INPUT -j limit-791 +-A INPUT -j limit-790 +-A INPUT -j limit-789 +-A INPUT -j limit-788 +-A INPUT -j limit-787 +-A INPUT -j limit-786 +-A INPUT -j limit-785 +-A INPUT -j limit-784 +-A INPUT -j limit-783 +-A INPUT -j limit-782 +-A INPUT -j limit-781 +-A INPUT -j limit-780 +-A INPUT -j limit-779 +-A INPUT -j limit-778 +-A INPUT -j limit-777 +-A INPUT -j limit-776 +-A INPUT -j limit-775 +-A INPUT -j limit-774 +-A INPUT -j limit-773 +-A INPUT -j limit-772 +-A INPUT -j limit-771 +-A INPUT -j limit-770 +-A INPUT -j limit-769 +-A INPUT -j limit-768 +-A INPUT -j limit-767 +-A INPUT -j limit-766 +-A INPUT -j limit-765 +-A INPUT -j limit-764 +-A INPUT -j limit-763 +-A INPUT -j limit-762 +-A INPUT -j limit-761 +-A INPUT -j limit-760 +-A INPUT -j limit-759 +-A INPUT -j limit-758 +-A INPUT -j limit-757 +-A INPUT -j limit-756 +-A INPUT -j limit-755 +-A INPUT -j limit-754 +-A INPUT -j limit-753 +-A INPUT -j limit-752 +-A INPUT -j limit-751 +-A INPUT -j limit-750 +-A INPUT -j limit-749 +-A INPUT -j limit-748 +-A INPUT -j limit-747 +-A INPUT -j limit-746 +-A INPUT -j limit-745 +-A INPUT -j limit-744 +-A INPUT -j limit-743 +-A INPUT -j limit-742 +-A INPUT -j limit-741 +-A INPUT -j limit-740 +-A INPUT -j limit-739 +-A INPUT -j limit-738 +-A INPUT -j limit-737 +-A INPUT -j limit-736 +-A INPUT -j limit-735 +-A INPUT -j limit-734 +-A INPUT -j limit-733 +-A INPUT -j limit-732 +-A INPUT -j limit-731 +-A INPUT -j limit-730 +-A INPUT -j limit-729 +-A INPUT -j limit-728 +-A INPUT -j limit-727 +-A INPUT -j limit-726 +-A INPUT -j limit-725 +-A INPUT -j limit-724 +-A INPUT -j limit-723 +-A INPUT -j limit-722 +-A INPUT -j limit-721 +-A INPUT -j limit-720 +-A INPUT -j limit-719 +-A INPUT -j limit-718 +-A INPUT -j limit-717 +-A INPUT -j limit-716 +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-0 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-1 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-2 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-3 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-4 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-5 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-6 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-7 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-8 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-9 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-10 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-11 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-12 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-13 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-14 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-15 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-16 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-17 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-18 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-19 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-20 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-21 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-22 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-23 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-24 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-25 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-26 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-27 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-28 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-29 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-30 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-31 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-32 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-33 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-34 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-35 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-36 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-37 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-38 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-39 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-40 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-41 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-42 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-43 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-44 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-45 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-46 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-47 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-48 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-49 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-50 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-51 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-52 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-53 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-54 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-55 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-56 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-57 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-58 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-59 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-60 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-61 +-A INPUT -j ACCEPT +-A INPUT -i eth0 -j limit-1074 +-A INPUT -i eth0 -j limit-1075 +-A INPUT -i eth0 -j limit-1076 +-A INPUT -i eth0 -j limit-1077 +-A INPUT -i eth0 -j limit-1078 +-A INPUT -i eth0 -j limit-1079 +-A INPUT -i eth0 -j limit-1080 +-A INPUT -i eth0 -j limit-1081 +-A INPUT -i eth0 -j limit-1082 +-A INPUT -i eth0 -j limit-1083 +-A INPUT -i eth0 -j limit-1084 +-A INPUT -i eth0 -j limit-1085 +-A INPUT -i eth0 -j limit-1086 +-A INPUT -i eth0 -j limit-1087 +-A INPUT -i eth0 -j limit-1088 +-A INPUT -i eth0 -j limit-1089 +-A INPUT -i eth0 -j limit-1090 +-A INPUT -i eth0 -j limit-1091 +-A INPUT -i eth0 -j limit-1092 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-361 +-A INPUT -i eth0 -j limit-1094 +-A INPUT -i eth0 -j limit-1095 +-A INPUT -i eth0 -j limit-1096 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-365 +-A INPUT -i eth0 -j limit-1098 +-A INPUT -i eth0 -j limit-1099 +-A INPUT -i eth0 -j limit-1100 +-A INPUT -i eth0 -j limit-1101 +-A INPUT -i eth0 -j limit-1102 +-A INPUT -i eth0 -j limit-1103 +-A INPUT -i eth0 -j limit-1104 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 +-A INPUT -i eth0 -j limit-1106 +-A INPUT -i eth0 -j limit-1107 +-A INPUT -i eth0 -j limit-1108 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-377 +-A INPUT -i eth0 -j limit-1110 +-A INPUT -i eth0 -j limit-1111 +-A INPUT -i eth0 -j limit-1112 +-A INPUT -i eth0 -j limit-1113 +-A INPUT -i eth0 -j limit-1114 +-A INPUT -i eth0 -j limit-1115 +-A INPUT -i eth0 -j limit-1116 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-385 +-A INPUT -i eth0 -j limit-1118 +-A INPUT -i eth0 -j limit-1119 +-A INPUT -i eth0 -j limit-1120 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-389 +-A INPUT -i eth0 -j limit-1122 +-A INPUT -i eth0 -j limit-1123 +-A INPUT -i eth0 -j limit-1124 +-A INPUT -i eth0 -j limit-1125 +-A INPUT -i eth0 -j limit-1126 +-A INPUT -i eth0 -j limit-1127 +-A INPUT -i eth0 -j limit-1128 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 +-A INPUT -i eth0 -j limit-1130 +-A INPUT -i eth0 -j limit-1131 +-A INPUT -i eth0 -j limit-1132 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-401 +-A INPUT -i eth0 -j limit-1134 +-A INPUT -i eth0 -j limit-1135 +-A INPUT -i eth0 -j limit-1136 +-A INPUT -i eth0 -j limit-1137 +-A INPUT -i eth0 -j limit-1138 +-A INPUT -i eth0 -j limit-1139 +-A INPUT -i eth0 -j limit-1140 +-A INPUT -i eth0 -j limit-1141 +-A INPUT -i eth0 -j limit-1142 +-A INPUT -i eth0 -j limit-1143 +-A INPUT -i eth0 -j limit-1144 +-A INPUT -i eth0 -j limit-1145 +-A INPUT -i eth0 -j limit-1146 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1148 +-A INPUT -i eth0 -j limit-1149 +-A INPUT -i eth0 -j limit-1150 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1152 +-A INPUT -i eth0 -j limit-1153 +-A INPUT -i eth0 -j limit-1154 +-A INPUT -i eth0 -j limit-1155 +-A INPUT -i eth0 -j limit-1156 +-A INPUT -i eth0 -j limit-1157 +-A INPUT -i eth0 -j limit-1158 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1160 +-A INPUT -i eth0 -j limit-1161 +-A INPUT -i eth0 -j limit-1162 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1164 +-A INPUT -i eth0 -j limit-1165 +-A INPUT -i eth0 -j limit-1166 +-A INPUT -i eth0 -j limit-1167 +-A INPUT -i eth0 -j limit-1168 +-A INPUT -i eth0 -j limit-1169 +-A INPUT -i eth0 -j limit-1170 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1172 +-A INPUT -i eth0 -j limit-1173 +-A INPUT -i eth0 -j limit-1174 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1176 +-A INPUT -i eth0 -j limit-1177 +-A INPUT -i eth0 -j limit-1178 +-A INPUT -i eth0 -j limit-1179 +-A INPUT -i eth0 -j limit-1180 +-A INPUT -i eth0 -j limit-1181 +-A INPUT -i eth0 -j limit-1182 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1184 +-A INPUT -i eth0 -j limit-1185 +-A INPUT -i eth0 -j limit-1186 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1188 +-A INPUT -i eth0 -j limit-1189 +-A INPUT -i eth0 -j limit-1190 +-A INPUT -i eth0 -j limit-1191 +-A INPUT -i eth0 -j limit-1192 +-A INPUT -i eth0 -j limit-1193 +-A INPUT -i eth0 -j limit-1194 +-A INPUT -i eth0 -j limit-1195 +-A INPUT -i eth0 -j limit-1196 +-A INPUT -i eth0 -j limit-1197 +-A INPUT -i eth0 -j limit-1198 +-A INPUT -i eth0 -j limit-1199 +-A INPUT -i eth0 -j limit-1200 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1202 +-A INPUT -i eth0 -j limit-1203 +-A INPUT -i eth0 -j limit-1204 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1206 +-A INPUT -i eth0 -j limit-1207 +-A INPUT -i eth0 -j limit-1208 +-A INPUT -i eth0 -j limit-1209 +-A INPUT -i eth0 -j limit-1210 +-A INPUT -i eth0 -j limit-1211 +-A INPUT -i eth0 -j limit-1212 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1214 +-A INPUT -i eth0 -j limit-1215 +-A INPUT -i eth0 -j limit-1216 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1218 +-A INPUT -i eth0 -j limit-1219 +-A INPUT -i eth0 -j limit-1220 +-A INPUT -i eth0 -j limit-1221 +-A INPUT -i eth0 -j limit-1222 +-A INPUT -i eth0 -j limit-1223 +-A INPUT -i eth0 -j limit-1224 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1226 +-A INPUT -i eth0 -j limit-1227 +-A INPUT -i eth0 -j limit-1228 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1230 +-A INPUT -i eth0 -j limit-1231 +-A INPUT -i eth0 -j limit-1232 +-A INPUT -i eth0 -j limit-1233 +-A INPUT -i eth0 -j limit-1234 +-A INPUT -i eth0 -j limit-1235 +-A INPUT -i eth0 -j limit-1236 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1238 +-A INPUT -i eth0 -j limit-1239 +-A INPUT -i eth0 -j limit-1240 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1242 +-A INPUT -i eth0 -j limit-1243 +-A INPUT -i eth0 -j limit-1244 +-A INPUT -i eth0 -j limit-1245 +-A INPUT -i eth0 -j limit-1246 +-A INPUT -i eth0 -j limit-1247 +-A INPUT -i eth0 -j limit-1248 +-A INPUT -i eth0 -j limit-1249 +-A INPUT -i eth0 -j limit-1250 +-A INPUT -i eth0 -j limit-1251 +-A INPUT -i eth0 -j limit-1252 +-A INPUT -i eth0 -j limit-1253 +-A INPUT -i eth0 -j limit-1254 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 +-A INPUT -i eth0 -j limit-1256 +-A INPUT -i eth0 -j limit-1257 +-A INPUT -i eth0 -j limit-1258 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 +-A INPUT -i eth0 -j limit-1260 +-A INPUT -i eth0 -j limit-1261 +-A INPUT -i eth0 -j limit-1262 +-A INPUT -i eth0 -j limit-1263 +-A INPUT -i eth0 -j limit-1264 +-A INPUT -i eth0 -j limit-1265 +-A INPUT -i eth0 -j limit-1266 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-427 +-A INPUT -i eth0 -j limit-1268 +-A INPUT -i eth0 -j limit-1269 +-A INPUT -i eth0 -j limit-1270 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 +-A INPUT -i eth0 -j limit-1272 +-A INPUT -i eth0 -j limit-1273 +-A INPUT -i eth0 -j limit-1274 +-A INPUT -i eth0 -j limit-1275 +-A INPUT -i eth0 -j limit-1276 +-A INPUT -i eth0 -j limit-1277 +-A INPUT -i eth0 -j limit-1278 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 +-A INPUT -i eth0 -j limit-1280 +-A INPUT -i eth0 -j limit-1281 +-A INPUT -i eth0 -j limit-1282 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-443 +-A INPUT -i eth0 -j limit-1284 +-A INPUT -i eth0 -j limit-1285 +-A INPUT -i eth0 -j limit-1286 +-A INPUT -i eth0 -j limit-1287 +-A INPUT -i eth0 -j limit-1288 +-A INPUT -i eth0 -j limit-1289 +-A INPUT -i eth0 -j limit-1290 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 +-A INPUT -i eth0 -j limit-1292 +-A INPUT -i eth0 -j limit-1293 +-A INPUT -i eth0 -j limit-1294 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 +-A INPUT -i eth0 -j limit-1296 +-A INPUT -i eth0 -j limit-1297 +-A INPUT -i eth0 -j limit-1298 +-A INPUT -i eth0 -j limit-1299 +-A INPUT -i eth0 -j limit-1300 +-A INPUT -i eth0 -j limit-1301 +-A INPUT -i eth0 -j limit-1302 +-A INPUT -i eth0 -j limit-1303 +-A INPUT -i eth0 -j limit-1304 +-A INPUT -i eth0 -j limit-1305 +-A INPUT -i eth0 -j limit-1306 +-A INPUT -i eth0 -j limit-1307 +-A INPUT -i eth0 -j limit-1308 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1310 +-A INPUT -i eth0 -j limit-1311 +-A INPUT -i eth0 -j limit-1312 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1314 +-A INPUT -i eth0 -j limit-1315 +-A INPUT -i eth0 -j limit-1316 +-A INPUT -i eth0 -j limit-1317 +-A INPUT -i eth0 -j limit-1318 +-A INPUT -i eth0 -j limit-1319 +-A INPUT -i eth0 -j limit-1320 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1322 +-A INPUT -i eth0 -j limit-1323 +-A INPUT -i eth0 -j limit-1324 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1326 +-A INPUT -i eth0 -j limit-1327 +-A INPUT -i eth0 -j limit-1328 +-A INPUT -i eth0 -j limit-1329 +-A INPUT -i eth0 -j limit-1330 +-A INPUT -i eth0 -j limit-1331 +-A INPUT -i eth0 -j limit-1332 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1334 +-A INPUT -i eth0 -j limit-1335 +-A INPUT -i eth0 -j limit-1336 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1338 +-A INPUT -i eth0 -j limit-1339 +-A INPUT -i eth0 -j limit-1340 +-A INPUT -i eth0 -j limit-1341 +-A INPUT -i eth0 -j limit-1342 +-A INPUT -i eth0 -j limit-1343 +-A INPUT -i eth0 -j limit-1344 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1346 +-A INPUT -i eth0 -j limit-1347 +-A INPUT -i eth0 -j limit-1348 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1350 +-A INPUT -i eth0 -j limit-1351 +-A INPUT -i eth0 -j limit-1352 +-A INPUT -i eth0 -j limit-1353 +-A INPUT -i eth0 -j limit-1354 +-A INPUT -i eth0 -j limit-1355 +-A INPUT -i eth0 -j limit-1356 +-A INPUT -i eth0 -j limit-1357 +-A INPUT -i eth0 -j limit-1358 +-A INPUT -i eth0 -j limit-1359 +-A INPUT -i eth0 -j limit-1360 +-A INPUT -i eth0 -j limit-1361 +-A INPUT -i eth0 -j limit-1362 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1364 +-A INPUT -i eth0 -j limit-1365 +-A INPUT -i eth0 -j limit-1366 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1368 +-A INPUT -i eth0 -j limit-1369 +-A INPUT -i eth0 -j limit-1370 +-A INPUT -i eth0 -j limit-1371 +-A INPUT -i eth0 -j limit-1372 +-A INPUT -i eth0 -j limit-1373 +-A INPUT -i eth0 -j limit-1374 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1376 +-A INPUT -i eth0 -j limit-1377 +-A INPUT -i eth0 -j limit-1378 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1380 +-A INPUT -i eth0 -j limit-1381 +-A INPUT -i eth0 -j limit-1382 +-A INPUT -i eth0 -j limit-1383 +-A INPUT -i eth0 -j limit-1384 +-A INPUT -i eth0 -j limit-1385 +-A INPUT -i eth0 -j limit-1386 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1388 +-A INPUT -i eth0 -j limit-1389 +-A INPUT -i eth0 -j limit-1390 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1392 +-A INPUT -i eth0 -j limit-1393 +-A INPUT -i eth0 -j limit-1394 +-A INPUT -i eth0 -j limit-1395 +-A INPUT -i eth0 -j limit-1396 +-A INPUT -i eth0 -j limit-1397 +-A INPUT -i eth0 -j limit-1398 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1400 +-A INPUT -i eth0 -j limit-1401 +-A INPUT -i eth0 -j limit-1402 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1404 +-A INPUT -i eth0 -j limit-1405 +-A INPUT -i eth0 -j limit-1406 +-A INPUT -i eth0 -j limit-1407 +-A INPUT -i eth0 -j limit-1408 +-A INPUT -i eth0 -j limit-1409 +-A INPUT -i eth0 -j limit-1410 +-A INPUT -i eth0 -j limit-1411 +-A INPUT -i eth0 -j limit-1412 +-A INPUT -i eth0 -j limit-1413 +-A INPUT -i eth0 -j limit-1414 +-A INPUT -i eth0 -j limit-1415 +-A INPUT -i eth0 -j limit-1416 +-A INPUT -i eth0 -j limit-1417 +-A INPUT -i eth0 -j limit-1418 +-A INPUT -i eth0 -j limit-1419 +-A INPUT -i eth0 -j limit-1420 +-A INPUT -i eth0 -j limit-1421 +-A INPUT -i eth0 -j limit-1422 +-A INPUT -i eth0 -j limit-1423 +-A INPUT -i eth0 -j limit-1424 +-A INPUT -i eth0 -j limit-1425 +-A INPUT -i eth0 -j limit-1426 +-A INPUT -i eth0 -j limit-1427 +-A INPUT -i eth0 -j limit-1428 +-A INPUT -i eth0 -j limit-1429 +-A INPUT -i eth0 -j limit-1430 +-A INPUT -i eth0 -j limit-1431 +-A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set +-A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A INPUT -j ACCEPT +-A INPUT -j logdrop-456 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-21 +-A INPUT -j logdrop-457 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A OUTPUT -j limit-1073 +-A OUTPUT -j limit-1072 +-A OUTPUT -j limit-1071 +-A OUTPUT -j limit-1070 +-A OUTPUT -j limit-1069 +-A OUTPUT -j limit-1068 +-A OUTPUT -j limit-1067 +-A OUTPUT -j limit-1066 +-A OUTPUT -j limit-1065 +-A OUTPUT -j limit-1064 +-A OUTPUT -j limit-1063 +-A OUTPUT -j limit-1062 +-A OUTPUT -j limit-1061 +-A OUTPUT -j limit-1060 +-A OUTPUT -j limit-1059 +-A OUTPUT -j limit-1058 +-A OUTPUT -j limit-1057 +-A OUTPUT -j limit-1056 +-A OUTPUT -j limit-1055 +-A OUTPUT -j limit-1054 +-A OUTPUT -j limit-1053 +-A OUTPUT -j limit-1052 +-A OUTPUT -j limit-1051 +-A OUTPUT -j limit-1050 +-A OUTPUT -j limit-1049 +-A OUTPUT -j limit-1048 +-A OUTPUT -j limit-1047 +-A OUTPUT -j limit-1046 +-A OUTPUT -j limit-1045 +-A OUTPUT -j limit-1044 +-A OUTPUT -j limit-1043 +-A OUTPUT -j limit-1042 +-A OUTPUT -j limit-1041 +-A OUTPUT -j limit-1040 +-A OUTPUT -j limit-1039 +-A OUTPUT -j limit-1038 +-A OUTPUT -j limit-1037 +-A OUTPUT -j limit-1036 +-A OUTPUT -j limit-1035 +-A OUTPUT -j limit-1034 +-A OUTPUT -j limit-1033 +-A OUTPUT -j limit-1032 +-A OUTPUT -j limit-1031 +-A OUTPUT -j limit-1030 +-A OUTPUT -j limit-1029 +-A OUTPUT -j limit-1028 +-A OUTPUT -j limit-1027 +-A OUTPUT -j limit-1026 +-A OUTPUT -j limit-1025 +-A OUTPUT -j limit-1024 +-A OUTPUT -j limit-1023 +-A OUTPUT -j limit-1022 +-A OUTPUT -j limit-1021 +-A OUTPUT -j limit-1020 +-A OUTPUT -j limit-1019 +-A OUTPUT -j limit-1018 +-A OUTPUT -j limit-1017 +-A OUTPUT -j limit-1016 +-A OUTPUT -j limit-1015 +-A OUTPUT -j limit-1014 +-A OUTPUT -j limit-1013 +-A OUTPUT -j limit-1012 +-A OUTPUT -j limit-1011 +-A OUTPUT -j limit-1010 +-A OUTPUT -j limit-1009 +-A OUTPUT -j limit-1008 +-A OUTPUT -j limit-1007 +-A OUTPUT -j limit-1006 +-A OUTPUT -j limit-1005 +-A OUTPUT -j limit-1004 +-A OUTPUT -j limit-1003 +-A OUTPUT -j limit-1002 +-A OUTPUT -j limit-1001 +-A OUTPUT -j limit-1000 +-A OUTPUT -j limit-999 +-A OUTPUT -j limit-998 +-A OUTPUT -j limit-997 +-A OUTPUT -j limit-996 +-A OUTPUT -j limit-995 +-A OUTPUT -j limit-994 +-A OUTPUT -j limit-993 +-A OUTPUT -j limit-992 +-A OUTPUT -j limit-991 +-A OUTPUT -j limit-990 +-A OUTPUT -j limit-989 +-A OUTPUT -j limit-988 +-A OUTPUT -j limit-987 +-A OUTPUT -j limit-986 +-A OUTPUT -j limit-985 +-A OUTPUT -j limit-984 +-A OUTPUT -j limit-983 +-A OUTPUT -j limit-982 +-A OUTPUT -j limit-981 +-A OUTPUT -j limit-980 +-A OUTPUT -j limit-979 +-A OUTPUT -j limit-978 +-A OUTPUT -j limit-977 +-A OUTPUT -j limit-976 +-A OUTPUT -j limit-975 +-A OUTPUT -j limit-974 +-A OUTPUT -j limit-973 +-A OUTPUT -j limit-972 +-A OUTPUT -j limit-971 +-A OUTPUT -j limit-970 +-A OUTPUT -j limit-969 +-A OUTPUT -j limit-968 +-A OUTPUT -j limit-967 +-A OUTPUT -j limit-966 +-A OUTPUT -j limit-965 +-A OUTPUT -j limit-964 +-A OUTPUT -j limit-963 +-A OUTPUT -j limit-962 +-A OUTPUT -j limit-961 +-A OUTPUT -j limit-960 +-A OUTPUT -j limit-959 +-A OUTPUT -j limit-958 +-A OUTPUT -j limit-957 +-A OUTPUT -j limit-956 +-A OUTPUT -j limit-955 +-A OUTPUT -j limit-954 +-A OUTPUT -j limit-953 +-A OUTPUT -j limit-952 +-A OUTPUT -j limit-951 +-A OUTPUT -j limit-950 +-A OUTPUT -j limit-949 +-A OUTPUT -j limit-948 +-A OUTPUT -j limit-947 +-A OUTPUT -j limit-946 +-A OUTPUT -j limit-945 +-A OUTPUT -j limit-944 +-A OUTPUT -j limit-943 +-A OUTPUT -j limit-942 +-A OUTPUT -j limit-941 +-A OUTPUT -j limit-940 +-A OUTPUT -j limit-939 +-A OUTPUT -j limit-938 +-A OUTPUT -j limit-937 +-A OUTPUT -j limit-936 +-A OUTPUT -j limit-935 +-A OUTPUT -j limit-934 +-A OUTPUT -j limit-933 +-A OUTPUT -j limit-932 +-A OUTPUT -j limit-931 +-A OUTPUT -j limit-930 +-A OUTPUT -j limit-929 +-A OUTPUT -j limit-928 +-A OUTPUT -j limit-927 +-A OUTPUT -j limit-926 +-A OUTPUT -j limit-925 +-A OUTPUT -j limit-924 +-A OUTPUT -j limit-923 +-A OUTPUT -j limit-922 +-A OUTPUT -j limit-921 +-A OUTPUT -j limit-920 +-A OUTPUT -j limit-919 +-A OUTPUT -j limit-918 +-A OUTPUT -j limit-917 +-A OUTPUT -j limit-916 +-A OUTPUT -j limit-915 +-A OUTPUT -j limit-914 +-A OUTPUT -j limit-913 +-A OUTPUT -j limit-912 +-A OUTPUT -j limit-911 +-A OUTPUT -j limit-910 +-A OUTPUT -j limit-909 +-A OUTPUT -j limit-908 +-A OUTPUT -j limit-907 +-A OUTPUT -j limit-906 +-A OUTPUT -j limit-905 +-A OUTPUT -j limit-904 +-A OUTPUT -j limit-903 +-A OUTPUT -j limit-902 +-A OUTPUT -j limit-901 +-A OUTPUT -j limit-900 +-A OUTPUT -j limit-899 +-A OUTPUT -j limit-898 +-A OUTPUT -j limit-897 +-A OUTPUT -j limit-896 +-A OUTPUT -j limit-895 +-A OUTPUT -j limit-894 +-A OUTPUT -j limit-893 +-A OUTPUT -j limit-892 +-A OUTPUT -j limit-891 +-A OUTPUT -j limit-890 +-A OUTPUT -j limit-889 +-A OUTPUT -j limit-888 +-A OUTPUT -j limit-887 +-A OUTPUT -j limit-886 +-A OUTPUT -j limit-885 +-A OUTPUT -j limit-884 +-A OUTPUT -j limit-883 +-A OUTPUT -j limit-882 +-A OUTPUT -j limit-881 +-A OUTPUT -j limit-880 +-A OUTPUT -j limit-879 +-A OUTPUT -j limit-878 +-A OUTPUT -j limit-877 +-A OUTPUT -j limit-876 +-A OUTPUT -j limit-875 +-A OUTPUT -j limit-874 +-A OUTPUT -j limit-873 +-A OUTPUT -j limit-872 +-A OUTPUT -j limit-871 +-A OUTPUT -j limit-870 +-A OUTPUT -j limit-869 +-A OUTPUT -j limit-868 +-A OUTPUT -j limit-867 +-A OUTPUT -j limit-866 +-A OUTPUT -j limit-865 +-A OUTPUT -j limit-864 +-A OUTPUT -j limit-863 +-A OUTPUT -j limit-862 +-A OUTPUT -j limit-861 +-A OUTPUT -j limit-860 +-A OUTPUT -j limit-859 +-A OUTPUT -j limit-858 +-A OUTPUT -j limit-857 +-A OUTPUT -j limit-856 +-A OUTPUT -j limit-855 +-A OUTPUT -j limit-854 +-A OUTPUT -j limit-853 +-A OUTPUT -j limit-852 +-A OUTPUT -j limit-851 +-A OUTPUT -j limit-850 +-A OUTPUT -j limit-849 +-A OUTPUT -j limit-848 +-A OUTPUT -j limit-847 +-A OUTPUT -j limit-846 +-A OUTPUT -j limit-845 +-A OUTPUT -j limit-844 +-A OUTPUT -j limit-843 +-A OUTPUT -j limit-842 +-A OUTPUT -j limit-841 +-A OUTPUT -j limit-840 +-A OUTPUT -j limit-839 +-A OUTPUT -j limit-838 +-A OUTPUT -j limit-837 +-A OUTPUT -j limit-836 +-A OUTPUT -j limit-835 +-A OUTPUT -j limit-834 +-A OUTPUT -j limit-833 +-A OUTPUT -j limit-832 +-A OUTPUT -j limit-831 +-A OUTPUT -j limit-830 +-A OUTPUT -j limit-829 +-A OUTPUT -j limit-828 +-A OUTPUT -j limit-827 +-A OUTPUT -j limit-826 +-A OUTPUT -j limit-825 +-A OUTPUT -j limit-824 +-A OUTPUT -j limit-823 +-A OUTPUT -j limit-822 +-A OUTPUT -j limit-821 +-A OUTPUT -j limit-820 +-A OUTPUT -j limit-819 +-A OUTPUT -j limit-818 +-A OUTPUT -j limit-817 +-A OUTPUT -j limit-816 +-A OUTPUT -j limit-815 +-A OUTPUT -j limit-814 +-A OUTPUT -j limit-813 +-A OUTPUT -j limit-812 +-A OUTPUT -j limit-811 +-A OUTPUT -j limit-810 +-A OUTPUT -j limit-809 +-A OUTPUT -j limit-808 +-A OUTPUT -j limit-807 +-A OUTPUT -j limit-806 +-A OUTPUT -j limit-805 +-A OUTPUT -j limit-804 +-A OUTPUT -j limit-803 +-A OUTPUT -j limit-802 +-A OUTPUT -j limit-801 +-A OUTPUT -j limit-800 +-A OUTPUT -j limit-799 +-A OUTPUT -j limit-798 +-A OUTPUT -j limit-797 +-A OUTPUT -j limit-796 +-A OUTPUT -j limit-795 +-A OUTPUT -j limit-794 +-A OUTPUT -j limit-793 +-A OUTPUT -j limit-792 +-A OUTPUT -j limit-791 +-A OUTPUT -j limit-790 +-A OUTPUT -j limit-789 +-A OUTPUT -j limit-788 +-A OUTPUT -j limit-787 +-A OUTPUT -j limit-786 +-A OUTPUT -j limit-785 +-A OUTPUT -j limit-784 +-A OUTPUT -j limit-783 +-A OUTPUT -j limit-782 +-A OUTPUT -j limit-781 +-A OUTPUT -j limit-780 +-A OUTPUT -j limit-779 +-A OUTPUT -j limit-778 +-A OUTPUT -j limit-777 +-A OUTPUT -j limit-776 +-A OUTPUT -j limit-775 +-A OUTPUT -j limit-774 +-A OUTPUT -j limit-773 +-A OUTPUT -j limit-772 +-A OUTPUT -j limit-771 +-A OUTPUT -j limit-770 +-A OUTPUT -j limit-769 +-A OUTPUT -j limit-768 +-A OUTPUT -j limit-767 +-A OUTPUT -j limit-766 +-A OUTPUT -j limit-765 +-A OUTPUT -j limit-764 +-A OUTPUT -j limit-763 +-A OUTPUT -j limit-762 +-A OUTPUT -j limit-761 +-A OUTPUT -j limit-760 +-A OUTPUT -j limit-759 +-A OUTPUT -j limit-758 +-A OUTPUT -j limit-757 +-A OUTPUT -j limit-756 +-A OUTPUT -j limit-755 +-A OUTPUT -j limit-754 +-A OUTPUT -j limit-753 +-A OUTPUT -j limit-752 +-A OUTPUT -j limit-751 +-A OUTPUT -j limit-750 +-A OUTPUT -j limit-749 +-A OUTPUT -j limit-748 +-A OUTPUT -j limit-747 +-A OUTPUT -j limit-746 +-A OUTPUT -j limit-745 +-A OUTPUT -j limit-744 +-A OUTPUT -j limit-743 +-A OUTPUT -j limit-742 +-A OUTPUT -j limit-741 +-A OUTPUT -j limit-740 +-A OUTPUT -j limit-739 +-A OUTPUT -j limit-738 +-A OUTPUT -j limit-737 +-A OUTPUT -j limit-736 +-A OUTPUT -j limit-735 +-A OUTPUT -j limit-734 +-A OUTPUT -j limit-733 +-A OUTPUT -j limit-732 +-A OUTPUT -j limit-731 +-A OUTPUT -j limit-730 +-A OUTPUT -j limit-729 +-A OUTPUT -j limit-728 +-A OUTPUT -j limit-727 +-A OUTPUT -j limit-726 +-A OUTPUT -j limit-725 +-A OUTPUT -j limit-724 +-A OUTPUT -j limit-723 +-A OUTPUT -j limit-722 +-A OUTPUT -j limit-721 +-A OUTPUT -j limit-720 +-A OUTPUT -j limit-719 +-A OUTPUT -j limit-718 +-A OUTPUT -j limit-717 +-A OUTPUT -j limit-716 +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-0 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-2 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-3 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-4 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-5 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-6 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-7 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-8 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-10 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-14 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-16 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-17 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-18 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-19 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-20 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-21 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-22 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-23 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-24 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-25 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-26 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-27 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-28 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-29 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-30 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-31 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-32 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-33 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-34 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-35 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-36 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-37 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-38 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-39 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-43 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-47 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-55 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-59 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-69 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-73 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-77 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-85 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-89 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-97 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-101 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-105 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-109 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-113 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-117 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-127 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-131 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-135 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-139 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-143 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-147 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-151 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-155 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-159 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-163 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-167 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-177 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-181 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-185 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-189 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-193 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-197 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-201 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-205 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-209 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-217 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-221 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-235 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-239 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-247 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-251 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-259 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-263 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-271 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-275 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-289 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-293 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-301 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-305 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-313 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-317 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-325 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-329 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-358 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-359 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-360 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-361 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-362 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-363 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-364 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-365 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-366 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-367 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-368 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-369 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-370 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-371 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-372 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-373 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-374 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-375 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-376 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-378 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-379 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-380 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-382 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-383 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-384 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-385 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-386 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-387 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-388 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-390 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-391 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-392 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-394 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-395 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-396 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-397 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-398 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-399 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-400 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-402 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-403 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-404 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-406 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-407 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-408 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-409 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-410 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-411 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-412 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-414 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-415 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-416 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-418 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-419 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-420 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-421 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-422 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-423 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-424 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-425 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-426 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-427 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-428 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-429 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-430 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-432 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-433 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-434 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-436 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-437 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-438 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-439 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-440 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-441 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-442 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-444 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-445 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-446 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-448 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-449 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-450 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-451 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-452 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-453 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-454 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-456 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-457 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-458 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-460 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-461 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-462 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-463 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-464 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-465 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-466 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-468 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-469 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-470 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-472 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-473 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-474 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-475 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-476 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-477 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-478 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-479 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-480 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-481 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-482 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-483 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-484 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-486 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-487 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-488 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-490 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-491 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-492 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-493 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-494 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-495 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-496 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-498 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-499 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-500 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-502 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-503 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-504 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-505 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-506 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-507 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-508 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-510 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-511 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-512 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-514 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-515 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-516 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-517 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-518 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-519 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-520 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-522 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-523 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-524 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-526 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-527 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-528 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-529 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-530 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-531 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-532 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-533 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-534 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-535 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-536 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-537 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-538 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-540 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-541 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-542 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-544 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-545 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-546 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-547 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-548 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-549 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-550 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-552 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-553 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-554 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-556 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-557 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-558 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-559 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-560 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-561 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-562 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-564 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-565 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-566 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-568 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-569 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-570 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-571 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-572 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-573 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-574 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-576 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-577 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-578 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-580 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-581 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-582 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-583 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-584 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-585 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-586 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-587 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-588 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-589 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-590 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-591 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-592 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-594 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-595 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-596 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-598 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-599 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-600 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-601 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-602 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-603 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-604 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-606 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-607 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-608 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-610 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-611 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-612 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-613 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-614 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-615 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-616 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-618 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-619 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-620 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-622 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-623 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-624 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-625 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-626 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-627 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-628 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-630 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-631 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-632 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-634 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-635 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-636 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-637 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-638 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-639 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-640 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-641 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-642 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-643 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-644 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-645 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-646 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-648 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-649 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-650 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-652 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-653 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-654 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-655 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-656 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-657 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-658 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-660 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-661 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-662 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-664 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-665 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-666 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-667 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-668 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-669 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-670 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-672 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-673 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-674 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-676 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-677 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-678 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-679 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-680 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-681 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-682 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-684 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-685 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-686 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-688 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-689 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-690 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-691 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-692 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-693 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-694 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-695 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-696 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-697 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-698 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-699 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-700 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-701 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-702 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-703 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-704 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-705 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-706 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-707 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-708 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-709 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-710 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-711 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-712 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-713 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-714 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-715 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-1 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-2 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-3 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-4 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-5 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-6 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-7 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-8 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-9 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-10 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-11 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-12 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-13 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-14 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-15 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-16 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-17 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-18 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-19 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-20 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-21 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-22 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-23 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-24 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-25 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-26 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-27 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-28 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-29 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-30 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-31 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-32 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-33 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-34 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-35 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-36 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-37 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-38 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-39 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-40 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-41 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-42 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-43 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-44 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-45 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-46 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-47 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-48 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-49 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-51 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-52 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-53 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-54 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-55 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-56 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-57 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-58 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-59 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-60 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-61 +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set +-A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-456 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-21 +-A OUTPUT -j logdrop-457 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-0 +-A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 +-A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set +-A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-100 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-100 -j ACCEPT +-A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1007 -m limit --limit 1/second -j LOG +-A limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-101 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1019 -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1029 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1031 -m limit --limit 1/second -j LOG +-A limit-1032 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1033 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-104 -m limit --limit 1/second -j LOG +-A limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1040 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1041 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1043 -m limit --limit 1/second -j LOG +-A limit-1044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1045 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1046 -j RETURN +-A limit-1046 -m limit --limit 1/second -j LOG +-A limit-1046 -j DROP +-A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1047 -j RETURN +-A limit-1047 -m limit --limit 1/second -j LOG +-A limit-1047 -j DROP +-A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j RETURN +-A limit-1048 -m limit --limit 1/second -j LOG +-A limit-1048 -j DROP +-A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1049 -j RETURN +-A limit-1049 -m limit --limit 1/second -j LOG +-A limit-1049 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1050 -j RETURN +-A limit-1050 -m limit --limit 1/second -j LOG +-A limit-1050 -j DROP +-A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1051 -j RETURN +-A limit-1051 -m limit --limit 1/second -j LOG +-A limit-1051 -j DROP +-A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j RETURN +-A limit-1052 -m limit --limit 1/second -j LOG +-A limit-1052 -j DROP +-A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1053 -j RETURN +-A limit-1053 -m limit --limit 1/second -j LOG +-A limit-1053 -j DROP +-A limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1054 -j RETURN +-A limit-1054 -j DROP +-A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1055 -j RETURN +-A limit-1055 -j DROP +-A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j RETURN +-A limit-1056 -j DROP +-A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1057 -j RETURN +-A limit-1057 -j DROP +-A limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1058 -j RETURN +-A limit-1058 -j DROP +-A limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1059 -j RETURN +-A limit-1059 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j RETURN +-A limit-1060 -j DROP +-A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1061 -j RETURN +-A limit-1061 -j DROP +-A limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1062 -j RETURN +-A limit-1062 -m limit --limit 1/second -j LOG +-A limit-1062 -j DROP +-A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1063 -j RETURN +-A limit-1063 -m limit --limit 1/second -j LOG +-A limit-1063 -j DROP +-A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j RETURN +-A limit-1064 -m limit --limit 1/second -j LOG +-A limit-1064 -j DROP +-A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1065 -j RETURN +-A limit-1065 -m limit --limit 1/second -j LOG +-A limit-1065 -j DROP +-A limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1066 -j RETURN +-A limit-1066 -j DROP +-A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1067 -j RETURN +-A limit-1067 -j DROP +-A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j RETURN +-A limit-1068 -j DROP +-A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1069 -j RETURN +-A limit-1069 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1070 -j RETURN +-A limit-1070 -j DROP +-A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1071 -j RETURN +-A limit-1071 -j DROP +-A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j RETURN +-A limit-1072 -j DROP +-A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1073 -j RETURN +-A limit-1073 -j DROP +-A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-342 +-A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-343 +-A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --set +-A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-344 +-A limit-1076 -m limit --limit 1/second -j LOG +-A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-345 +-A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-346 +-A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-347 +-A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set +-A limit-108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-108 -j ACCEPT +-A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-348 +-A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-349 +-A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set +-A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-350 +-A limit-1082 -m limit --limit 1/second -j LOG +-A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-351 +-A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-352 +-A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-353 +-A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set +-A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-354 +-A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-355 +-A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-356 +-A limit-1088 -m limit --limit 1/second -j LOG +-A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-357 +-A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-109 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-358 +-A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-359 +-A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-360 +-A limit-1092 -j ACCEPT +-A limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-362 +-A limit-1094 -m limit --limit 1/second -j LOG +-A limit-1094 -j ACCEPT +-A limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-363 +-A limit-1095 -m limit --limit 1/second -j LOG +-A limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-364 +-A limit-1096 -j ACCEPT +-A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-366 +-A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-367 +-A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 +-A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set +-A limit-110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-110 -m limit --limit 1/second -j LOG +-A limit-110 -j ACCEPT +-A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-368 +-A limit-1100 -m limit --limit 1/second -j LOG +-A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-369 +-A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-370 +-A limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-371 +-A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-372 +-A limit-1104 -j ACCEPT +-A limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 +-A limit-1106 -m limit --limit 1/second -j LOG +-A limit-1106 -j ACCEPT +-A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 +-A limit-1107 -m limit --limit 1/second -j LOG +-A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-376 +-A limit-1108 -j ACCEPT +-A limit-111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-111 -m limit --limit 1/second -j LOG +-A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-378 +-A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-379 +-A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-380 +-A limit-1112 -m limit --limit 1/second -j LOG +-A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-381 +-A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-382 +-A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-383 +-A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-384 +-A limit-1116 -j ACCEPT +-A limit-1118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-386 +-A limit-1118 -m limit --limit 1/second -j LOG +-A limit-1118 -j ACCEPT +-A limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-387 +-A limit-1119 -m limit --limit 1/second -j LOG +-A limit-112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-112 -j ACCEPT +-A limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-388 +-A limit-1120 -j ACCEPT +-A limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-390 +-A limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-391 +-A limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-392 +-A limit-1124 -m limit --limit 1/second -j LOG +-A limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-393 +-A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-394 +-A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-395 +-A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-396 +-A limit-1128 -j ACCEPT +-A limit-113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 +-A limit-1130 -m limit --limit 1/second -j LOG +-A limit-1130 -j ACCEPT +-A limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 +-A limit-1131 -m limit --limit 1/second -j LOG +-A limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-400 +-A limit-1132 -j ACCEPT +-A limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1135 -m recent --name limit-1135 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1135 -m recent --name limit-1135 --rsource --mask 255.255.255.255 --set +-A limit-1136 -m recent --name limit-1136 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1136 -m limit --limit 1/second -j LOG +-A limit-1136 -m recent --name limit-1136 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1137 -m recent --name limit-1137 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1137 -m recent --name limit-1137 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1138 -m recent --name limit-1138 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1138 -m recent --name limit-1138 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1139 -m recent --name limit-1139 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1139 -m recent --name limit-1139 --rsource --mask 255.255.255.255 --set +-A limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1140 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1140 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1141 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1141 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1142 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1142 -m limit --limit 1/second -j LOG +-A limit-1142 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1143 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1143 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1144 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1144 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1145 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1145 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1146 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1146 -j ACCEPT +-A limit-1148 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1148 -m limit --limit 1/second -j LOG +-A limit-1148 -j ACCEPT +-A limit-1149 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1149 -m limit --limit 1/second -j LOG +-A limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --set +-A limit-1150 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1150 -j ACCEPT +-A limit-1152 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1152 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1153 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1153 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1154 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1154 -m limit --limit 1/second -j LOG +-A limit-1154 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1155 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1155 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1156 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1156 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1157 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1157 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1158 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1158 -j ACCEPT +-A limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-116 -m limit --limit 1/second -j LOG +-A limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1160 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1160 -m limit --limit 1/second -j LOG +-A limit-1160 -j ACCEPT +-A limit-1161 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1161 -m limit --limit 1/second -j LOG +-A limit-1162 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1162 -j ACCEPT +-A limit-1164 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1164 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1165 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1165 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1166 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1166 -m limit --limit 1/second -j LOG +-A limit-1166 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1167 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1167 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1168 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1168 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1169 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1169 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1170 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1170 -j ACCEPT +-A limit-1172 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1172 -m limit --limit 1/second -j LOG +-A limit-1172 -j ACCEPT +-A limit-1173 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1173 -m limit --limit 1/second -j LOG +-A limit-1174 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1174 -j ACCEPT +-A limit-1176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1177 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1178 -m limit --limit 1/second -j LOG +-A limit-1178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1180 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1180 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1181 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1181 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1182 -j ACCEPT +-A limit-1184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1184 -m limit --limit 1/second -j LOG +-A limit-1184 -j ACCEPT +-A limit-1185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1185 -m limit --limit 1/second -j LOG +-A limit-1186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1186 -j ACCEPT +-A limit-1188 -m recent --name limit-1188 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1188 -m recent --name limit-1188 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1189 -m recent --name limit-1189 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1189 -m recent --name limit-1189 --rsource --mask 255.255.255.255 --set +-A limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --set +-A limit-1190 -m recent --name limit-1190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1190 -m limit --limit 1/second -j LOG +-A limit-1190 -m recent --name limit-1190 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1191 -m recent --name limit-1191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1191 -m recent --name limit-1191 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1192 -m recent --name limit-1192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1192 -m recent --name limit-1192 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1193 -m recent --name limit-1193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1193 -m recent --name limit-1193 --rsource --mask 255.255.255.255 --set +-A limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1196 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1196 -m limit --limit 1/second -j LOG +-A limit-1196 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1197 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1197 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1198 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1198 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 +-A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1200 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1200 -j ACCEPT +-A limit-1202 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1202 -m limit --limit 1/second -j LOG +-A limit-1202 -j ACCEPT +-A limit-1203 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1203 -m limit --limit 1/second -j LOG +-A limit-1204 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1204 -j ACCEPT +-A limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1207 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1207 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1208 -m limit --limit 1/second -j LOG +-A limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1212 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1212 -j ACCEPT +-A limit-1214 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1214 -m limit --limit 1/second -j LOG +-A limit-1214 -j ACCEPT +-A limit-1215 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1215 -m limit --limit 1/second -j LOG +-A limit-1216 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1216 -j ACCEPT +-A limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-122 -m limit --limit 1/second -j LOG +-A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1220 -m limit --limit 1/second -j LOG +-A limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1224 -j ACCEPT +-A limit-1226 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1226 -m limit --limit 1/second -j LOG +-A limit-1226 -j ACCEPT +-A limit-1227 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1227 -m limit --limit 1/second -j LOG +-A limit-1228 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1228 -j ACCEPT +-A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1230 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1230 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1231 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1231 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1232 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1232 -m limit --limit 1/second -j LOG +-A limit-1232 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1233 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1233 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1234 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1234 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1235 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1235 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1236 -j ACCEPT +-A limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1238 -m limit --limit 1/second -j LOG +-A limit-1238 -j ACCEPT +-A limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1239 -m limit --limit 1/second -j LOG +-A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1240 -j ACCEPT +-A limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-402 +-A limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 +-A limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --set +-A limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 +-A limit-1244 -m limit --limit 1/second -j LOG +-A limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 +-A limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 +-A limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 +-A limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --set +-A limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 +-A limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 +-A limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-410 +-A limit-1250 -m limit --limit 1/second -j LOG +-A limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-411 +-A limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-412 +-A limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-413 +-A limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-414 +-A limit-1254 -j ACCEPT +-A limit-1256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 +-A limit-1256 -m limit --limit 1/second -j LOG +-A limit-1256 -j ACCEPT +-A limit-1257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 +-A limit-1257 -m limit --limit 1/second -j LOG +-A limit-1258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 +-A limit-1258 -j ACCEPT +-A limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-126 -j ACCEPT +-A limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-420 +-A limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-421 +-A limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-422 +-A limit-1262 -m limit --limit 1/second -j LOG +-A limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-423 +-A limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-424 +-A limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-425 +-A limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1266 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-426 +-A limit-1266 -j ACCEPT +-A limit-1268 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-428 +-A limit-1268 -m limit --limit 1/second -j LOG +-A limit-1268 -j ACCEPT +-A limit-1269 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-429 +-A limit-1269 -m limit --limit 1/second -j LOG +-A limit-127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1270 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 +-A limit-1270 -j ACCEPT +-A limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-432 +-A limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-433 +-A limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-434 +-A limit-1274 -m limit --limit 1/second -j LOG +-A limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-435 +-A limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-436 +-A limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-437 +-A limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-438 +-A limit-1278 -j ACCEPT +-A limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-128 -m limit --limit 1/second -j LOG +-A limit-128 -j ACCEPT +-A limit-1280 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-440 +-A limit-1280 -m limit --limit 1/second -j LOG +-A limit-1280 -j ACCEPT +-A limit-1281 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-441 +-A limit-1281 -m limit --limit 1/second -j LOG +-A limit-1282 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-442 +-A limit-1282 -j ACCEPT +-A limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-444 +-A limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 +-A limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 +-A limit-1286 -m limit --limit 1/second -j LOG +-A limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 +-A limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 +-A limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 +-A limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-129 -m limit --limit 1/second -j LOG +-A limit-1290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-450 +-A limit-1290 -j ACCEPT +-A limit-1292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 +-A limit-1292 -m limit --limit 1/second -j LOG +-A limit-1292 -j ACCEPT +-A limit-1293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 +-A limit-1293 -m limit --limit 1/second -j LOG +-A limit-1294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 +-A limit-1294 -j ACCEPT +-A limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1297 -m recent --name limit-1297 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1297 -m recent --name limit-1297 --rsource --mask 255.255.255.255 --set +-A limit-1298 -m recent --name limit-1298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1298 -m limit --limit 1/second -j LOG +-A limit-1298 -m recent --name limit-1298 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 +-A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-130 -j ACCEPT +-A limit-1300 -m recent --name limit-1300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1300 -m recent --name limit-1300 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1301 -m recent --name limit-1301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1301 -m recent --name limit-1301 --rsource --mask 255.255.255.255 --set +-A limit-1302 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1302 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1303 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1303 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1304 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1304 -m limit --limit 1/second -j LOG +-A limit-1304 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1305 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1305 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1306 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1306 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1307 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1307 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1308 -j ACCEPT +-A limit-131 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1310 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1310 -m limit --limit 1/second -j LOG +-A limit-1310 -j ACCEPT +-A limit-1311 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1311 -m limit --limit 1/second -j LOG +-A limit-1312 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1312 -j ACCEPT +-A limit-1314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1315 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1316 -m limit --limit 1/second -j LOG +-A limit-1316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1317 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1319 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1320 -j ACCEPT +-A limit-1322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1322 -m limit --limit 1/second -j LOG +-A limit-1322 -j ACCEPT +-A limit-1323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1323 -m limit --limit 1/second -j LOG +-A limit-1324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1324 -j ACCEPT +-A limit-1326 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1326 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1327 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1327 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1328 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1328 -m limit --limit 1/second -j LOG +-A limit-1328 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1329 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1329 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1331 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1332 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1332 -j ACCEPT +-A limit-1334 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1334 -m limit --limit 1/second -j LOG +-A limit-1334 -j ACCEPT +-A limit-1335 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1335 -m limit --limit 1/second -j LOG +-A limit-1336 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1336 -j ACCEPT +-A limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-134 -m limit --limit 1/second -j LOG +-A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1340 -m limit --limit 1/second -j LOG +-A limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1343 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1343 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1344 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1344 -j ACCEPT +-A limit-1346 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1346 -m limit --limit 1/second -j LOG +-A limit-1346 -j ACCEPT +-A limit-1347 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1347 -m limit --limit 1/second -j LOG +-A limit-1348 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1348 -j ACCEPT +-A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set +-A limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1352 -m limit --limit 1/second -j LOG +-A limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --set +-A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1358 -m limit --limit 1/second -j LOG +-A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1362 -j ACCEPT +-A limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1364 -m limit --limit 1/second -j LOG +-A limit-1364 -j ACCEPT +-A limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1365 -m limit --limit 1/second -j LOG +-A limit-1366 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1366 -j ACCEPT +-A limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1370 -m limit --limit 1/second -j LOG +-A limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1374 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1374 -j ACCEPT +-A limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1376 -m limit --limit 1/second -j LOG +-A limit-1376 -j ACCEPT +-A limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1377 -m limit --limit 1/second -j LOG +-A limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1378 -j ACCEPT +-A limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-138 -j ACCEPT +-A limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1382 -m limit --limit 1/second -j LOG +-A limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1386 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1386 -j ACCEPT +-A limit-1388 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1388 -m limit --limit 1/second -j LOG +-A limit-1388 -j ACCEPT +-A limit-1389 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1389 -m limit --limit 1/second -j LOG +-A limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1390 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1390 -j ACCEPT +-A limit-1392 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1392 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1393 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1393 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1394 -m limit --limit 1/second -j LOG +-A limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1398 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1398 -j ACCEPT +-A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 +-A limit-14 -m limit --limit 1/second -j LOG +-A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-140 -m limit --limit 1/second -j LOG +-A limit-140 -j ACCEPT +-A limit-1400 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1400 -m limit --limit 1/second -j LOG +-A limit-1400 -j ACCEPT +-A limit-1401 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1401 -m limit --limit 1/second -j LOG +-A limit-1402 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1402 -j ACCEPT +-A limit-1404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1404 -j ACCEPT +-A limit-1404 -m limit --limit 1/second -j LOG +-A limit-1404 -j DROP +-A limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1405 -j RETURN +-A limit-1405 -m limit --limit 1/second -j LOG +-A limit-1405 -j DROP +-A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1406 -j logaccept-14 +-A limit-1406 -m limit --limit 1/second -j LOG +-A limit-1406 -j DROP +-A limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1407 -j ACCEPT +-A limit-1407 -m limit --limit 1/second -j LOG +-A limit-1407 -j DROP +-A limit-1408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1408 -j ACCEPT +-A limit-1408 -m limit --limit 1/second -j LOG +-A limit-1408 -j DROP +-A limit-1409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1409 -j RETURN +-A limit-1409 -m limit --limit 1/second -j LOG +-A limit-1409 -j DROP +-A limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-141 -m limit --limit 1/second -j LOG +-A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1410 -j logaccept-15 +-A limit-1410 -m limit --limit 1/second -j LOG +-A limit-1410 -j DROP +-A limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1411 -j ACCEPT +-A limit-1411 -m limit --limit 1/second -j LOG +-A limit-1411 -j DROP +-A limit-1412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1412 -j ACCEPT +-A limit-1412 -j DROP +-A limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1413 -j RETURN +-A limit-1413 -j DROP +-A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1414 -j logaccept-16 +-A limit-1414 -j DROP +-A limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1415 -j ACCEPT +-A limit-1415 -j DROP +-A limit-1416 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1416 -j ACCEPT +-A limit-1416 -j DROP +-A limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1417 -j RETURN +-A limit-1417 -j DROP +-A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1418 -j logaccept-17 +-A limit-1418 -j DROP +-A limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1419 -j ACCEPT +-A limit-1419 -j DROP +-A limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-142 -j ACCEPT +-A limit-1420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1420 -j ACCEPT +-A limit-1420 -m limit --limit 1/second -j LOG +-A limit-1420 -j DROP +-A limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1421 -j RETURN +-A limit-1421 -m limit --limit 1/second -j LOG +-A limit-1421 -j DROP +-A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1422 -j logaccept-18 +-A limit-1422 -m limit --limit 1/second -j LOG +-A limit-1422 -j DROP +-A limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1423 -j ACCEPT +-A limit-1423 -m limit --limit 1/second -j LOG +-A limit-1423 -j DROP +-A limit-1424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1424 -j ACCEPT +-A limit-1424 -j DROP +-A limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1425 -j RETURN +-A limit-1425 -j DROP +-A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1426 -j logaccept-19 +-A limit-1426 -j DROP +-A limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1427 -j ACCEPT +-A limit-1427 -j DROP +-A limit-1428 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1428 -j ACCEPT +-A limit-1428 -j DROP +-A limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1429 -j RETURN +-A limit-1429 -j DROP +-A limit-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1430 -j logaccept-20 +-A limit-1430 -j DROP +-A limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1431 -j ACCEPT +-A limit-1431 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-146 -m limit --limit 1/second -j LOG +-A limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 +-A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-150 -j ACCEPT +-A limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-152 -m limit --limit 1/second -j LOG +-A limit-152 -j ACCEPT +-A limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-153 -m limit --limit 1/second -j LOG +-A limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-154 -j ACCEPT +-A limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-158 -m limit --limit 1/second -j LOG +-A limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 +-A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-162 -j ACCEPT +-A limit-163 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-164 -m limit --limit 1/second -j LOG +-A limit-164 -j ACCEPT +-A limit-165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-165 -m limit --limit 1/second -j LOG +-A limit-166 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-166 -j ACCEPT +-A limit-167 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-60 +-A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 +-A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --set +-A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 +-A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 +-A limit-170 -m limit --limit 1/second -j LOG +-A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 +-A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 +-A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 +-A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --set +-A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 +-A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 +-A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 +-A limit-176 -m limit --limit 1/second -j LOG +-A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 +-A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 +-A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 +-A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-18 +-A limit-18 -j ACCEPT +-A limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-72 +-A limit-180 -j ACCEPT +-A limit-181 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 +-A limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 +-A limit-182 -m limit --limit 1/second -j LOG +-A limit-182 -j ACCEPT +-A limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 +-A limit-183 -m limit --limit 1/second -j LOG +-A limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 +-A limit-184 -j ACCEPT +-A limit-185 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 +-A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-78 +-A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 +-A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 +-A limit-188 -m limit --limit 1/second -j LOG +-A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 +-A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 +-A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 +-A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-84 +-A limit-192 -j ACCEPT +-A limit-193 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 +-A limit-194 -m limit --limit 1/second -j LOG +-A limit-194 -j ACCEPT +-A limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 +-A limit-195 -m limit --limit 1/second -j LOG +-A limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 +-A limit-196 -j ACCEPT +-A limit-197 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-90 +-A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 +-A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 +-A limit-2 -m limit --limit 1/second -j LOG +-A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20 +-A limit-20 -m limit --limit 1/second -j LOG +-A limit-20 -j ACCEPT +-A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 +-A limit-200 -m limit --limit 1/second -j LOG +-A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 +-A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 +-A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 +-A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-96 +-A limit-204 -j ACCEPT +-A limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 +-A limit-206 -m limit --limit 1/second -j LOG +-A limit-206 -j ACCEPT +-A limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 +-A limit-207 -m limit --limit 1/second -j LOG +-A limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 +-A limit-208 -j ACCEPT +-A limit-209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-21 +-A limit-21 -m limit --limit 1/second -j LOG +-A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-102 +-A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 +-A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 +-A limit-212 -m limit --limit 1/second -j LOG +-A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 +-A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 +-A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 +-A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-108 +-A limit-216 -j ACCEPT +-A limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 +-A limit-218 -m limit --limit 1/second -j LOG +-A limit-218 -j ACCEPT +-A limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 +-A limit-219 -m limit --limit 1/second -j LOG +-A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-22 +-A limit-22 -j ACCEPT +-A limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 +-A limit-220 -j ACCEPT +-A limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 +-A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set +-A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-224 -m limit --limit 1/second -j LOG +-A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set +-A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-23 +-A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-230 -m limit --limit 1/second -j LOG +-A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-234 -j ACCEPT +-A limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-236 -m limit --limit 1/second -j LOG +-A limit-236 -j ACCEPT +-A limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-237 -m limit --limit 1/second -j LOG +-A limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-238 -j ACCEPT +-A limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-242 -m limit --limit 1/second -j LOG +-A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-246 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-246 -j ACCEPT +-A limit-247 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m limit --limit 1/second -j LOG +-A limit-248 -j ACCEPT +-A limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-249 -m limit --limit 1/second -j LOG +-A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 +-A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-250 -j ACCEPT +-A limit-251 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-254 -m limit --limit 1/second -j LOG +-A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-258 -j ACCEPT +-A limit-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 +-A limit-26 -m limit --limit 1/second -j LOG +-A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-260 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-260 -m limit --limit 1/second -j LOG +-A limit-260 -j ACCEPT +-A limit-261 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-261 -m limit --limit 1/second -j LOG +-A limit-262 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-262 -j ACCEPT +-A limit-263 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-266 -m limit --limit 1/second -j LOG +-A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 +-A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-270 -j ACCEPT +-A limit-271 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-272 -m limit --limit 1/second -j LOG +-A limit-272 -j ACCEPT +-A limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-273 -m limit --limit 1/second -j LOG +-A limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-274 -j ACCEPT +-A limit-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --set +-A limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-278 -m limit --limit 1/second -j LOG +-A limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 +-A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set +-A limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-284 -m limit --limit 1/second -j LOG +-A limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-288 -j ACCEPT +-A limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 +-A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-290 -m limit --limit 1/second -j LOG +-A limit-290 -j ACCEPT +-A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-291 -m limit --limit 1/second -j LOG +-A limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-292 -j ACCEPT +-A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-296 -m limit --limit 1/second -j LOG +-A limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 +-A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-30 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-30 +-A limit-30 -j ACCEPT +-A limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-300 -j ACCEPT +-A limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-302 -m limit --limit 1/second -j LOG +-A limit-302 -j ACCEPT +-A limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-303 -m limit --limit 1/second -j LOG +-A limit-304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-304 -j ACCEPT +-A limit-305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-308 -m limit --limit 1/second -j LOG +-A limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-31 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 +-A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-312 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-312 -j ACCEPT +-A limit-313 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-314 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-314 -m limit --limit 1/second -j LOG +-A limit-314 -j ACCEPT +-A limit-315 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-315 -m limit --limit 1/second -j LOG +-A limit-316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-316 -j ACCEPT +-A limit-317 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 +-A limit-32 -m limit --limit 1/second -j LOG +-A limit-32 -j ACCEPT +-A limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-320 -m limit --limit 1/second -j LOG +-A limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-324 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-324 -j ACCEPT +-A limit-325 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-326 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-326 -m limit --limit 1/second -j LOG +-A limit-326 -j ACCEPT +-A limit-327 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-327 -m limit --limit 1/second -j LOG +-A limit-328 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-328 -j ACCEPT +-A limit-329 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 +-A limit-33 -m limit --limit 1/second -j LOG +-A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-330 -j ACCEPT +-A limit-330 -m limit --limit 1/second -j LOG +-A limit-330 -j DROP +-A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-331 -j RETURN +-A limit-331 -m limit --limit 1/second -j LOG +-A limit-331 -j DROP +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-0 +-A limit-332 -m limit --limit 1/second -j LOG +-A limit-332 -j DROP +-A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-333 -j ACCEPT +-A limit-333 -m limit --limit 1/second -j LOG +-A limit-333 -j DROP +-A limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-334 -j ACCEPT +-A limit-334 -m limit --limit 1/second -j LOG +-A limit-334 -j DROP +-A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-335 -j RETURN +-A limit-335 -m limit --limit 1/second -j LOG +-A limit-335 -j DROP +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-1 +-A limit-336 -m limit --limit 1/second -j LOG +-A limit-336 -j DROP +-A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-337 -j ACCEPT +-A limit-337 -m limit --limit 1/second -j LOG +-A limit-337 -j DROP +-A limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-338 -j ACCEPT +-A limit-338 -j DROP +-A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-339 -j RETURN +-A limit-339 -j DROP +-A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 +-A limit-34 -j ACCEPT +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-2 +-A limit-340 -j DROP +-A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-341 -j ACCEPT +-A limit-341 -j DROP +-A limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-342 -j ACCEPT +-A limit-342 -j DROP +-A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-343 -j RETURN +-A limit-343 -j DROP +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-3 +-A limit-344 -j DROP +-A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-345 -j ACCEPT +-A limit-345 -j DROP +-A limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-346 -j ACCEPT +-A limit-346 -m limit --limit 1/second -j LOG +-A limit-346 -j DROP +-A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-347 -j RETURN +-A limit-347 -m limit --limit 1/second -j LOG +-A limit-347 -j DROP +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-4 +-A limit-348 -m limit --limit 1/second -j LOG +-A limit-348 -j DROP +-A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-349 -j ACCEPT +-A limit-349 -m limit --limit 1/second -j LOG +-A limit-349 -j DROP +-A limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 +-A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-350 -j ACCEPT +-A limit-350 -j DROP +-A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-351 -j RETURN +-A limit-351 -j DROP +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-5 +-A limit-352 -j DROP +-A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-353 -j ACCEPT +-A limit-353 -j DROP +-A limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-354 -j ACCEPT +-A limit-354 -j DROP +-A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-355 -j RETURN +-A limit-355 -j DROP +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-6 +-A limit-356 -j DROP +-A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-357 -j ACCEPT +-A limit-357 -j DROP +-A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-114 +-A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set +-A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-36 +-A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-360 -m limit --limit 1/second -j LOG +-A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set +-A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set +-A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-366 -m limit --limit 1/second -j LOG +-A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set +-A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 +-A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-372 -m limit --limit 1/second -j LOG +-A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-376 -j ACCEPT +-A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-378 -m limit --limit 1/second -j LOG +-A limit-378 -j ACCEPT +-A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-379 -m limit --limit 1/second -j LOG +-A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-38 -m limit --limit 1/second -j LOG +-A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-380 -j ACCEPT +-A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-384 -m limit --limit 1/second -j LOG +-A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-388 -j ACCEPT +-A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 +-A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A limit-390 -m limit --limit 1/second -j LOG +-A limit-390 -j ACCEPT +-A limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-391 -m limit --limit 1/second -j LOG +-A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 +-A limit-392 -j ACCEPT +-A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-150 +-A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 +-A limit-396 -m limit --limit 1/second -j LOG +-A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 +-A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-400 -j ACCEPT +-A limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 +-A limit-402 -m limit --limit 1/second -j LOG +-A limit-402 -j ACCEPT +-A limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-403 -m limit --limit 1/second -j LOG +-A limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 +-A limit-404 -j ACCEPT +-A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-162 +-A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-408 -m limit --limit 1/second -j LOG +-A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 +-A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-412 -j ACCEPT +-A limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 +-A limit-414 -m limit --limit 1/second -j LOG +-A limit-414 -j ACCEPT +-A limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-415 -m limit --limit 1/second -j LOG +-A limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-416 -j ACCEPT +-A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set +-A limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-42 -j ACCEPT +-A limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-420 -m limit --limit 1/second -j LOG +-A limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --set +-A limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-426 -m limit --limit 1/second -j LOG +-A limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-43 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-430 -j ACCEPT +-A limit-432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-432 -m limit --limit 1/second -j LOG +-A limit-432 -j ACCEPT +-A limit-433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-433 -m limit --limit 1/second -j LOG +-A limit-434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-434 -j ACCEPT +-A limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-438 -m limit --limit 1/second -j LOG +-A limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 +-A limit-44 -m limit --limit 1/second -j LOG +-A limit-44 -j ACCEPT +-A limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-442 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-442 -j ACCEPT +-A limit-444 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-444 -m limit --limit 1/second -j LOG +-A limit-444 -j ACCEPT +-A limit-445 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-445 -m limit --limit 1/second -j LOG +-A limit-446 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-446 -j ACCEPT +-A limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 +-A limit-45 -m limit --limit 1/second -j LOG +-A limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-450 -m limit --limit 1/second -j LOG +-A limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-454 -j ACCEPT +-A limit-456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-456 -m limit --limit 1/second -j LOG +-A limit-456 -j ACCEPT +-A limit-457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-457 -m limit --limit 1/second -j LOG +-A limit-458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-458 -j ACCEPT +-A limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-46 -j ACCEPT +-A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-462 -m limit --limit 1/second -j LOG +-A limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-466 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-466 -j ACCEPT +-A limit-468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-468 -m limit --limit 1/second -j LOG +-A limit-468 -j ACCEPT +-A limit-469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-469 -m limit --limit 1/second -j LOG +-A limit-47 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-470 -j ACCEPT +-A limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --set +-A limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-474 -m limit --limit 1/second -j LOG +-A limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --set +-A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-48 +-A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-480 -m limit --limit 1/second -j LOG +-A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-484 -j ACCEPT +-A limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-486 -m limit --limit 1/second -j LOG +-A limit-486 -j ACCEPT +-A limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-487 -m limit --limit 1/second -j LOG +-A limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-488 -j ACCEPT +-A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-492 -m limit --limit 1/second -j LOG +-A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-496 -j ACCEPT +-A limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-498 -m limit --limit 1/second -j LOG +-A limit-498 -j ACCEPT +-A limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-499 -m limit --limit 1/second -j LOG +-A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 +-A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set +-A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-50 -m limit --limit 1/second -j LOG +-A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-500 -j ACCEPT +-A limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-504 -m limit --limit 1/second -j LOG +-A limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-508 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-508 -j ACCEPT +-A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 +-A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-510 -m limit --limit 1/second -j LOG +-A limit-510 -j ACCEPT +-A limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-511 -m limit --limit 1/second -j LOG +-A limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-512 -j ACCEPT +-A limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-516 -m limit --limit 1/second -j LOG +-A limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-520 -j ACCEPT +-A limit-522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-522 -m limit --limit 1/second -j LOG +-A limit-522 -j ACCEPT +-A limit-523 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-523 -m limit --limit 1/second -j LOG +-A limit-524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-524 -j ACCEPT +-A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-174 +-A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 +-A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set +-A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 +-A limit-528 -m limit --limit 1/second -j LOG +-A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 +-A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 +-A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 +-A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set +-A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 +-A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 +-A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 +-A limit-534 -m limit --limit 1/second -j LOG +-A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 +-A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 +-A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 +-A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-538 -j ACCEPT +-A limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-54 -j ACCEPT +-A limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 +-A limit-540 -m limit --limit 1/second -j LOG +-A limit-540 -j ACCEPT +-A limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 +-A limit-541 -m limit --limit 1/second -j LOG +-A limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 +-A limit-542 -j ACCEPT +-A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-192 +-A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 +-A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 +-A limit-546 -m limit --limit 1/second -j LOG +-A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 +-A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 +-A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 +-A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-55 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-198 +-A limit-550 -j ACCEPT +-A limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A limit-552 -m limit --limit 1/second -j LOG +-A limit-552 -j ACCEPT +-A limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 +-A limit-553 -m limit --limit 1/second -j LOG +-A limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 +-A limit-554 -j ACCEPT +-A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-204 +-A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 +-A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 +-A limit-558 -m limit --limit 1/second -j LOG +-A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 +-A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 +-A limit-56 -m limit --limit 1/second -j LOG +-A limit-56 -j ACCEPT +-A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 +-A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 +-A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-210 +-A limit-562 -j ACCEPT +-A limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 +-A limit-564 -m limit --limit 1/second -j LOG +-A limit-564 -j ACCEPT +-A limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 +-A limit-565 -m limit --limit 1/second -j LOG +-A limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 +-A limit-566 -j ACCEPT +-A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-216 +-A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 +-A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-57 -m limit --limit 1/second -j LOG +-A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 +-A limit-570 -m limit --limit 1/second -j LOG +-A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 +-A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 +-A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-574 -j ACCEPT +-A limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 +-A limit-576 -m limit --limit 1/second -j LOG +-A limit-576 -j ACCEPT +-A limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 +-A limit-577 -m limit --limit 1/second -j LOG +-A limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 +-A limit-578 -j ACCEPT +-A limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-58 -j ACCEPT +-A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --set +-A limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-582 -m limit --limit 1/second -j LOG +-A limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --set +-A limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-588 -m limit --limit 1/second -j LOG +-A limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-59 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-592 -j ACCEPT +-A limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-594 -m limit --limit 1/second -j LOG +-A limit-594 -j ACCEPT +-A limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-595 -m limit --limit 1/second -j LOG +-A limit-596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-596 -j ACCEPT +-A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 +-A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-600 -m limit --limit 1/second -j LOG +-A limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-604 -j ACCEPT +-A limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-606 -m limit --limit 1/second -j LOG +-A limit-606 -j ACCEPT +-A limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-607 -m limit --limit 1/second -j LOG +-A limit-608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-608 -j ACCEPT +-A limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --set +-A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-612 -m limit --limit 1/second -j LOG +-A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-616 -j ACCEPT +-A limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-618 -m limit --limit 1/second -j LOG +-A limit-618 -j ACCEPT +-A limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-619 -m limit --limit 1/second -j LOG +-A limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-62 -m limit --limit 1/second -j LOG +-A limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-620 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-620 -j ACCEPT +-A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-624 -m limit --limit 1/second -j LOG +-A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-628 -j ACCEPT +-A limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-630 -m limit --limit 1/second -j LOG +-A limit-630 -j ACCEPT +-A limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-631 -m limit --limit 1/second -j LOG +-A limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-632 -j ACCEPT +-A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set +-A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-636 -m limit --limit 1/second -j LOG +-A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set +-A limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-642 -m limit --limit 1/second -j LOG +-A limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-646 -j ACCEPT +-A limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-648 -m limit --limit 1/second -j LOG +-A limit-648 -j ACCEPT +-A limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-649 -m limit --limit 1/second -j LOG +-A limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --set +-A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-650 -j ACCEPT +-A limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-654 -m limit --limit 1/second -j LOG +-A limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-658 -j ACCEPT +-A limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-660 -m limit --limit 1/second -j LOG +-A limit-660 -j ACCEPT +-A limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-661 -m limit --limit 1/second -j LOG +-A limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-662 -j ACCEPT +-A limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-666 -m limit --limit 1/second -j LOG +-A limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-670 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-670 -j ACCEPT +-A limit-672 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-672 -m limit --limit 1/second -j LOG +-A limit-672 -j ACCEPT +-A limit-673 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-673 -m limit --limit 1/second -j LOG +-A limit-674 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-674 -j ACCEPT +-A limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-678 -m limit --limit 1/second -j LOG +-A limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-68 -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-682 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-682 -j ACCEPT +-A limit-684 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-684 -m limit --limit 1/second -j LOG +-A limit-684 -j ACCEPT +-A limit-685 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-685 -m limit --limit 1/second -j LOG +-A limit-686 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-686 -j ACCEPT +-A limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-688 -j ACCEPT +-A limit-688 -m limit --limit 1/second -j LOG +-A limit-688 -j DROP +-A limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-689 -j RETURN +-A limit-689 -m limit --limit 1/second -j LOG +-A limit-689 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j logaccept-7 +-A limit-690 -m limit --limit 1/second -j LOG +-A limit-690 -j DROP +-A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-691 -j ACCEPT +-A limit-691 -m limit --limit 1/second -j LOG +-A limit-691 -j DROP +-A limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-692 -j ACCEPT +-A limit-692 -m limit --limit 1/second -j LOG +-A limit-692 -j DROP +-A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-693 -j RETURN +-A limit-693 -m limit --limit 1/second -j LOG +-A limit-693 -j DROP +-A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j logaccept-8 +-A limit-694 -m limit --limit 1/second -j LOG +-A limit-694 -j DROP +-A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-695 -j ACCEPT +-A limit-695 -m limit --limit 1/second -j LOG +-A limit-695 -j DROP +-A limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-696 -j ACCEPT +-A limit-696 -j DROP +-A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-697 -j RETURN +-A limit-697 -j DROP +-A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j logaccept-9 +-A limit-698 -j DROP +-A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-699 -j ACCEPT +-A limit-699 -j DROP +-A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 +-A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set +-A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-700 -j ACCEPT +-A limit-700 -j DROP +-A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-701 -j RETURN +-A limit-701 -j DROP +-A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j logaccept-10 +-A limit-702 -j DROP +-A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-703 -j ACCEPT +-A limit-703 -j DROP +-A limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-704 -j ACCEPT +-A limit-704 -m limit --limit 1/second -j LOG +-A limit-704 -j DROP +-A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-705 -j RETURN +-A limit-705 -m limit --limit 1/second -j LOG +-A limit-705 -j DROP +-A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j logaccept-11 +-A limit-706 -m limit --limit 1/second -j LOG +-A limit-706 -j DROP +-A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-707 -j ACCEPT +-A limit-707 -m limit --limit 1/second -j LOG +-A limit-707 -j DROP +-A limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-708 -j ACCEPT +-A limit-708 -j DROP +-A limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-709 -j RETURN +-A limit-709 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j logaccept-12 +-A limit-710 -j DROP +-A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-711 -j ACCEPT +-A limit-711 -j DROP +-A limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-712 -j ACCEPT +-A limit-712 -j DROP +-A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-713 -j RETURN +-A limit-713 -j DROP +-A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j logaccept-13 +-A limit-714 -j DROP +-A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-715 -j ACCEPT +-A limit-715 -j DROP +-A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-228 +-A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set +-A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set +-A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set +-A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-72 -j ACCEPT +-A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set +-A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set +-A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set +-A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set +-A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 +-A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set +-A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 +-A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set +-A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set +-A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 +-A limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 +-A limit-737 -m limit --limit 1/second -j LOG +-A limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-739 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 +-A limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-74 -m limit --limit 1/second -j LOG +-A limit-74 -j ACCEPT +-A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-252 +-A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 +-A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 +-A limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 +-A limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 +-A limit-749 -m limit --limit 1/second -j LOG +-A limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-75 -m limit --limit 1/second -j LOG +-A limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-264 +-A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 +-A limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-76 -j ACCEPT +-A limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 +-A limit-761 -m limit --limit 1/second -j LOG +-A limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-276 +-A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 +-A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 +-A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 +-A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 +-A limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 +-A limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 +-A limit-773 -m limit --limit 1/second -j LOG +-A limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 +-A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --set +-A limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --set +-A limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --set +-A limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --set +-A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --set +-A limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-788 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-789 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-791 -m limit --limit 1/second -j LOG +-A limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 +-A limit-8 -m limit --limit 1/second -j LOG +-A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m limit --limit 1/second -j LOG +-A limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-800 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-801 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-802 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-803 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-803 -m limit --limit 1/second -j LOG +-A limit-804 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-805 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-813 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-815 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-815 -m limit --limit 1/second -j LOG +-A limit-816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-817 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-824 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-825 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-826 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-827 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-827 -m limit --limit 1/second -j LOG +-A limit-828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-829 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --set +-A limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --set +-A limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --set +-A limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --set +-A limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --set +-A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-84 -j ACCEPT +-A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-845 -m limit --limit 1/second -j LOG +-A limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-847 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-857 -m limit --limit 1/second -j LOG +-A limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-86 -m limit --limit 1/second -j LOG +-A limit-86 -j ACCEPT +-A limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-866 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-867 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-868 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-869 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-869 -m limit --limit 1/second -j LOG +-A limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-87 -m limit --limit 1/second -j LOG +-A limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-879 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-88 -j ACCEPT +-A limit-880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-881 -m limit --limit 1/second -j LOG +-A limit-882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-883 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-288 +-A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --set +-A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --set +-A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --set +-A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 +-A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --set +-A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --set +-A limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-897 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 +-A limit-899 -m limit --limit 1/second -j LOG +-A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 +-A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-901 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-306 +-A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 +-A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-909 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 +-A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 +-A limit-911 -m limit --limit 1/second -j LOG +-A limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-913 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-318 +-A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-92 -m limit --limit 1/second -j LOG +-A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-921 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 +-A limit-923 -m limit --limit 1/second -j LOG +-A limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-925 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 +-A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-330 +-A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-933 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 +-A limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 +-A limit-935 -m limit --limit 1/second -j LOG +-A limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-937 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 +-A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --set +-A limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --set +-A limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --set +-A limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --set +-A limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --set +-A limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-950 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-951 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-952 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-953 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-953 -m limit --limit 1/second -j LOG +-A limit-954 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-955 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-96 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-96 -j ACCEPT +-A limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-962 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-963 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-964 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-965 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-965 -m limit --limit 1/second -j LOG +-A limit-966 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-967 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-97 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-974 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-975 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-976 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-977 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-977 -m limit --limit 1/second -j LOG +-A limit-978 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-979 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-98 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-98 -m limit --limit 1/second -j LOG +-A limit-98 -j ACCEPT +-A limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-987 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-989 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-989 -m limit --limit 1/second -j LOG +-A limit-99 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-99 -m limit --limit 1/second -j LOG +-A limit-990 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-991 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set +-A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set +-A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set +-A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --set +-A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --set +-A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logaccept-1 -m limit --limit 1/second -j LOG +-A logaccept-1 -j ACCEPT +-A logaccept-10 -m limit --limit 1/second -j LOG +-A logaccept-10 -j ACCEPT +-A logaccept-11 -m limit --limit 1/second -j LOG +-A logaccept-11 -j ACCEPT +-A logaccept-12 -m limit --limit 1/second -j LOG +-A logaccept-12 -j ACCEPT +-A logaccept-13 -m limit --limit 1/second -j LOG +-A logaccept-13 -j ACCEPT +-A logaccept-14 -m limit --limit 1/second -j LOG +-A logaccept-14 -j ACCEPT +-A logaccept-15 -m limit --limit 1/second -j LOG +-A logaccept-15 -j ACCEPT +-A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j ACCEPT +-A logaccept-17 -m limit --limit 1/second -j LOG +-A logaccept-17 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-19 -m limit --limit 1/second -j LOG +-A logaccept-19 -j ACCEPT +-A logaccept-2 -m limit --limit 1/second -j LOG +-A logaccept-2 -j ACCEPT +-A logaccept-20 -m limit --limit 1/second -j LOG +-A logaccept-20 -j ACCEPT +-A logaccept-21 -m limit --limit 1/second -j LOG +-A logaccept-21 -j ACCEPT +-A logaccept-3 -m limit --limit 1/second -j LOG +-A logaccept-3 -j ACCEPT +-A logaccept-4 -m limit --limit 1/second -j LOG +-A logaccept-4 -j ACCEPT +-A logaccept-5 -m limit --limit 1/second -j LOG +-A logaccept-5 -j ACCEPT +-A logaccept-6 -m limit --limit 1/second -j LOG +-A logaccept-6 -j ACCEPT +-A logaccept-7 -m limit --limit 1/second -j LOG +-A logaccept-7 -j ACCEPT +-A logaccept-8 -m limit --limit 1/second -j LOG +-A logaccept-8 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG +-A logaccept-9 -j ACCEPT +-A logaccept-final-0 -m limit --limit 1/second -j LOG +-A logaccept-final-0 -j ACCEPT +-A logaccept-final-1 -m limit --limit 1/second -j LOG +-A logaccept-final-1 -j ACCEPT +-A logaccept-final-10 -m limit --limit 1/second -j LOG +-A logaccept-final-10 -j ACCEPT +-A logaccept-final-11 -m limit --limit 1/second -j LOG +-A logaccept-final-11 -j ACCEPT +-A logaccept-final-12 -m limit --limit 1/second -j LOG +-A logaccept-final-12 -j ACCEPT +-A logaccept-final-13 -m limit --limit 1/second -j LOG +-A logaccept-final-13 -j ACCEPT +-A logaccept-final-14 -m limit --limit 1/second -j LOG +-A logaccept-final-14 -j ACCEPT +-A logaccept-final-15 -m limit --limit 1/second -j LOG +-A logaccept-final-15 -j ACCEPT +-A logaccept-final-16 -m limit --limit 1/second -j LOG +-A logaccept-final-16 -j ACCEPT +-A logaccept-final-17 -m limit --limit 1/second -j LOG +-A logaccept-final-17 -j ACCEPT +-A logaccept-final-18 -m limit --limit 1/second -j LOG +-A logaccept-final-18 -j ACCEPT +-A logaccept-final-19 -m limit --limit 1/second -j LOG +-A logaccept-final-19 -j ACCEPT +-A logaccept-final-2 -m limit --limit 1/second -j LOG +-A logaccept-final-2 -j ACCEPT +-A logaccept-final-20 -m limit --limit 1/second -j LOG +-A logaccept-final-20 -j ACCEPT +-A logaccept-final-21 -m limit --limit 1/second -j LOG +-A logaccept-final-21 -j ACCEPT +-A logaccept-final-22 -m limit --limit 1/second -j LOG +-A logaccept-final-22 -j ACCEPT +-A logaccept-final-23 -m limit --limit 1/second -j LOG +-A logaccept-final-23 -j ACCEPT +-A logaccept-final-24 -m limit --limit 1/second -j LOG +-A logaccept-final-24 -j ACCEPT +-A logaccept-final-25 -m limit --limit 1/second -j LOG +-A logaccept-final-25 -j ACCEPT +-A logaccept-final-26 -m limit --limit 1/second -j LOG +-A logaccept-final-26 -j ACCEPT +-A logaccept-final-27 -m limit --limit 1/second -j LOG +-A logaccept-final-27 -j ACCEPT +-A logaccept-final-28 -m limit --limit 1/second -j LOG +-A logaccept-final-28 -j ACCEPT +-A logaccept-final-29 -m limit --limit 1/second -j LOG +-A logaccept-final-29 -j ACCEPT +-A logaccept-final-3 -m limit --limit 1/second -j LOG +-A logaccept-final-3 -j ACCEPT +-A logaccept-final-30 -m limit --limit 1/second -j LOG +-A logaccept-final-30 -j ACCEPT +-A logaccept-final-31 -m limit --limit 1/second -j LOG +-A logaccept-final-31 -j ACCEPT +-A logaccept-final-32 -m limit --limit 1/second -j LOG +-A logaccept-final-32 -j ACCEPT +-A logaccept-final-33 -m limit --limit 1/second -j LOG +-A logaccept-final-33 -j ACCEPT +-A logaccept-final-34 -m limit --limit 1/second -j LOG +-A logaccept-final-34 -j ACCEPT +-A logaccept-final-35 -m limit --limit 1/second -j LOG +-A logaccept-final-35 -j ACCEPT +-A logaccept-final-36 -m limit --limit 1/second -j LOG +-A logaccept-final-36 -j ACCEPT +-A logaccept-final-37 -m limit --limit 1/second -j LOG +-A logaccept-final-37 -j ACCEPT +-A logaccept-final-38 -m limit --limit 1/second -j LOG +-A logaccept-final-38 -j ACCEPT +-A logaccept-final-39 -m limit --limit 1/second -j LOG +-A logaccept-final-39 -j ACCEPT +-A logaccept-final-4 -m limit --limit 1/second -j LOG +-A logaccept-final-4 -j ACCEPT +-A logaccept-final-40 -m limit --limit 1/second -j LOG +-A logaccept-final-40 -j ACCEPT +-A logaccept-final-41 -m limit --limit 1/second -j LOG +-A logaccept-final-41 -j ACCEPT +-A logaccept-final-42 -m limit --limit 1/second -j LOG +-A logaccept-final-42 -j ACCEPT +-A logaccept-final-43 -m limit --limit 1/second -j LOG +-A logaccept-final-43 -j ACCEPT +-A logaccept-final-44 -m limit --limit 1/second -j LOG +-A logaccept-final-44 -j ACCEPT +-A logaccept-final-45 -m limit --limit 1/second -j LOG +-A logaccept-final-45 -j ACCEPT +-A logaccept-final-46 -m limit --limit 1/second -j LOG +-A logaccept-final-46 -j ACCEPT +-A logaccept-final-47 -m limit --limit 1/second -j LOG +-A logaccept-final-47 -j ACCEPT +-A logaccept-final-48 -m limit --limit 1/second -j LOG +-A logaccept-final-48 -j ACCEPT +-A logaccept-final-49 -m limit --limit 1/second -j LOG +-A logaccept-final-49 -j ACCEPT +-A logaccept-final-5 -m limit --limit 1/second -j LOG +-A logaccept-final-5 -j ACCEPT +-A logaccept-final-50 -m limit --limit 1/second -j LOG +-A logaccept-final-50 -j ACCEPT +-A logaccept-final-51 -m limit --limit 1/second -j LOG +-A logaccept-final-51 -j ACCEPT +-A logaccept-final-52 -m limit --limit 1/second -j LOG +-A logaccept-final-52 -j ACCEPT +-A logaccept-final-53 -m limit --limit 1/second -j LOG +-A logaccept-final-53 -j ACCEPT +-A logaccept-final-54 -m limit --limit 1/second -j LOG +-A logaccept-final-54 -j ACCEPT +-A logaccept-final-55 -m limit --limit 1/second -j LOG +-A logaccept-final-55 -j ACCEPT +-A logaccept-final-56 -m limit --limit 1/second -j LOG +-A logaccept-final-56 -j ACCEPT +-A logaccept-final-57 -m limit --limit 1/second -j LOG +-A logaccept-final-57 -j ACCEPT +-A logaccept-final-58 -m limit --limit 1/second -j LOG +-A logaccept-final-58 -j ACCEPT +-A logaccept-final-59 -m limit --limit 1/second -j LOG +-A logaccept-final-59 -j ACCEPT +-A logaccept-final-6 -m limit --limit 1/second -j LOG +-A logaccept-final-6 -j ACCEPT +-A logaccept-final-60 -m limit --limit 1/second -j LOG +-A logaccept-final-60 -j ACCEPT +-A logaccept-final-61 -m limit --limit 1/second -j LOG +-A logaccept-final-61 -j ACCEPT +-A logaccept-final-7 -m limit --limit 1/second -j LOG +-A logaccept-final-7 -j ACCEPT +-A logaccept-final-8 -m limit --limit 1/second -j LOG +-A logaccept-final-8 -j ACCEPT +-A logaccept-final-9 -m limit --limit 1/second -j LOG +-A logaccept-final-9 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logdrop-10 -m limit --limit 1/second -j LOG +-A logdrop-10 -j DROP +-A logdrop-100 -m limit --limit 1/second -j LOG +-A logdrop-100 -j DROP +-A logdrop-101 -m limit --limit 1/second -j LOG +-A logdrop-101 -j DROP +-A logdrop-102 -m limit --limit 1/second -j LOG +-A logdrop-102 -j DROP +-A logdrop-103 -m limit --limit 1/second -j LOG +-A logdrop-103 -j DROP +-A logdrop-104 -m limit --limit 1/second -j LOG +-A logdrop-104 -j DROP +-A logdrop-105 -m limit --limit 1/second -j LOG +-A logdrop-105 -j DROP +-A logdrop-106 -m limit --limit 1/second -j LOG +-A logdrop-106 -j DROP +-A logdrop-107 -m limit --limit 1/second -j LOG +-A logdrop-107 -j DROP +-A logdrop-108 -m limit --limit 1/second -j LOG +-A logdrop-108 -j DROP +-A logdrop-109 -m limit --limit 1/second -j LOG +-A logdrop-109 -j DROP +-A logdrop-11 -m limit --limit 1/second -j LOG +-A logdrop-11 -j DROP +-A logdrop-110 -m limit --limit 1/second -j LOG +-A logdrop-110 -j DROP +-A logdrop-111 -m limit --limit 1/second -j LOG +-A logdrop-111 -j DROP +-A logdrop-112 -m limit --limit 1/second -j LOG +-A logdrop-112 -j DROP +-A logdrop-113 -m limit --limit 1/second -j LOG +-A logdrop-113 -j DROP +-A logdrop-114 -m limit --limit 1/second -j LOG +-A logdrop-114 -j DROP +-A logdrop-115 -m limit --limit 1/second -j LOG +-A logdrop-115 -j DROP +-A logdrop-116 -m limit --limit 1/second -j LOG +-A logdrop-116 -j DROP +-A logdrop-117 -m limit --limit 1/second -j LOG +-A logdrop-117 -j DROP +-A logdrop-118 -m limit --limit 1/second -j LOG +-A logdrop-118 -j DROP +-A logdrop-119 -m limit --limit 1/second -j LOG +-A logdrop-119 -j DROP +-A logdrop-12 -m limit --limit 1/second -j LOG +-A logdrop-12 -j DROP +-A logdrop-120 -m limit --limit 1/second -j LOG +-A logdrop-120 -j DROP +-A logdrop-121 -m limit --limit 1/second -j LOG +-A logdrop-121 -j DROP +-A logdrop-122 -m limit --limit 1/second -j LOG +-A logdrop-122 -j DROP +-A logdrop-123 -m limit --limit 1/second -j LOG +-A logdrop-123 -j DROP +-A logdrop-124 -m limit --limit 1/second -j LOG +-A logdrop-124 -j DROP +-A logdrop-125 -m limit --limit 1/second -j LOG +-A logdrop-125 -j DROP +-A logdrop-126 -m limit --limit 1/second -j LOG +-A logdrop-126 -j DROP +-A logdrop-127 -m limit --limit 1/second -j LOG +-A logdrop-127 -j DROP +-A logdrop-128 -m limit --limit 1/second -j LOG +-A logdrop-128 -j DROP +-A logdrop-129 -m limit --limit 1/second -j LOG +-A logdrop-129 -j DROP +-A logdrop-13 -m limit --limit 1/second -j LOG +-A logdrop-13 -j DROP +-A logdrop-130 -m limit --limit 1/second -j LOG +-A logdrop-130 -j DROP +-A logdrop-131 -m limit --limit 1/second -j LOG +-A logdrop-131 -j DROP +-A logdrop-132 -m limit --limit 1/second -j LOG +-A logdrop-132 -j DROP +-A logdrop-133 -m limit --limit 1/second -j LOG +-A logdrop-133 -j DROP +-A logdrop-134 -m limit --limit 1/second -j LOG +-A logdrop-134 -j DROP +-A logdrop-135 -m limit --limit 1/second -j LOG +-A logdrop-135 -j DROP +-A logdrop-136 -m limit --limit 1/second -j LOG +-A logdrop-136 -j DROP +-A logdrop-137 -m limit --limit 1/second -j LOG +-A logdrop-137 -j DROP +-A logdrop-138 -m limit --limit 1/second -j LOG +-A logdrop-138 -j DROP +-A logdrop-139 -m limit --limit 1/second -j LOG +-A logdrop-139 -j DROP +-A logdrop-14 -m limit --limit 1/second -j LOG +-A logdrop-14 -j DROP +-A logdrop-140 -m limit --limit 1/second -j LOG +-A logdrop-140 -j DROP +-A logdrop-141 -m limit --limit 1/second -j LOG +-A logdrop-141 -j DROP +-A logdrop-142 -m limit --limit 1/second -j LOG +-A logdrop-142 -j DROP +-A logdrop-143 -m limit --limit 1/second -j LOG +-A logdrop-143 -j DROP +-A logdrop-144 -m limit --limit 1/second -j LOG +-A logdrop-144 -j DROP +-A logdrop-145 -m limit --limit 1/second -j LOG +-A logdrop-145 -j DROP +-A logdrop-146 -m limit --limit 1/second -j LOG +-A logdrop-146 -j DROP +-A logdrop-147 -m limit --limit 1/second -j LOG +-A logdrop-147 -j DROP +-A logdrop-148 -m limit --limit 1/second -j LOG +-A logdrop-148 -j DROP +-A logdrop-149 -m limit --limit 1/second -j LOG +-A logdrop-149 -j DROP +-A logdrop-15 -m limit --limit 1/second -j LOG +-A logdrop-15 -j DROP +-A logdrop-150 -m limit --limit 1/second -j LOG +-A logdrop-150 -j DROP +-A logdrop-151 -m limit --limit 1/second -j LOG +-A logdrop-151 -j DROP +-A logdrop-152 -m limit --limit 1/second -j LOG +-A logdrop-152 -j DROP +-A logdrop-153 -m limit --limit 1/second -j LOG +-A logdrop-153 -j DROP +-A logdrop-154 -m limit --limit 1/second -j LOG +-A logdrop-154 -j DROP +-A logdrop-155 -m limit --limit 1/second -j LOG +-A logdrop-155 -j DROP +-A logdrop-156 -m limit --limit 1/second -j LOG +-A logdrop-156 -j DROP +-A logdrop-157 -m limit --limit 1/second -j LOG +-A logdrop-157 -j DROP +-A logdrop-158 -m limit --limit 1/second -j LOG +-A logdrop-158 -j DROP +-A logdrop-159 -m limit --limit 1/second -j LOG +-A logdrop-159 -j DROP +-A logdrop-16 -m limit --limit 1/second -j LOG +-A logdrop-16 -j DROP +-A logdrop-160 -m limit --limit 1/second -j LOG +-A logdrop-160 -j DROP +-A logdrop-161 -m limit --limit 1/second -j LOG +-A logdrop-161 -j DROP +-A logdrop-162 -m limit --limit 1/second -j LOG +-A logdrop-162 -j DROP +-A logdrop-163 -m limit --limit 1/second -j LOG +-A logdrop-163 -j DROP +-A logdrop-164 -m limit --limit 1/second -j LOG +-A logdrop-164 -j DROP +-A logdrop-165 -m limit --limit 1/second -j LOG +-A logdrop-165 -j DROP +-A logdrop-166 -m limit --limit 1/second -j LOG +-A logdrop-166 -j DROP +-A logdrop-167 -m limit --limit 1/second -j LOG +-A logdrop-167 -j DROP +-A logdrop-168 -m limit --limit 1/second -j LOG +-A logdrop-168 -j DROP +-A logdrop-169 -m limit --limit 1/second -j LOG +-A logdrop-169 -j DROP +-A logdrop-17 -m limit --limit 1/second -j LOG +-A logdrop-17 -j DROP +-A logdrop-170 -m limit --limit 1/second -j LOG +-A logdrop-170 -j DROP +-A logdrop-171 -m limit --limit 1/second -j LOG +-A logdrop-171 -j DROP +-A logdrop-172 -m limit --limit 1/second -j LOG +-A logdrop-172 -j DROP +-A logdrop-173 -m limit --limit 1/second -j LOG +-A logdrop-173 -j DROP +-A logdrop-174 -m limit --limit 1/second -j LOG +-A logdrop-174 -j DROP +-A logdrop-175 -m limit --limit 1/second -j LOG +-A logdrop-175 -j DROP +-A logdrop-176 -m limit --limit 1/second -j LOG +-A logdrop-176 -j DROP +-A logdrop-177 -m limit --limit 1/second -j LOG +-A logdrop-177 -j DROP +-A logdrop-178 -m limit --limit 1/second -j LOG +-A logdrop-178 -j DROP +-A logdrop-179 -m limit --limit 1/second -j LOG +-A logdrop-179 -j DROP +-A logdrop-18 -m limit --limit 1/second -j LOG +-A logdrop-18 -j DROP +-A logdrop-180 -m limit --limit 1/second -j LOG +-A logdrop-180 -j DROP +-A logdrop-181 -m limit --limit 1/second -j LOG +-A logdrop-181 -j DROP +-A logdrop-182 -m limit --limit 1/second -j LOG +-A logdrop-182 -j DROP +-A logdrop-183 -m limit --limit 1/second -j LOG +-A logdrop-183 -j DROP +-A logdrop-184 -m limit --limit 1/second -j LOG +-A logdrop-184 -j DROP +-A logdrop-185 -m limit --limit 1/second -j LOG +-A logdrop-185 -j DROP +-A logdrop-186 -m limit --limit 1/second -j LOG +-A logdrop-186 -j DROP +-A logdrop-187 -m limit --limit 1/second -j LOG +-A logdrop-187 -j DROP +-A logdrop-188 -m limit --limit 1/second -j LOG +-A logdrop-188 -j DROP +-A logdrop-189 -m limit --limit 1/second -j LOG +-A logdrop-189 -j DROP +-A logdrop-19 -m limit --limit 1/second -j LOG +-A logdrop-19 -j DROP +-A logdrop-190 -m limit --limit 1/second -j LOG +-A logdrop-190 -j DROP +-A logdrop-191 -m limit --limit 1/second -j LOG +-A logdrop-191 -j DROP +-A logdrop-192 -m limit --limit 1/second -j LOG +-A logdrop-192 -j DROP +-A logdrop-193 -m limit --limit 1/second -j LOG +-A logdrop-193 -j DROP +-A logdrop-194 -m limit --limit 1/second -j LOG +-A logdrop-194 -j DROP +-A logdrop-195 -m limit --limit 1/second -j LOG +-A logdrop-195 -j DROP +-A logdrop-196 -m limit --limit 1/second -j LOG +-A logdrop-196 -j DROP +-A logdrop-197 -m limit --limit 1/second -j LOG +-A logdrop-197 -j DROP +-A logdrop-198 -m limit --limit 1/second -j LOG +-A logdrop-198 -j DROP +-A logdrop-199 -m limit --limit 1/second -j LOG +-A logdrop-199 -j DROP +-A logdrop-2 -m limit --limit 1/second -j LOG +-A logdrop-2 -j DROP +-A logdrop-20 -m limit --limit 1/second -j LOG +-A logdrop-20 -j DROP +-A logdrop-200 -m limit --limit 1/second -j LOG +-A logdrop-200 -j DROP +-A logdrop-201 -m limit --limit 1/second -j LOG +-A logdrop-201 -j DROP +-A logdrop-202 -m limit --limit 1/second -j LOG +-A logdrop-202 -j DROP +-A logdrop-203 -m limit --limit 1/second -j LOG +-A logdrop-203 -j DROP +-A logdrop-204 -m limit --limit 1/second -j LOG +-A logdrop-204 -j DROP +-A logdrop-205 -m limit --limit 1/second -j LOG +-A logdrop-205 -j DROP +-A logdrop-206 -m limit --limit 1/second -j LOG +-A logdrop-206 -j DROP +-A logdrop-207 -m limit --limit 1/second -j LOG +-A logdrop-207 -j DROP +-A logdrop-208 -m limit --limit 1/second -j LOG +-A logdrop-208 -j DROP +-A logdrop-209 -m limit --limit 1/second -j LOG +-A logdrop-209 -j DROP +-A logdrop-21 -m limit --limit 1/second -j LOG +-A logdrop-21 -j DROP +-A logdrop-210 -m limit --limit 1/second -j LOG +-A logdrop-210 -j DROP +-A logdrop-211 -m limit --limit 1/second -j LOG +-A logdrop-211 -j DROP +-A logdrop-212 -m limit --limit 1/second -j LOG +-A logdrop-212 -j DROP +-A logdrop-213 -m limit --limit 1/second -j LOG +-A logdrop-213 -j DROP +-A logdrop-214 -m limit --limit 1/second -j LOG +-A logdrop-214 -j DROP +-A logdrop-215 -m limit --limit 1/second -j LOG +-A logdrop-215 -j DROP +-A logdrop-216 -m limit --limit 1/second -j LOG +-A logdrop-216 -j DROP +-A logdrop-217 -m limit --limit 1/second -j LOG +-A logdrop-217 -j DROP +-A logdrop-218 -m limit --limit 1/second -j LOG +-A logdrop-218 -j DROP +-A logdrop-219 -m limit --limit 1/second -j LOG +-A logdrop-219 -j DROP +-A logdrop-22 -m limit --limit 1/second -j LOG +-A logdrop-22 -j DROP +-A logdrop-220 -m limit --limit 1/second -j LOG +-A logdrop-220 -j DROP +-A logdrop-221 -m limit --limit 1/second -j LOG +-A logdrop-221 -j DROP +-A logdrop-222 -m limit --limit 1/second -j LOG +-A logdrop-222 -j DROP +-A logdrop-223 -m limit --limit 1/second -j LOG +-A logdrop-223 -j DROP +-A logdrop-224 -m limit --limit 1/second -j LOG +-A logdrop-224 -j DROP +-A logdrop-225 -m limit --limit 1/second -j LOG +-A logdrop-225 -j DROP +-A logdrop-226 -m limit --limit 1/second -j LOG +-A logdrop-226 -j DROP +-A logdrop-227 -m limit --limit 1/second -j LOG +-A logdrop-227 -j DROP +-A logdrop-228 -m limit --limit 1/second -j LOG +-A logdrop-228 -j DROP +-A logdrop-229 -m limit --limit 1/second -j LOG +-A logdrop-229 -j DROP +-A logdrop-23 -m limit --limit 1/second -j LOG +-A logdrop-23 -j DROP +-A logdrop-230 -m limit --limit 1/second -j LOG +-A logdrop-230 -j DROP +-A logdrop-231 -m limit --limit 1/second -j LOG +-A logdrop-231 -j DROP +-A logdrop-232 -m limit --limit 1/second -j LOG +-A logdrop-232 -j DROP +-A logdrop-233 -m limit --limit 1/second -j LOG +-A logdrop-233 -j DROP +-A logdrop-234 -m limit --limit 1/second -j LOG +-A logdrop-234 -j DROP +-A logdrop-235 -m limit --limit 1/second -j LOG +-A logdrop-235 -j DROP +-A logdrop-236 -m limit --limit 1/second -j LOG +-A logdrop-236 -j DROP +-A logdrop-237 -m limit --limit 1/second -j LOG +-A logdrop-237 -j DROP +-A logdrop-238 -m limit --limit 1/second -j LOG +-A logdrop-238 -j DROP +-A logdrop-239 -m limit --limit 1/second -j LOG +-A logdrop-239 -j DROP +-A logdrop-24 -m limit --limit 1/second -j LOG +-A logdrop-24 -j DROP +-A logdrop-240 -m limit --limit 1/second -j LOG +-A logdrop-240 -j DROP +-A logdrop-241 -m limit --limit 1/second -j LOG +-A logdrop-241 -j DROP +-A logdrop-242 -m limit --limit 1/second -j LOG +-A logdrop-242 -j DROP +-A logdrop-243 -m limit --limit 1/second -j LOG +-A logdrop-243 -j DROP +-A logdrop-244 -m limit --limit 1/second -j LOG +-A logdrop-244 -j DROP +-A logdrop-245 -m limit --limit 1/second -j LOG +-A logdrop-245 -j DROP +-A logdrop-246 -m limit --limit 1/second -j LOG +-A logdrop-246 -j DROP +-A logdrop-247 -m limit --limit 1/second -j LOG +-A logdrop-247 -j DROP +-A logdrop-248 -m limit --limit 1/second -j LOG +-A logdrop-248 -j DROP +-A logdrop-249 -m limit --limit 1/second -j LOG +-A logdrop-249 -j DROP +-A logdrop-25 -m limit --limit 1/second -j LOG +-A logdrop-25 -j DROP +-A logdrop-250 -m limit --limit 1/second -j LOG +-A logdrop-250 -j DROP +-A logdrop-251 -m limit --limit 1/second -j LOG +-A logdrop-251 -j DROP +-A logdrop-252 -m limit --limit 1/second -j LOG +-A logdrop-252 -j DROP +-A logdrop-253 -m limit --limit 1/second -j LOG +-A logdrop-253 -j DROP +-A logdrop-254 -m limit --limit 1/second -j LOG +-A logdrop-254 -j DROP +-A logdrop-255 -m limit --limit 1/second -j LOG +-A logdrop-255 -j DROP +-A logdrop-256 -m limit --limit 1/second -j LOG +-A logdrop-256 -j DROP +-A logdrop-257 -m limit --limit 1/second -j LOG +-A logdrop-257 -j DROP +-A logdrop-258 -m limit --limit 1/second -j LOG +-A logdrop-258 -j DROP +-A logdrop-259 -m limit --limit 1/second -j LOG +-A logdrop-259 -j DROP +-A logdrop-26 -m limit --limit 1/second -j LOG +-A logdrop-26 -j DROP +-A logdrop-260 -m limit --limit 1/second -j LOG +-A logdrop-260 -j DROP +-A logdrop-261 -m limit --limit 1/second -j LOG +-A logdrop-261 -j DROP +-A logdrop-262 -m limit --limit 1/second -j LOG +-A logdrop-262 -j DROP +-A logdrop-263 -m limit --limit 1/second -j LOG +-A logdrop-263 -j DROP +-A logdrop-264 -m limit --limit 1/second -j LOG +-A logdrop-264 -j DROP +-A logdrop-265 -m limit --limit 1/second -j LOG +-A logdrop-265 -j DROP +-A logdrop-266 -m limit --limit 1/second -j LOG +-A logdrop-266 -j DROP +-A logdrop-267 -m limit --limit 1/second -j LOG +-A logdrop-267 -j DROP +-A logdrop-268 -m limit --limit 1/second -j LOG +-A logdrop-268 -j DROP +-A logdrop-269 -m limit --limit 1/second -j LOG +-A logdrop-269 -j DROP +-A logdrop-27 -m limit --limit 1/second -j LOG +-A logdrop-27 -j DROP +-A logdrop-270 -m limit --limit 1/second -j LOG +-A logdrop-270 -j DROP +-A logdrop-271 -m limit --limit 1/second -j LOG +-A logdrop-271 -j DROP +-A logdrop-272 -m limit --limit 1/second -j LOG +-A logdrop-272 -j DROP +-A logdrop-273 -m limit --limit 1/second -j LOG +-A logdrop-273 -j DROP +-A logdrop-274 -m limit --limit 1/second -j LOG +-A logdrop-274 -j DROP +-A logdrop-275 -m limit --limit 1/second -j LOG +-A logdrop-275 -j DROP +-A logdrop-276 -m limit --limit 1/second -j LOG +-A logdrop-276 -j DROP +-A logdrop-277 -m limit --limit 1/second -j LOG +-A logdrop-277 -j DROP +-A logdrop-278 -m limit --limit 1/second -j LOG +-A logdrop-278 -j DROP +-A logdrop-279 -m limit --limit 1/second -j LOG +-A logdrop-279 -j DROP +-A logdrop-28 -m limit --limit 1/second -j LOG +-A logdrop-28 -j DROP +-A logdrop-280 -m limit --limit 1/second -j LOG +-A logdrop-280 -j DROP +-A logdrop-281 -m limit --limit 1/second -j LOG +-A logdrop-281 -j DROP +-A logdrop-282 -m limit --limit 1/second -j LOG +-A logdrop-282 -j DROP +-A logdrop-283 -m limit --limit 1/second -j LOG +-A logdrop-283 -j DROP +-A logdrop-284 -m limit --limit 1/second -j LOG +-A logdrop-284 -j DROP +-A logdrop-285 -m limit --limit 1/second -j LOG +-A logdrop-285 -j DROP +-A logdrop-286 -m limit --limit 1/second -j LOG +-A logdrop-286 -j DROP +-A logdrop-287 -m limit --limit 1/second -j LOG +-A logdrop-287 -j DROP +-A logdrop-288 -m limit --limit 1/second -j LOG +-A logdrop-288 -j DROP +-A logdrop-289 -m limit --limit 1/second -j LOG +-A logdrop-289 -j DROP +-A logdrop-29 -m limit --limit 1/second -j LOG +-A logdrop-29 -j DROP +-A logdrop-290 -m limit --limit 1/second -j LOG +-A logdrop-290 -j DROP +-A logdrop-291 -m limit --limit 1/second -j LOG +-A logdrop-291 -j DROP +-A logdrop-292 -m limit --limit 1/second -j LOG +-A logdrop-292 -j DROP +-A logdrop-293 -m limit --limit 1/second -j LOG +-A logdrop-293 -j DROP +-A logdrop-294 -m limit --limit 1/second -j LOG +-A logdrop-294 -j DROP +-A logdrop-295 -m limit --limit 1/second -j LOG +-A logdrop-295 -j DROP +-A logdrop-296 -m limit --limit 1/second -j LOG +-A logdrop-296 -j DROP +-A logdrop-297 -m limit --limit 1/second -j LOG +-A logdrop-297 -j DROP +-A logdrop-298 -m limit --limit 1/second -j LOG +-A logdrop-298 -j DROP +-A logdrop-299 -m limit --limit 1/second -j LOG +-A logdrop-299 -j DROP +-A logdrop-3 -m limit --limit 1/second -j LOG +-A logdrop-3 -j DROP +-A logdrop-30 -m limit --limit 1/second -j LOG +-A logdrop-30 -j DROP +-A logdrop-300 -m limit --limit 1/second -j LOG +-A logdrop-300 -j DROP +-A logdrop-301 -m limit --limit 1/second -j LOG +-A logdrop-301 -j DROP +-A logdrop-302 -m limit --limit 1/second -j LOG +-A logdrop-302 -j DROP +-A logdrop-303 -m limit --limit 1/second -j LOG +-A logdrop-303 -j DROP +-A logdrop-304 -m limit --limit 1/second -j LOG +-A logdrop-304 -j DROP +-A logdrop-305 -m limit --limit 1/second -j LOG +-A logdrop-305 -j DROP +-A logdrop-306 -m limit --limit 1/second -j LOG +-A logdrop-306 -j DROP +-A logdrop-307 -m limit --limit 1/second -j LOG +-A logdrop-307 -j DROP +-A logdrop-308 -m limit --limit 1/second -j LOG +-A logdrop-308 -j DROP +-A logdrop-309 -m limit --limit 1/second -j LOG +-A logdrop-309 -j DROP +-A logdrop-31 -m limit --limit 1/second -j LOG +-A logdrop-31 -j DROP +-A logdrop-310 -m limit --limit 1/second -j LOG +-A logdrop-310 -j DROP +-A logdrop-311 -m limit --limit 1/second -j LOG +-A logdrop-311 -j DROP +-A logdrop-312 -m limit --limit 1/second -j LOG +-A logdrop-312 -j DROP +-A logdrop-313 -m limit --limit 1/second -j LOG +-A logdrop-313 -j DROP +-A logdrop-314 -m limit --limit 1/second -j LOG +-A logdrop-314 -j DROP +-A logdrop-315 -m limit --limit 1/second -j LOG +-A logdrop-315 -j DROP +-A logdrop-316 -m limit --limit 1/second -j LOG +-A logdrop-316 -j DROP +-A logdrop-317 -m limit --limit 1/second -j LOG +-A logdrop-317 -j DROP +-A logdrop-318 -m limit --limit 1/second -j LOG +-A logdrop-318 -j DROP +-A logdrop-319 -m limit --limit 1/second -j LOG +-A logdrop-319 -j DROP +-A logdrop-32 -m limit --limit 1/second -j LOG +-A logdrop-32 -j DROP +-A logdrop-320 -m limit --limit 1/second -j LOG +-A logdrop-320 -j DROP +-A logdrop-321 -m limit --limit 1/second -j LOG +-A logdrop-321 -j DROP +-A logdrop-322 -m limit --limit 1/second -j LOG +-A logdrop-322 -j DROP +-A logdrop-323 -m limit --limit 1/second -j LOG +-A logdrop-323 -j DROP +-A logdrop-324 -m limit --limit 1/second -j LOG +-A logdrop-324 -j DROP +-A logdrop-325 -m limit --limit 1/second -j LOG +-A logdrop-325 -j DROP +-A logdrop-326 -m limit --limit 1/second -j LOG +-A logdrop-326 -j DROP +-A logdrop-327 -m limit --limit 1/second -j LOG +-A logdrop-327 -j DROP +-A logdrop-328 -m limit --limit 1/second -j LOG +-A logdrop-328 -j DROP +-A logdrop-329 -m limit --limit 1/second -j LOG +-A logdrop-329 -j DROP +-A logdrop-33 -m limit --limit 1/second -j LOG +-A logdrop-33 -j DROP +-A logdrop-330 -m limit --limit 1/second -j LOG +-A logdrop-330 -j DROP +-A logdrop-331 -m limit --limit 1/second -j LOG +-A logdrop-331 -j DROP +-A logdrop-332 -m limit --limit 1/second -j LOG +-A logdrop-332 -j DROP +-A logdrop-333 -m limit --limit 1/second -j LOG +-A logdrop-333 -j DROP +-A logdrop-334 -m limit --limit 1/second -j LOG +-A logdrop-334 -j DROP +-A logdrop-335 -m limit --limit 1/second -j LOG +-A logdrop-335 -j DROP +-A logdrop-336 -m limit --limit 1/second -j LOG +-A logdrop-336 -j DROP +-A logdrop-337 -m limit --limit 1/second -j LOG +-A logdrop-337 -j DROP +-A logdrop-338 -m limit --limit 1/second -j LOG +-A logdrop-338 -j DROP +-A logdrop-339 -m limit --limit 1/second -j LOG +-A logdrop-339 -j DROP +-A logdrop-34 -m limit --limit 1/second -j LOG +-A logdrop-34 -j DROP +-A logdrop-340 -m limit --limit 1/second -j LOG +-A logdrop-340 -j DROP +-A logdrop-341 -m limit --limit 1/second -j LOG +-A logdrop-341 -j DROP +-A logdrop-342 -m limit --limit 1/second -j LOG +-A logdrop-342 -j DROP +-A logdrop-343 -m limit --limit 1/second -j LOG +-A logdrop-343 -j DROP +-A logdrop-344 -m limit --limit 1/second -j LOG +-A logdrop-344 -j DROP +-A logdrop-345 -m limit --limit 1/second -j LOG +-A logdrop-345 -j DROP +-A logdrop-346 -m limit --limit 1/second -j LOG +-A logdrop-346 -j DROP +-A logdrop-347 -m limit --limit 1/second -j LOG +-A logdrop-347 -j DROP +-A logdrop-348 -m limit --limit 1/second -j LOG +-A logdrop-348 -j DROP +-A logdrop-349 -m limit --limit 1/second -j LOG +-A logdrop-349 -j DROP +-A logdrop-35 -m limit --limit 1/second -j LOG +-A logdrop-35 -j DROP +-A logdrop-350 -m limit --limit 1/second -j LOG +-A logdrop-350 -j DROP +-A logdrop-351 -m limit --limit 1/second -j LOG +-A logdrop-351 -j DROP +-A logdrop-352 -m limit --limit 1/second -j LOG +-A logdrop-352 -j DROP +-A logdrop-353 -m limit --limit 1/second -j LOG +-A logdrop-353 -j DROP +-A logdrop-354 -m limit --limit 1/second -j LOG +-A logdrop-354 -j DROP +-A logdrop-355 -m limit --limit 1/second -j LOG +-A logdrop-355 -j DROP +-A logdrop-356 -m limit --limit 1/second -j LOG +-A logdrop-356 -j DROP +-A logdrop-357 -m limit --limit 1/second -j LOG +-A logdrop-357 -j DROP +-A logdrop-358 -m limit --limit 1/second -j LOG +-A logdrop-358 -j DROP +-A logdrop-359 -m limit --limit 1/second -j LOG +-A logdrop-359 -j DROP +-A logdrop-36 -m limit --limit 1/second -j LOG +-A logdrop-36 -j DROP +-A logdrop-360 -m limit --limit 1/second -j LOG +-A logdrop-360 -j DROP +-A logdrop-361 -m limit --limit 1/second -j LOG +-A logdrop-361 -j DROP +-A logdrop-362 -m limit --limit 1/second -j LOG +-A logdrop-362 -j DROP +-A logdrop-363 -m limit --limit 1/second -j LOG +-A logdrop-363 -j DROP +-A logdrop-364 -m limit --limit 1/second -j LOG +-A logdrop-364 -j DROP +-A logdrop-365 -m limit --limit 1/second -j LOG +-A logdrop-365 -j DROP +-A logdrop-366 -m limit --limit 1/second -j LOG +-A logdrop-366 -j DROP +-A logdrop-367 -m limit --limit 1/second -j LOG +-A logdrop-367 -j DROP +-A logdrop-368 -m limit --limit 1/second -j LOG +-A logdrop-368 -j DROP +-A logdrop-369 -m limit --limit 1/second -j LOG +-A logdrop-369 -j DROP +-A logdrop-37 -m limit --limit 1/second -j LOG +-A logdrop-37 -j DROP +-A logdrop-370 -m limit --limit 1/second -j LOG +-A logdrop-370 -j DROP +-A logdrop-371 -m limit --limit 1/second -j LOG +-A logdrop-371 -j DROP +-A logdrop-372 -m limit --limit 1/second -j LOG +-A logdrop-372 -j DROP +-A logdrop-373 -m limit --limit 1/second -j LOG +-A logdrop-373 -j DROP +-A logdrop-374 -m limit --limit 1/second -j LOG +-A logdrop-374 -j DROP +-A logdrop-375 -m limit --limit 1/second -j LOG +-A logdrop-375 -j DROP +-A logdrop-376 -m limit --limit 1/second -j LOG +-A logdrop-376 -j DROP +-A logdrop-377 -m limit --limit 1/second -j LOG +-A logdrop-377 -j DROP +-A logdrop-378 -m limit --limit 1/second -j LOG +-A logdrop-378 -j DROP +-A logdrop-379 -m limit --limit 1/second -j LOG +-A logdrop-379 -j DROP +-A logdrop-38 -m limit --limit 1/second -j LOG +-A logdrop-38 -j DROP +-A logdrop-380 -m limit --limit 1/second -j LOG +-A logdrop-380 -j DROP +-A logdrop-381 -m limit --limit 1/second -j LOG +-A logdrop-381 -j DROP +-A logdrop-382 -m limit --limit 1/second -j LOG +-A logdrop-382 -j DROP +-A logdrop-383 -m limit --limit 1/second -j LOG +-A logdrop-383 -j DROP +-A logdrop-384 -m limit --limit 1/second -j LOG +-A logdrop-384 -j DROP +-A logdrop-385 -m limit --limit 1/second -j LOG +-A logdrop-385 -j DROP +-A logdrop-386 -m limit --limit 1/second -j LOG +-A logdrop-386 -j DROP +-A logdrop-387 -m limit --limit 1/second -j LOG +-A logdrop-387 -j DROP +-A logdrop-388 -m limit --limit 1/second -j LOG +-A logdrop-388 -j DROP +-A logdrop-389 -m limit --limit 1/second -j LOG +-A logdrop-389 -j DROP +-A logdrop-39 -m limit --limit 1/second -j LOG +-A logdrop-39 -j DROP +-A logdrop-390 -m limit --limit 1/second -j LOG +-A logdrop-390 -j DROP +-A logdrop-391 -m limit --limit 1/second -j LOG +-A logdrop-391 -j DROP +-A logdrop-392 -m limit --limit 1/second -j LOG +-A logdrop-392 -j DROP +-A logdrop-393 -m limit --limit 1/second -j LOG +-A logdrop-393 -j DROP +-A logdrop-394 -m limit --limit 1/second -j LOG +-A logdrop-394 -j DROP +-A logdrop-395 -m limit --limit 1/second -j LOG +-A logdrop-395 -j DROP +-A logdrop-396 -m limit --limit 1/second -j LOG +-A logdrop-396 -j DROP +-A logdrop-397 -m limit --limit 1/second -j LOG +-A logdrop-397 -j DROP +-A logdrop-398 -m limit --limit 1/second -j LOG +-A logdrop-398 -j DROP +-A logdrop-399 -m limit --limit 1/second -j LOG +-A logdrop-399 -j DROP +-A logdrop-4 -m limit --limit 1/second -j LOG +-A logdrop-4 -j DROP +-A logdrop-40 -m limit --limit 1/second -j LOG +-A logdrop-40 -j DROP +-A logdrop-400 -m limit --limit 1/second -j LOG +-A logdrop-400 -j DROP +-A logdrop-401 -m limit --limit 1/second -j LOG +-A logdrop-401 -j DROP +-A logdrop-402 -m limit --limit 1/second -j LOG +-A logdrop-402 -j DROP +-A logdrop-403 -m limit --limit 1/second -j LOG +-A logdrop-403 -j DROP +-A logdrop-404 -m limit --limit 1/second -j LOG +-A logdrop-404 -j DROP +-A logdrop-405 -m limit --limit 1/second -j LOG +-A logdrop-405 -j DROP +-A logdrop-406 -m limit --limit 1/second -j LOG +-A logdrop-406 -j DROP +-A logdrop-407 -m limit --limit 1/second -j LOG +-A logdrop-407 -j DROP +-A logdrop-408 -m limit --limit 1/second -j LOG +-A logdrop-408 -j DROP +-A logdrop-409 -m limit --limit 1/second -j LOG +-A logdrop-409 -j DROP +-A logdrop-41 -m limit --limit 1/second -j LOG +-A logdrop-41 -j DROP +-A logdrop-410 -m limit --limit 1/second -j LOG +-A logdrop-410 -j DROP +-A logdrop-411 -m limit --limit 1/second -j LOG +-A logdrop-411 -j DROP +-A logdrop-412 -m limit --limit 1/second -j LOG +-A logdrop-412 -j DROP +-A logdrop-413 -m limit --limit 1/second -j LOG +-A logdrop-413 -j DROP +-A logdrop-414 -m limit --limit 1/second -j LOG +-A logdrop-414 -j DROP +-A logdrop-415 -m limit --limit 1/second -j LOG +-A logdrop-415 -j DROP +-A logdrop-416 -m limit --limit 1/second -j LOG +-A logdrop-416 -j DROP +-A logdrop-417 -m limit --limit 1/second -j LOG +-A logdrop-417 -j DROP +-A logdrop-418 -m limit --limit 1/second -j LOG +-A logdrop-418 -j DROP +-A logdrop-419 -m limit --limit 1/second -j LOG +-A logdrop-419 -j DROP +-A logdrop-42 -m limit --limit 1/second -j LOG +-A logdrop-42 -j DROP +-A logdrop-420 -m limit --limit 1/second -j LOG +-A logdrop-420 -j DROP +-A logdrop-421 -m limit --limit 1/second -j LOG +-A logdrop-421 -j DROP +-A logdrop-422 -m limit --limit 1/second -j LOG +-A logdrop-422 -j DROP +-A logdrop-423 -m limit --limit 1/second -j LOG +-A logdrop-423 -j DROP +-A logdrop-424 -m limit --limit 1/second -j LOG +-A logdrop-424 -j DROP +-A logdrop-425 -m limit --limit 1/second -j LOG +-A logdrop-425 -j DROP +-A logdrop-426 -m limit --limit 1/second -j LOG +-A logdrop-426 -j DROP +-A logdrop-427 -m limit --limit 1/second -j LOG +-A logdrop-427 -j DROP +-A logdrop-428 -m limit --limit 1/second -j LOG +-A logdrop-428 -j DROP +-A logdrop-429 -m limit --limit 1/second -j LOG +-A logdrop-429 -j DROP +-A logdrop-43 -m limit --limit 1/second -j LOG +-A logdrop-43 -j DROP +-A logdrop-430 -m limit --limit 1/second -j LOG +-A logdrop-430 -j DROP +-A logdrop-431 -m limit --limit 1/second -j LOG +-A logdrop-431 -j DROP +-A logdrop-432 -m limit --limit 1/second -j LOG +-A logdrop-432 -j DROP +-A logdrop-433 -m limit --limit 1/second -j LOG +-A logdrop-433 -j DROP +-A logdrop-434 -m limit --limit 1/second -j LOG +-A logdrop-434 -j DROP +-A logdrop-435 -m limit --limit 1/second -j LOG +-A logdrop-435 -j DROP +-A logdrop-436 -m limit --limit 1/second -j LOG +-A logdrop-436 -j DROP +-A logdrop-437 -m limit --limit 1/second -j LOG +-A logdrop-437 -j DROP +-A logdrop-438 -m limit --limit 1/second -j LOG +-A logdrop-438 -j DROP +-A logdrop-439 -m limit --limit 1/second -j LOG +-A logdrop-439 -j DROP +-A logdrop-44 -m limit --limit 1/second -j LOG +-A logdrop-44 -j DROP +-A logdrop-440 -m limit --limit 1/second -j LOG +-A logdrop-440 -j DROP +-A logdrop-441 -m limit --limit 1/second -j LOG +-A logdrop-441 -j DROP +-A logdrop-442 -m limit --limit 1/second -j LOG +-A logdrop-442 -j DROP +-A logdrop-443 -m limit --limit 1/second -j LOG +-A logdrop-443 -j DROP +-A logdrop-444 -m limit --limit 1/second -j LOG +-A logdrop-444 -j DROP +-A logdrop-445 -m limit --limit 1/second -j LOG +-A logdrop-445 -j DROP +-A logdrop-446 -m limit --limit 1/second -j LOG +-A logdrop-446 -j DROP +-A logdrop-447 -m limit --limit 1/second -j LOG +-A logdrop-447 -j DROP +-A logdrop-448 -m limit --limit 1/second -j LOG +-A logdrop-448 -j DROP +-A logdrop-449 -m limit --limit 1/second -j LOG +-A logdrop-449 -j DROP +-A logdrop-45 -m limit --limit 1/second -j LOG +-A logdrop-45 -j DROP +-A logdrop-450 -m limit --limit 1/second -j LOG +-A logdrop-450 -j DROP +-A logdrop-451 -m limit --limit 1/second -j LOG +-A logdrop-451 -j DROP +-A logdrop-452 -m limit --limit 1/second -j LOG +-A logdrop-452 -j DROP +-A logdrop-453 -m limit --limit 1/second -j LOG +-A logdrop-453 -j DROP +-A logdrop-454 -m limit --limit 1/second -j LOG +-A logdrop-454 -j DROP +-A logdrop-455 -m limit --limit 1/second -j LOG +-A logdrop-455 -j DROP +-A logdrop-456 -m limit --limit 1/second -j LOG +-A logdrop-456 -j DROP +-A logdrop-457 -m limit --limit 1/second -j LOG +-A logdrop-457 -j DROP +-A logdrop-46 -m limit --limit 1/second -j LOG +-A logdrop-46 -j DROP +-A logdrop-47 -m limit --limit 1/second -j LOG +-A logdrop-47 -j DROP +-A logdrop-48 -m limit --limit 1/second -j LOG +-A logdrop-48 -j DROP +-A logdrop-49 -m limit --limit 1/second -j LOG +-A logdrop-49 -j DROP +-A logdrop-5 -m limit --limit 1/second -j LOG +-A logdrop-5 -j DROP +-A logdrop-50 -m limit --limit 1/second -j LOG +-A logdrop-50 -j DROP +-A logdrop-51 -m limit --limit 1/second -j LOG +-A logdrop-51 -j DROP +-A logdrop-52 -m limit --limit 1/second -j LOG +-A logdrop-52 -j DROP +-A logdrop-53 -m limit --limit 1/second -j LOG +-A logdrop-53 -j DROP +-A logdrop-54 -m limit --limit 1/second -j LOG +-A logdrop-54 -j DROP +-A logdrop-55 -m limit --limit 1/second -j LOG +-A logdrop-55 -j DROP +-A logdrop-56 -m limit --limit 1/second -j LOG +-A logdrop-56 -j DROP +-A logdrop-57 -m limit --limit 1/second -j LOG +-A logdrop-57 -j DROP +-A logdrop-58 -m limit --limit 1/second -j LOG +-A logdrop-58 -j DROP +-A logdrop-59 -m limit --limit 1/second -j LOG +-A logdrop-59 -j DROP +-A logdrop-6 -m limit --limit 1/second -j LOG +-A logdrop-6 -j DROP +-A logdrop-60 -m limit --limit 1/second -j LOG +-A logdrop-60 -j DROP +-A logdrop-61 -m limit --limit 1/second -j LOG +-A logdrop-61 -j DROP +-A logdrop-62 -m limit --limit 1/second -j LOG +-A logdrop-62 -j DROP +-A logdrop-63 -m limit --limit 1/second -j LOG +-A logdrop-63 -j DROP +-A logdrop-64 -m limit --limit 1/second -j LOG +-A logdrop-64 -j DROP +-A logdrop-65 -m limit --limit 1/second -j LOG +-A logdrop-65 -j DROP +-A logdrop-66 -m limit --limit 1/second -j LOG +-A logdrop-66 -j DROP +-A logdrop-67 -m limit --limit 1/second -j LOG +-A logdrop-67 -j DROP +-A logdrop-68 -m limit --limit 1/second -j LOG +-A logdrop-68 -j DROP +-A logdrop-69 -m limit --limit 1/second -j LOG +-A logdrop-69 -j DROP +-A logdrop-7 -m limit --limit 1/second -j LOG +-A logdrop-7 -j DROP +-A logdrop-70 -m limit --limit 1/second -j LOG +-A logdrop-70 -j DROP +-A logdrop-71 -m limit --limit 1/second -j LOG +-A logdrop-71 -j DROP +-A logdrop-72 -m limit --limit 1/second -j LOG +-A logdrop-72 -j DROP +-A logdrop-73 -m limit --limit 1/second -j LOG +-A logdrop-73 -j DROP +-A logdrop-74 -m limit --limit 1/second -j LOG +-A logdrop-74 -j DROP +-A logdrop-75 -m limit --limit 1/second -j LOG +-A logdrop-75 -j DROP +-A logdrop-76 -m limit --limit 1/second -j LOG +-A logdrop-76 -j DROP +-A logdrop-77 -m limit --limit 1/second -j LOG +-A logdrop-77 -j DROP +-A logdrop-78 -m limit --limit 1/second -j LOG +-A logdrop-78 -j DROP +-A logdrop-79 -m limit --limit 1/second -j LOG +-A logdrop-79 -j DROP +-A logdrop-8 -m limit --limit 1/second -j LOG +-A logdrop-8 -j DROP +-A logdrop-80 -m limit --limit 1/second -j LOG +-A logdrop-80 -j DROP +-A logdrop-81 -m limit --limit 1/second -j LOG +-A logdrop-81 -j DROP +-A logdrop-82 -m limit --limit 1/second -j LOG +-A logdrop-82 -j DROP +-A logdrop-83 -m limit --limit 1/second -j LOG +-A logdrop-83 -j DROP +-A logdrop-84 -m limit --limit 1/second -j LOG +-A logdrop-84 -j DROP +-A logdrop-85 -m limit --limit 1/second -j LOG +-A logdrop-85 -j DROP +-A logdrop-86 -m limit --limit 1/second -j LOG +-A logdrop-86 -j DROP +-A logdrop-87 -m limit --limit 1/second -j LOG +-A logdrop-87 -j DROP +-A logdrop-88 -m limit --limit 1/second -j LOG +-A logdrop-88 -j DROP +-A logdrop-89 -m limit --limit 1/second -j LOG +-A logdrop-89 -j DROP +-A logdrop-9 -m limit --limit 1/second -j LOG +-A logdrop-9 -j DROP +-A logdrop-90 -m limit --limit 1/second -j LOG +-A logdrop-90 -j DROP +-A logdrop-91 -m limit --limit 1/second -j LOG +-A logdrop-91 -j DROP +-A logdrop-92 -m limit --limit 1/second -j LOG +-A logdrop-92 -j DROP +-A logdrop-93 -m limit --limit 1/second -j LOG +-A logdrop-93 -j DROP +-A logdrop-94 -m limit --limit 1/second -j LOG +-A logdrop-94 -j DROP +-A logdrop-95 -m limit --limit 1/second -j LOG +-A logdrop-95 -j DROP +-A logdrop-96 -m limit --limit 1/second -j LOG +-A logdrop-96 -j DROP +-A logdrop-97 -m limit --limit 1/second -j LOG +-A logdrop-97 -j DROP +-A logdrop-98 -m limit --limit 1/second -j LOG +-A logdrop-98 -j DROP +-A logdrop-99 -m limit --limit 1/second -j LOG +-A logdrop-99 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:FORWARD ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*nat +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +:awall-masquerade - [0:0] +-A INPUT -j MASQUERADE +-A OUTPUT -j REDIRECT +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE +-A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade +-A PREROUTING -i eth0 -j REDIRECT +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT +-A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT diff --git a/test/output/filter-limit/rules6-save b/test/output/filter-limit/rules6-save new file mode 100644 index 0000000..da3fbec --- /dev/null +++ b/test/output/filter-limit/rules6-save @@ -0,0 +1,9601 @@ +# rules6-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:limit-0 - [0:0] +:limit-1 - [0:0] +:limit-10 - [0:0] +:limit-100 - [0:0] +:limit-1000 - [0:0] +:limit-1001 - [0:0] +:limit-1002 - [0:0] +:limit-1003 - [0:0] +:limit-1004 - [0:0] +:limit-1005 - [0:0] +:limit-1006 - [0:0] +:limit-1007 - [0:0] +:limit-1008 - [0:0] +:limit-1009 - [0:0] +:limit-101 - [0:0] +:limit-1010 - [0:0] +:limit-1011 - [0:0] +:limit-1012 - [0:0] +:limit-1013 - [0:0] +:limit-1014 - [0:0] +:limit-1015 - [0:0] +:limit-1016 - [0:0] +:limit-1017 - [0:0] +:limit-1018 - [0:0] +:limit-1019 - [0:0] +:limit-102 - [0:0] +:limit-1020 - [0:0] +:limit-1021 - [0:0] +:limit-1022 - [0:0] +:limit-1023 - [0:0] +:limit-1024 - [0:0] +:limit-1025 - [0:0] +:limit-1026 - [0:0] +:limit-1027 - [0:0] +:limit-1028 - [0:0] +:limit-1029 - [0:0] +:limit-103 - [0:0] +:limit-1030 - [0:0] +:limit-1031 - [0:0] +:limit-1032 - [0:0] +:limit-1033 - [0:0] +:limit-1034 - [0:0] +:limit-1035 - [0:0] +:limit-1036 - [0:0] +:limit-1037 - [0:0] +:limit-1038 - [0:0] +:limit-1039 - [0:0] +:limit-104 - [0:0] +:limit-1040 - [0:0] +:limit-1041 - [0:0] +:limit-1042 - [0:0] +:limit-1043 - [0:0] +:limit-1044 - [0:0] +:limit-1045 - [0:0] +:limit-1046 - [0:0] +:limit-1047 - [0:0] +:limit-1048 - [0:0] +:limit-1049 - [0:0] +:limit-105 - [0:0] +:limit-1050 - [0:0] +:limit-1051 - [0:0] +:limit-1052 - [0:0] +:limit-1053 - [0:0] +:limit-1054 - [0:0] +:limit-1055 - [0:0] +:limit-1056 - [0:0] +:limit-1057 - [0:0] +:limit-1058 - [0:0] +:limit-1059 - [0:0] +:limit-106 - [0:0] +:limit-1060 - [0:0] +:limit-1061 - [0:0] +:limit-1062 - [0:0] +:limit-1063 - [0:0] +:limit-1064 - [0:0] +:limit-1065 - [0:0] +:limit-1066 - [0:0] +:limit-1067 - [0:0] +:limit-1068 - [0:0] +:limit-1069 - [0:0] +:limit-107 - [0:0] +:limit-1070 - [0:0] +:limit-1071 - [0:0] +:limit-1072 - [0:0] +:limit-1073 - [0:0] +:limit-1074 - [0:0] +:limit-1075 - [0:0] +:limit-1076 - [0:0] +:limit-1077 - [0:0] +:limit-1078 - [0:0] +:limit-1079 - [0:0] +:limit-108 - [0:0] +:limit-1080 - [0:0] +:limit-1081 - [0:0] +:limit-1082 - [0:0] +:limit-1083 - [0:0] +:limit-1084 - [0:0] +:limit-1085 - [0:0] +:limit-1086 - [0:0] +:limit-1087 - [0:0] +:limit-1088 - [0:0] +:limit-1089 - [0:0] +:limit-109 - [0:0] +:limit-1090 - [0:0] +:limit-1091 - [0:0] +:limit-1092 - [0:0] +:limit-1094 - [0:0] +:limit-1095 - [0:0] +:limit-1096 - [0:0] +:limit-1098 - [0:0] +:limit-1099 - [0:0] +:limit-11 - [0:0] +:limit-110 - [0:0] +:limit-1100 - [0:0] +:limit-1101 - [0:0] +:limit-1102 - [0:0] +:limit-1103 - [0:0] +:limit-1104 - [0:0] +:limit-1106 - [0:0] +:limit-1107 - [0:0] +:limit-1108 - [0:0] +:limit-111 - [0:0] +:limit-1110 - [0:0] +:limit-1111 - [0:0] +:limit-1112 - [0:0] +:limit-1113 - [0:0] +:limit-1114 - [0:0] +:limit-1115 - [0:0] +:limit-1116 - [0:0] +:limit-1118 - [0:0] +:limit-1119 - [0:0] +:limit-112 - [0:0] +:limit-1120 - [0:0] +:limit-1122 - [0:0] +:limit-1123 - [0:0] +:limit-1124 - [0:0] +:limit-1125 - [0:0] +:limit-1126 - [0:0] +:limit-1127 - [0:0] +:limit-1128 - [0:0] +:limit-113 - [0:0] +:limit-1130 - [0:0] +:limit-1131 - [0:0] +:limit-1132 - [0:0] +:limit-1134 - [0:0] +:limit-1135 - [0:0] +:limit-1136 - [0:0] +:limit-1137 - [0:0] +:limit-1138 - [0:0] +:limit-1139 - [0:0] +:limit-114 - [0:0] +:limit-1140 - [0:0] +:limit-1141 - [0:0] +:limit-1142 - [0:0] +:limit-1143 - [0:0] +:limit-1144 - [0:0] +:limit-1145 - [0:0] +:limit-1146 - [0:0] +:limit-1148 - [0:0] +:limit-1149 - [0:0] +:limit-115 - [0:0] +:limit-1150 - [0:0] +:limit-1152 - [0:0] +:limit-1153 - [0:0] +:limit-1154 - [0:0] +:limit-1155 - [0:0] +:limit-1156 - [0:0] +:limit-1157 - [0:0] +:limit-1158 - [0:0] +:limit-116 - [0:0] +:limit-1160 - [0:0] +:limit-1161 - [0:0] +:limit-1162 - [0:0] +:limit-1164 - [0:0] +:limit-1165 - [0:0] +:limit-1166 - [0:0] +:limit-1167 - [0:0] +:limit-1168 - [0:0] +:limit-1169 - [0:0] +:limit-117 - [0:0] +:limit-1170 - [0:0] +:limit-1172 - [0:0] +:limit-1173 - [0:0] +:limit-1174 - [0:0] +:limit-1176 - [0:0] +:limit-1177 - [0:0] +:limit-1178 - [0:0] +:limit-1179 - [0:0] +:limit-118 - [0:0] +:limit-1180 - [0:0] +:limit-1181 - [0:0] +:limit-1182 - [0:0] +:limit-1184 - [0:0] +:limit-1185 - [0:0] +:limit-1186 - [0:0] +:limit-1188 - [0:0] +:limit-1189 - [0:0] +:limit-119 - [0:0] +:limit-1190 - [0:0] +:limit-1191 - [0:0] +:limit-1192 - [0:0] +:limit-1193 - [0:0] +:limit-1194 - [0:0] +:limit-1195 - [0:0] +:limit-1196 - [0:0] +:limit-1197 - [0:0] +:limit-1198 - [0:0] +:limit-1199 - [0:0] +:limit-12 - [0:0] +:limit-120 - [0:0] +:limit-1200 - [0:0] +:limit-1202 - [0:0] +:limit-1203 - [0:0] +:limit-1204 - [0:0] +:limit-1206 - [0:0] +:limit-1207 - [0:0] +:limit-1208 - [0:0] +:limit-1209 - [0:0] +:limit-121 - [0:0] +:limit-1210 - [0:0] +:limit-1211 - [0:0] +:limit-1212 - [0:0] +:limit-1214 - [0:0] +:limit-1215 - [0:0] +:limit-1216 - [0:0] +:limit-1218 - [0:0] +:limit-1219 - [0:0] +:limit-122 - [0:0] +:limit-1220 - [0:0] +:limit-1221 - [0:0] +:limit-1222 - [0:0] +:limit-1223 - [0:0] +:limit-1224 - [0:0] +:limit-1226 - [0:0] +:limit-1227 - [0:0] +:limit-1228 - [0:0] +:limit-123 - [0:0] +:limit-1230 - [0:0] +:limit-1231 - [0:0] +:limit-1232 - [0:0] +:limit-1233 - [0:0] +:limit-1234 - [0:0] +:limit-1235 - [0:0] +:limit-1236 - [0:0] +:limit-1238 - [0:0] +:limit-1239 - [0:0] +:limit-124 - [0:0] +:limit-1240 - [0:0] +:limit-1242 - [0:0] +:limit-1243 - [0:0] +:limit-1244 - [0:0] +:limit-1245 - [0:0] +:limit-1246 - [0:0] +:limit-1247 - [0:0] +:limit-1248 - [0:0] +:limit-1249 - [0:0] +:limit-125 - [0:0] +:limit-1250 - [0:0] +:limit-1251 - [0:0] +:limit-1252 - [0:0] +:limit-1253 - [0:0] +:limit-1254 - [0:0] +:limit-1256 - [0:0] +:limit-1257 - [0:0] +:limit-1258 - [0:0] +:limit-126 - [0:0] +:limit-1260 - [0:0] +:limit-1261 - [0:0] +:limit-1262 - [0:0] +:limit-1263 - [0:0] +:limit-1264 - [0:0] +:limit-1265 - [0:0] +:limit-1266 - [0:0] +:limit-1268 - [0:0] +:limit-1269 - [0:0] +:limit-127 - [0:0] +:limit-1270 - [0:0] +:limit-1272 - [0:0] +:limit-1273 - [0:0] +:limit-1274 - [0:0] +:limit-1275 - [0:0] +:limit-1276 - [0:0] +:limit-1277 - [0:0] +:limit-1278 - [0:0] +:limit-128 - [0:0] +:limit-1280 - [0:0] +:limit-1281 - [0:0] +:limit-1282 - [0:0] +:limit-1284 - [0:0] +:limit-1285 - [0:0] +:limit-1286 - [0:0] +:limit-1287 - [0:0] +:limit-1288 - [0:0] +:limit-1289 - [0:0] +:limit-129 - [0:0] +:limit-1290 - [0:0] +:limit-1292 - [0:0] +:limit-1293 - [0:0] +:limit-1294 - [0:0] +:limit-1296 - [0:0] +:limit-1297 - [0:0] +:limit-1298 - [0:0] +:limit-1299 - [0:0] +:limit-13 - [0:0] +:limit-130 - [0:0] +:limit-1300 - [0:0] +:limit-1301 - [0:0] +:limit-1302 - [0:0] +:limit-1303 - [0:0] +:limit-1304 - [0:0] +:limit-1305 - [0:0] +:limit-1306 - [0:0] +:limit-1307 - [0:0] +:limit-1308 - [0:0] +:limit-131 - [0:0] +:limit-1310 - [0:0] +:limit-1311 - [0:0] +:limit-1312 - [0:0] +:limit-1314 - [0:0] +:limit-1315 - [0:0] +:limit-1316 - [0:0] +:limit-1317 - [0:0] +:limit-1318 - [0:0] +:limit-1319 - [0:0] +:limit-132 - [0:0] +:limit-1320 - [0:0] +:limit-1322 - [0:0] +:limit-1323 - [0:0] +:limit-1324 - [0:0] +:limit-1326 - [0:0] +:limit-1327 - [0:0] +:limit-1328 - [0:0] +:limit-1329 - [0:0] +:limit-133 - [0:0] +:limit-1330 - [0:0] +:limit-1331 - [0:0] +:limit-1332 - [0:0] +:limit-1334 - [0:0] +:limit-1335 - [0:0] +:limit-1336 - [0:0] +:limit-1338 - [0:0] +:limit-1339 - [0:0] +:limit-134 - [0:0] +:limit-1340 - [0:0] +:limit-1341 - [0:0] +:limit-1342 - [0:0] +:limit-1343 - [0:0] +:limit-1344 - [0:0] +:limit-1346 - [0:0] +:limit-1347 - [0:0] +:limit-1348 - [0:0] +:limit-135 - [0:0] +:limit-1350 - [0:0] +:limit-1351 - [0:0] +:limit-1352 - [0:0] +:limit-1353 - [0:0] +:limit-1354 - [0:0] +:limit-1355 - [0:0] +:limit-1356 - [0:0] +:limit-1357 - [0:0] +:limit-1358 - [0:0] +:limit-1359 - [0:0] +:limit-136 - [0:0] +:limit-1360 - [0:0] +:limit-1361 - [0:0] +:limit-1362 - [0:0] +:limit-1364 - [0:0] +:limit-1365 - [0:0] +:limit-1366 - [0:0] +:limit-1368 - [0:0] +:limit-1369 - [0:0] +:limit-137 - [0:0] +:limit-1370 - [0:0] +:limit-1371 - [0:0] +:limit-1372 - [0:0] +:limit-1373 - [0:0] +:limit-1374 - [0:0] +:limit-1376 - [0:0] +:limit-1377 - [0:0] +:limit-1378 - [0:0] +:limit-138 - [0:0] +:limit-1380 - [0:0] +:limit-1381 - [0:0] +:limit-1382 - [0:0] +:limit-1383 - [0:0] +:limit-1384 - [0:0] +:limit-1385 - [0:0] +:limit-1386 - [0:0] +:limit-1388 - [0:0] +:limit-1389 - [0:0] +:limit-139 - [0:0] +:limit-1390 - [0:0] +:limit-1392 - [0:0] +:limit-1393 - [0:0] +:limit-1394 - [0:0] +:limit-1395 - [0:0] +:limit-1396 - [0:0] +:limit-1397 - [0:0] +:limit-1398 - [0:0] +:limit-14 - [0:0] +:limit-140 - [0:0] +:limit-1400 - [0:0] +:limit-1401 - [0:0] +:limit-1402 - [0:0] +:limit-1404 - [0:0] +:limit-1405 - [0:0] +:limit-1406 - [0:0] +:limit-1407 - [0:0] +:limit-1408 - [0:0] +:limit-1409 - [0:0] +:limit-141 - [0:0] +:limit-1410 - [0:0] +:limit-1411 - [0:0] +:limit-1412 - [0:0] +:limit-1413 - [0:0] +:limit-1414 - [0:0] +:limit-1415 - [0:0] +:limit-1416 - [0:0] +:limit-1417 - [0:0] +:limit-1418 - [0:0] +:limit-1419 - [0:0] +:limit-142 - [0:0] +:limit-1420 - [0:0] +:limit-1421 - [0:0] +:limit-1422 - [0:0] +:limit-1423 - [0:0] +:limit-1424 - [0:0] +:limit-1425 - [0:0] +:limit-1426 - [0:0] +:limit-1427 - [0:0] +:limit-1428 - [0:0] +:limit-1429 - [0:0] +:limit-143 - [0:0] +:limit-1430 - [0:0] +:limit-1431 - [0:0] +:limit-144 - [0:0] +:limit-145 - [0:0] +:limit-146 - [0:0] +:limit-147 - [0:0] +:limit-148 - [0:0] +:limit-149 - [0:0] +:limit-15 - [0:0] +:limit-150 - [0:0] +:limit-151 - [0:0] +:limit-152 - [0:0] +:limit-153 - [0:0] +:limit-154 - [0:0] +:limit-155 - [0:0] +:limit-156 - [0:0] +:limit-157 - [0:0] +:limit-158 - [0:0] +:limit-159 - [0:0] +:limit-16 - [0:0] +:limit-160 - [0:0] +:limit-161 - [0:0] +:limit-162 - [0:0] +:limit-163 - [0:0] +:limit-164 - [0:0] +:limit-165 - [0:0] +:limit-166 - [0:0] +:limit-167 - [0:0] +:limit-168 - [0:0] +:limit-169 - [0:0] +:limit-17 - [0:0] +:limit-170 - [0:0] +:limit-171 - [0:0] +:limit-172 - [0:0] +:limit-173 - [0:0] +:limit-174 - [0:0] +:limit-175 - [0:0] +:limit-176 - [0:0] +:limit-177 - [0:0] +:limit-178 - [0:0] +:limit-179 - [0:0] +:limit-18 - [0:0] +:limit-180 - [0:0] +:limit-181 - [0:0] +:limit-182 - [0:0] +:limit-183 - [0:0] +:limit-184 - [0:0] +:limit-185 - [0:0] +:limit-186 - [0:0] +:limit-187 - [0:0] +:limit-188 - [0:0] +:limit-189 - [0:0] +:limit-19 - [0:0] +:limit-190 - [0:0] +:limit-191 - [0:0] +:limit-192 - [0:0] +:limit-193 - [0:0] +:limit-194 - [0:0] +:limit-195 - [0:0] +:limit-196 - [0:0] +:limit-197 - [0:0] +:limit-198 - [0:0] +:limit-199 - [0:0] +:limit-2 - [0:0] +:limit-20 - [0:0] +:limit-200 - [0:0] +:limit-201 - [0:0] +:limit-202 - [0:0] +:limit-203 - [0:0] +:limit-204 - [0:0] +:limit-205 - [0:0] +:limit-206 - [0:0] +:limit-207 - [0:0] +:limit-208 - [0:0] +:limit-209 - [0:0] +:limit-21 - [0:0] +:limit-210 - [0:0] +:limit-211 - [0:0] +:limit-212 - [0:0] +:limit-213 - [0:0] +:limit-214 - [0:0] +:limit-215 - [0:0] +:limit-216 - [0:0] +:limit-217 - [0:0] +:limit-218 - [0:0] +:limit-219 - [0:0] +:limit-22 - [0:0] +:limit-220 - [0:0] +:limit-221 - [0:0] +:limit-222 - [0:0] +:limit-223 - [0:0] +:limit-224 - [0:0] +:limit-225 - [0:0] +:limit-226 - [0:0] +:limit-227 - [0:0] +:limit-228 - [0:0] +:limit-229 - [0:0] +:limit-23 - [0:0] +:limit-230 - [0:0] +:limit-231 - [0:0] +:limit-232 - [0:0] +:limit-233 - [0:0] +:limit-234 - [0:0] +:limit-235 - [0:0] +:limit-236 - [0:0] +:limit-237 - [0:0] +:limit-238 - [0:0] +:limit-239 - [0:0] +:limit-24 - [0:0] +:limit-240 - [0:0] +:limit-241 - [0:0] +:limit-242 - [0:0] +:limit-243 - [0:0] +:limit-244 - [0:0] +:limit-245 - [0:0] +:limit-246 - [0:0] +:limit-247 - [0:0] +:limit-248 - [0:0] +:limit-249 - [0:0] +:limit-25 - [0:0] +:limit-250 - [0:0] +:limit-251 - [0:0] +:limit-252 - [0:0] +:limit-253 - [0:0] +:limit-254 - [0:0] +:limit-255 - [0:0] +:limit-256 - [0:0] +:limit-257 - [0:0] +:limit-258 - [0:0] +:limit-259 - [0:0] +:limit-26 - [0:0] +:limit-260 - [0:0] +:limit-261 - [0:0] +:limit-262 - [0:0] +:limit-263 - [0:0] +:limit-264 - [0:0] +:limit-265 - [0:0] +:limit-266 - [0:0] +:limit-267 - [0:0] +:limit-268 - [0:0] +:limit-269 - [0:0] +:limit-27 - [0:0] +:limit-270 - [0:0] +:limit-271 - [0:0] +:limit-272 - [0:0] +:limit-273 - [0:0] +:limit-274 - [0:0] +:limit-275 - [0:0] +:limit-276 - [0:0] +:limit-277 - [0:0] +:limit-278 - [0:0] +:limit-279 - [0:0] +:limit-28 - [0:0] +:limit-280 - [0:0] +:limit-281 - [0:0] +:limit-282 - [0:0] +:limit-283 - [0:0] +:limit-284 - [0:0] +:limit-285 - [0:0] +:limit-286 - [0:0] +:limit-287 - [0:0] +:limit-288 - [0:0] +:limit-289 - [0:0] +:limit-29 - [0:0] +:limit-290 - [0:0] +:limit-291 - [0:0] +:limit-292 - [0:0] +:limit-293 - [0:0] +:limit-294 - [0:0] +:limit-295 - [0:0] +:limit-296 - [0:0] +:limit-297 - [0:0] +:limit-298 - [0:0] +:limit-299 - [0:0] +:limit-3 - [0:0] +:limit-30 - [0:0] +:limit-300 - [0:0] +:limit-301 - [0:0] +:limit-302 - [0:0] +:limit-303 - [0:0] +:limit-304 - [0:0] +:limit-305 - [0:0] +:limit-306 - [0:0] +:limit-307 - [0:0] +:limit-308 - [0:0] +:limit-309 - [0:0] +:limit-31 - [0:0] +:limit-310 - [0:0] +:limit-311 - [0:0] +:limit-312 - [0:0] +:limit-313 - [0:0] +:limit-314 - [0:0] +:limit-315 - [0:0] +:limit-316 - [0:0] +:limit-317 - [0:0] +:limit-318 - [0:0] +:limit-319 - [0:0] +:limit-32 - [0:0] +:limit-320 - [0:0] +:limit-321 - [0:0] +:limit-322 - [0:0] +:limit-323 - [0:0] +:limit-324 - [0:0] +:limit-325 - [0:0] +:limit-326 - [0:0] +:limit-327 - [0:0] +:limit-328 - [0:0] +:limit-329 - [0:0] +:limit-33 - [0:0] +:limit-330 - [0:0] +:limit-331 - [0:0] +:limit-332 - [0:0] +:limit-333 - [0:0] +:limit-334 - [0:0] +:limit-335 - [0:0] +:limit-336 - [0:0] +:limit-337 - [0:0] +:limit-338 - [0:0] +:limit-339 - [0:0] +:limit-34 - [0:0] +:limit-340 - [0:0] +:limit-341 - [0:0] +:limit-342 - [0:0] +:limit-343 - [0:0] +:limit-344 - [0:0] +:limit-345 - [0:0] +:limit-346 - [0:0] +:limit-347 - [0:0] +:limit-348 - [0:0] +:limit-349 - [0:0] +:limit-35 - [0:0] +:limit-350 - [0:0] +:limit-351 - [0:0] +:limit-352 - [0:0] +:limit-353 - [0:0] +:limit-354 - [0:0] +:limit-355 - [0:0] +:limit-356 - [0:0] +:limit-357 - [0:0] +:limit-358 - [0:0] +:limit-359 - [0:0] +:limit-36 - [0:0] +:limit-360 - [0:0] +:limit-361 - [0:0] +:limit-362 - [0:0] +:limit-363 - [0:0] +:limit-364 - [0:0] +:limit-365 - [0:0] +:limit-366 - [0:0] +:limit-367 - [0:0] +:limit-368 - [0:0] +:limit-369 - [0:0] +:limit-37 - [0:0] +:limit-370 - [0:0] +:limit-371 - [0:0] +:limit-372 - [0:0] +:limit-373 - [0:0] +:limit-374 - [0:0] +:limit-375 - [0:0] +:limit-376 - [0:0] +:limit-378 - [0:0] +:limit-379 - [0:0] +:limit-38 - [0:0] +:limit-380 - [0:0] +:limit-382 - [0:0] +:limit-383 - [0:0] +:limit-384 - [0:0] +:limit-385 - [0:0] +:limit-386 - [0:0] +:limit-387 - [0:0] +:limit-388 - [0:0] +:limit-39 - [0:0] +:limit-390 - [0:0] +:limit-391 - [0:0] +:limit-392 - [0:0] +:limit-394 - [0:0] +:limit-395 - [0:0] +:limit-396 - [0:0] +:limit-397 - [0:0] +:limit-398 - [0:0] +:limit-399 - [0:0] +:limit-4 - [0:0] +:limit-40 - [0:0] +:limit-400 - [0:0] +:limit-402 - [0:0] +:limit-403 - [0:0] +:limit-404 - [0:0] +:limit-406 - [0:0] +:limit-407 - [0:0] +:limit-408 - [0:0] +:limit-409 - [0:0] +:limit-41 - [0:0] +:limit-410 - [0:0] +:limit-411 - [0:0] +:limit-412 - [0:0] +:limit-414 - [0:0] +:limit-415 - [0:0] +:limit-416 - [0:0] +:limit-418 - [0:0] +:limit-419 - [0:0] +:limit-42 - [0:0] +:limit-420 - [0:0] +:limit-421 - [0:0] +:limit-422 - [0:0] +:limit-423 - [0:0] +:limit-424 - [0:0] +:limit-425 - [0:0] +:limit-426 - [0:0] +:limit-427 - [0:0] +:limit-428 - [0:0] +:limit-429 - [0:0] +:limit-43 - [0:0] +:limit-430 - [0:0] +:limit-432 - [0:0] +:limit-433 - [0:0] +:limit-434 - [0:0] +:limit-436 - [0:0] +:limit-437 - [0:0] +:limit-438 - [0:0] +:limit-439 - [0:0] +:limit-44 - [0:0] +:limit-440 - [0:0] +:limit-441 - [0:0] +:limit-442 - [0:0] +:limit-444 - [0:0] +:limit-445 - [0:0] +:limit-446 - [0:0] +:limit-448 - [0:0] +:limit-449 - [0:0] +:limit-45 - [0:0] +:limit-450 - [0:0] +:limit-451 - [0:0] +:limit-452 - [0:0] +:limit-453 - [0:0] +:limit-454 - [0:0] +:limit-456 - [0:0] +:limit-457 - [0:0] +:limit-458 - [0:0] +:limit-46 - [0:0] +:limit-460 - [0:0] +:limit-461 - [0:0] +:limit-462 - [0:0] +:limit-463 - [0:0] +:limit-464 - [0:0] +:limit-465 - [0:0] +:limit-466 - [0:0] +:limit-468 - [0:0] +:limit-469 - [0:0] +:limit-47 - [0:0] +:limit-470 - [0:0] +:limit-472 - [0:0] +:limit-473 - [0:0] +:limit-474 - [0:0] +:limit-475 - [0:0] +:limit-476 - [0:0] +:limit-477 - [0:0] +:limit-478 - [0:0] +:limit-479 - [0:0] +:limit-48 - [0:0] +:limit-480 - [0:0] +:limit-481 - [0:0] +:limit-482 - [0:0] +:limit-483 - [0:0] +:limit-484 - [0:0] +:limit-486 - [0:0] +:limit-487 - [0:0] +:limit-488 - [0:0] +:limit-49 - [0:0] +:limit-490 - [0:0] +:limit-491 - [0:0] +:limit-492 - [0:0] +:limit-493 - [0:0] +:limit-494 - [0:0] +:limit-495 - [0:0] +:limit-496 - [0:0] +:limit-498 - [0:0] +:limit-499 - [0:0] +:limit-5 - [0:0] +:limit-50 - [0:0] +:limit-500 - [0:0] +:limit-502 - [0:0] +:limit-503 - [0:0] +:limit-504 - [0:0] +:limit-505 - [0:0] +:limit-506 - [0:0] +:limit-507 - [0:0] +:limit-508 - [0:0] +:limit-51 - [0:0] +:limit-510 - [0:0] +:limit-511 - [0:0] +:limit-512 - [0:0] +:limit-514 - [0:0] +:limit-515 - [0:0] +:limit-516 - [0:0] +:limit-517 - [0:0] +:limit-518 - [0:0] +:limit-519 - [0:0] +:limit-52 - [0:0] +:limit-520 - [0:0] +:limit-522 - [0:0] +:limit-523 - [0:0] +:limit-524 - [0:0] +:limit-526 - [0:0] +:limit-527 - [0:0] +:limit-528 - [0:0] +:limit-529 - [0:0] +:limit-53 - [0:0] +:limit-530 - [0:0] +:limit-531 - [0:0] +:limit-532 - [0:0] +:limit-533 - [0:0] +:limit-534 - [0:0] +:limit-535 - [0:0] +:limit-536 - [0:0] +:limit-537 - [0:0] +:limit-538 - [0:0] +:limit-54 - [0:0] +:limit-540 - [0:0] +:limit-541 - [0:0] +:limit-542 - [0:0] +:limit-544 - [0:0] +:limit-545 - [0:0] +:limit-546 - [0:0] +:limit-547 - [0:0] +:limit-548 - [0:0] +:limit-549 - [0:0] +:limit-55 - [0:0] +:limit-550 - [0:0] +:limit-552 - [0:0] +:limit-553 - [0:0] +:limit-554 - [0:0] +:limit-556 - [0:0] +:limit-557 - [0:0] +:limit-558 - [0:0] +:limit-559 - [0:0] +:limit-56 - [0:0] +:limit-560 - [0:0] +:limit-561 - [0:0] +:limit-562 - [0:0] +:limit-564 - [0:0] +:limit-565 - [0:0] +:limit-566 - [0:0] +:limit-568 - [0:0] +:limit-569 - [0:0] +:limit-57 - [0:0] +:limit-570 - [0:0] +:limit-571 - [0:0] +:limit-572 - [0:0] +:limit-573 - [0:0] +:limit-574 - [0:0] +:limit-576 - [0:0] +:limit-577 - [0:0] +:limit-578 - [0:0] +:limit-58 - [0:0] +:limit-580 - [0:0] +:limit-581 - [0:0] +:limit-582 - [0:0] +:limit-583 - [0:0] +:limit-584 - [0:0] +:limit-585 - [0:0] +:limit-586 - [0:0] +:limit-587 - [0:0] +:limit-588 - [0:0] +:limit-589 - [0:0] +:limit-59 - [0:0] +:limit-590 - [0:0] +:limit-591 - [0:0] +:limit-592 - [0:0] +:limit-594 - [0:0] +:limit-595 - [0:0] +:limit-596 - [0:0] +:limit-598 - [0:0] +:limit-599 - [0:0] +:limit-6 - [0:0] +:limit-60 - [0:0] +:limit-600 - [0:0] +:limit-601 - [0:0] +:limit-602 - [0:0] +:limit-603 - [0:0] +:limit-604 - [0:0] +:limit-606 - [0:0] +:limit-607 - [0:0] +:limit-608 - [0:0] +:limit-61 - [0:0] +:limit-610 - [0:0] +:limit-611 - [0:0] +:limit-612 - [0:0] +:limit-613 - [0:0] +:limit-614 - [0:0] +:limit-615 - [0:0] +:limit-616 - [0:0] +:limit-618 - [0:0] +:limit-619 - [0:0] +:limit-62 - [0:0] +:limit-620 - [0:0] +:limit-622 - [0:0] +:limit-623 - [0:0] +:limit-624 - [0:0] +:limit-625 - [0:0] +:limit-626 - [0:0] +:limit-627 - [0:0] +:limit-628 - [0:0] +:limit-63 - [0:0] +:limit-630 - [0:0] +:limit-631 - [0:0] +:limit-632 - [0:0] +:limit-634 - [0:0] +:limit-635 - [0:0] +:limit-636 - [0:0] +:limit-637 - [0:0] +:limit-638 - [0:0] +:limit-639 - [0:0] +:limit-64 - [0:0] +:limit-640 - [0:0] +:limit-641 - [0:0] +:limit-642 - [0:0] +:limit-643 - [0:0] +:limit-644 - [0:0] +:limit-645 - [0:0] +:limit-646 - [0:0] +:limit-648 - [0:0] +:limit-649 - [0:0] +:limit-65 - [0:0] +:limit-650 - [0:0] +:limit-652 - [0:0] +:limit-653 - [0:0] +:limit-654 - [0:0] +:limit-655 - [0:0] +:limit-656 - [0:0] +:limit-657 - [0:0] +:limit-658 - [0:0] +:limit-66 - [0:0] +:limit-660 - [0:0] +:limit-661 - [0:0] +:limit-662 - [0:0] +:limit-664 - [0:0] +:limit-665 - [0:0] +:limit-666 - [0:0] +:limit-667 - [0:0] +:limit-668 - [0:0] +:limit-669 - [0:0] +:limit-67 - [0:0] +:limit-670 - [0:0] +:limit-672 - [0:0] +:limit-673 - [0:0] +:limit-674 - [0:0] +:limit-676 - [0:0] +:limit-677 - [0:0] +:limit-678 - [0:0] +:limit-679 - [0:0] +:limit-68 - [0:0] +:limit-680 - [0:0] +:limit-681 - [0:0] +:limit-682 - [0:0] +:limit-684 - [0:0] +:limit-685 - [0:0] +:limit-686 - [0:0] +:limit-688 - [0:0] +:limit-689 - [0:0] +:limit-69 - [0:0] +:limit-690 - [0:0] +:limit-691 - [0:0] +:limit-692 - [0:0] +:limit-693 - [0:0] +:limit-694 - [0:0] +:limit-695 - [0:0] +:limit-696 - [0:0] +:limit-697 - [0:0] +:limit-698 - [0:0] +:limit-699 - [0:0] +:limit-7 - [0:0] +:limit-70 - [0:0] +:limit-700 - [0:0] +:limit-701 - [0:0] +:limit-702 - [0:0] +:limit-703 - [0:0] +:limit-704 - [0:0] +:limit-705 - [0:0] +:limit-706 - [0:0] +:limit-707 - [0:0] +:limit-708 - [0:0] +:limit-709 - [0:0] +:limit-71 - [0:0] +:limit-710 - [0:0] +:limit-711 - [0:0] +:limit-712 - [0:0] +:limit-713 - [0:0] +:limit-714 - [0:0] +:limit-715 - [0:0] +:limit-716 - [0:0] +:limit-717 - [0:0] +:limit-718 - [0:0] +:limit-719 - [0:0] +:limit-72 - [0:0] +:limit-720 - [0:0] +:limit-721 - [0:0] +:limit-722 - [0:0] +:limit-723 - [0:0] +:limit-724 - [0:0] +:limit-725 - [0:0] +:limit-726 - [0:0] +:limit-727 - [0:0] +:limit-728 - [0:0] +:limit-729 - [0:0] +:limit-73 - [0:0] +:limit-730 - [0:0] +:limit-731 - [0:0] +:limit-732 - [0:0] +:limit-733 - [0:0] +:limit-734 - [0:0] +:limit-735 - [0:0] +:limit-736 - [0:0] +:limit-737 - [0:0] +:limit-738 - [0:0] +:limit-739 - [0:0] +:limit-74 - [0:0] +:limit-740 - [0:0] +:limit-741 - [0:0] +:limit-742 - [0:0] +:limit-743 - [0:0] +:limit-744 - [0:0] +:limit-745 - [0:0] +:limit-746 - [0:0] +:limit-747 - [0:0] +:limit-748 - [0:0] +:limit-749 - [0:0] +:limit-75 - [0:0] +:limit-750 - [0:0] +:limit-751 - [0:0] +:limit-752 - [0:0] +:limit-753 - [0:0] +:limit-754 - [0:0] +:limit-755 - [0:0] +:limit-756 - [0:0] +:limit-757 - [0:0] +:limit-758 - [0:0] +:limit-759 - [0:0] +:limit-76 - [0:0] +:limit-760 - [0:0] +:limit-761 - [0:0] +:limit-762 - [0:0] +:limit-763 - [0:0] +:limit-764 - [0:0] +:limit-765 - [0:0] +:limit-766 - [0:0] +:limit-767 - [0:0] +:limit-768 - [0:0] +:limit-769 - [0:0] +:limit-77 - [0:0] +:limit-770 - [0:0] +:limit-771 - [0:0] +:limit-772 - [0:0] +:limit-773 - [0:0] +:limit-774 - [0:0] +:limit-775 - [0:0] +:limit-776 - [0:0] +:limit-777 - [0:0] +:limit-778 - [0:0] +:limit-779 - [0:0] +:limit-78 - [0:0] +:limit-780 - [0:0] +:limit-781 - [0:0] +:limit-782 - [0:0] +:limit-783 - [0:0] +:limit-784 - [0:0] +:limit-785 - [0:0] +:limit-786 - [0:0] +:limit-787 - [0:0] +:limit-788 - [0:0] +:limit-789 - [0:0] +:limit-79 - [0:0] +:limit-790 - [0:0] +:limit-791 - [0:0] +:limit-792 - [0:0] +:limit-793 - [0:0] +:limit-794 - [0:0] +:limit-795 - [0:0] +:limit-796 - [0:0] +:limit-797 - [0:0] +:limit-798 - [0:0] +:limit-799 - [0:0] +:limit-8 - [0:0] +:limit-80 - [0:0] +:limit-800 - [0:0] +:limit-801 - [0:0] +:limit-802 - [0:0] +:limit-803 - [0:0] +:limit-804 - [0:0] +:limit-805 - [0:0] +:limit-806 - [0:0] +:limit-807 - [0:0] +:limit-808 - [0:0] +:limit-809 - [0:0] +:limit-81 - [0:0] +:limit-810 - [0:0] +:limit-811 - [0:0] +:limit-812 - [0:0] +:limit-813 - [0:0] +:limit-814 - [0:0] +:limit-815 - [0:0] +:limit-816 - [0:0] +:limit-817 - [0:0] +:limit-818 - [0:0] +:limit-819 - [0:0] +:limit-82 - [0:0] +:limit-820 - [0:0] +:limit-821 - [0:0] +:limit-822 - [0:0] +:limit-823 - [0:0] +:limit-824 - [0:0] +:limit-825 - [0:0] +:limit-826 - [0:0] +:limit-827 - [0:0] +:limit-828 - [0:0] +:limit-829 - [0:0] +:limit-83 - [0:0] +:limit-830 - [0:0] +:limit-831 - [0:0] +:limit-832 - [0:0] +:limit-833 - [0:0] +:limit-834 - [0:0] +:limit-835 - [0:0] +:limit-836 - [0:0] +:limit-837 - [0:0] +:limit-838 - [0:0] +:limit-839 - [0:0] +:limit-84 - [0:0] +:limit-840 - [0:0] +:limit-841 - [0:0] +:limit-842 - [0:0] +:limit-843 - [0:0] +:limit-844 - [0:0] +:limit-845 - [0:0] +:limit-846 - [0:0] +:limit-847 - [0:0] +:limit-848 - [0:0] +:limit-849 - [0:0] +:limit-85 - [0:0] +:limit-850 - [0:0] +:limit-851 - [0:0] +:limit-852 - [0:0] +:limit-853 - [0:0] +:limit-854 - [0:0] +:limit-855 - [0:0] +:limit-856 - [0:0] +:limit-857 - [0:0] +:limit-858 - [0:0] +:limit-859 - [0:0] +:limit-86 - [0:0] +:limit-860 - [0:0] +:limit-861 - [0:0] +:limit-862 - [0:0] +:limit-863 - [0:0] +:limit-864 - [0:0] +:limit-865 - [0:0] +:limit-866 - [0:0] +:limit-867 - [0:0] +:limit-868 - [0:0] +:limit-869 - [0:0] +:limit-87 - [0:0] +:limit-870 - [0:0] +:limit-871 - [0:0] +:limit-872 - [0:0] +:limit-873 - [0:0] +:limit-874 - [0:0] +:limit-875 - [0:0] +:limit-876 - [0:0] +:limit-877 - [0:0] +:limit-878 - [0:0] +:limit-879 - [0:0] +:limit-88 - [0:0] +:limit-880 - [0:0] +:limit-881 - [0:0] +:limit-882 - [0:0] +:limit-883 - [0:0] +:limit-884 - [0:0] +:limit-885 - [0:0] +:limit-886 - [0:0] +:limit-887 - [0:0] +:limit-888 - [0:0] +:limit-889 - [0:0] +:limit-89 - [0:0] +:limit-890 - [0:0] +:limit-891 - [0:0] +:limit-892 - [0:0] +:limit-893 - [0:0] +:limit-894 - [0:0] +:limit-895 - [0:0] +:limit-896 - [0:0] +:limit-897 - [0:0] +:limit-898 - [0:0] +:limit-899 - [0:0] +:limit-9 - [0:0] +:limit-90 - [0:0] +:limit-900 - [0:0] +:limit-901 - [0:0] +:limit-902 - [0:0] +:limit-903 - [0:0] +:limit-904 - [0:0] +:limit-905 - [0:0] +:limit-906 - [0:0] +:limit-907 - [0:0] +:limit-908 - [0:0] +:limit-909 - [0:0] +:limit-91 - [0:0] +:limit-910 - [0:0] +:limit-911 - [0:0] +:limit-912 - [0:0] +:limit-913 - [0:0] +:limit-914 - [0:0] +:limit-915 - [0:0] +:limit-916 - [0:0] +:limit-917 - [0:0] +:limit-918 - [0:0] +:limit-919 - [0:0] +:limit-92 - [0:0] +:limit-920 - [0:0] +:limit-921 - [0:0] +:limit-922 - [0:0] +:limit-923 - [0:0] +:limit-924 - [0:0] +:limit-925 - [0:0] +:limit-926 - [0:0] +:limit-927 - [0:0] +:limit-928 - [0:0] +:limit-929 - [0:0] +:limit-93 - [0:0] +:limit-930 - [0:0] +:limit-931 - [0:0] +:limit-932 - [0:0] +:limit-933 - [0:0] +:limit-934 - [0:0] +:limit-935 - [0:0] +:limit-936 - [0:0] +:limit-937 - [0:0] +:limit-938 - [0:0] +:limit-939 - [0:0] +:limit-94 - [0:0] +:limit-940 - [0:0] +:limit-941 - [0:0] +:limit-942 - [0:0] +:limit-943 - [0:0] +:limit-944 - [0:0] +:limit-945 - [0:0] +:limit-946 - [0:0] +:limit-947 - [0:0] +:limit-948 - [0:0] +:limit-949 - [0:0] +:limit-95 - [0:0] +:limit-950 - [0:0] +:limit-951 - [0:0] +:limit-952 - [0:0] +:limit-953 - [0:0] +:limit-954 - [0:0] +:limit-955 - [0:0] +:limit-956 - [0:0] +:limit-957 - [0:0] +:limit-958 - [0:0] +:limit-959 - [0:0] +:limit-96 - [0:0] +:limit-960 - [0:0] +:limit-961 - [0:0] +:limit-962 - [0:0] +:limit-963 - [0:0] +:limit-964 - [0:0] +:limit-965 - [0:0] +:limit-966 - [0:0] +:limit-967 - [0:0] +:limit-968 - [0:0] +:limit-969 - [0:0] +:limit-97 - [0:0] +:limit-970 - [0:0] +:limit-971 - [0:0] +:limit-972 - [0:0] +:limit-973 - [0:0] +:limit-974 - [0:0] +:limit-975 - [0:0] +:limit-976 - [0:0] +:limit-977 - [0:0] +:limit-978 - [0:0] +:limit-979 - [0:0] +:limit-98 - [0:0] +:limit-980 - [0:0] +:limit-981 - [0:0] +:limit-982 - [0:0] +:limit-983 - [0:0] +:limit-984 - [0:0] +:limit-985 - [0:0] +:limit-986 - [0:0] +:limit-987 - [0:0] +:limit-988 - [0:0] +:limit-989 - [0:0] +:limit-99 - [0:0] +:limit-990 - [0:0] +:limit-991 - [0:0] +:limit-992 - [0:0] +:limit-993 - [0:0] +:limit-994 - [0:0] +:limit-995 - [0:0] +:limit-996 - [0:0] +:limit-997 - [0:0] +:limit-998 - [0:0] +:limit-999 - [0:0] +:logaccept-0 - [0:0] +:logaccept-1 - [0:0] +:logaccept-10 - [0:0] +:logaccept-11 - [0:0] +:logaccept-12 - [0:0] +:logaccept-13 - [0:0] +:logaccept-14 - [0:0] +:logaccept-15 - [0:0] +:logaccept-16 - [0:0] +:logaccept-17 - [0:0] +:logaccept-18 - [0:0] +:logaccept-19 - [0:0] +:logaccept-2 - [0:0] +:logaccept-20 - [0:0] +:logaccept-21 - [0:0] +:logaccept-3 - [0:0] +:logaccept-4 - [0:0] +:logaccept-5 - [0:0] +:logaccept-6 - [0:0] +:logaccept-7 - [0:0] +:logaccept-8 - [0:0] +:logaccept-9 - [0:0] +:logaccept-final-0 - [0:0] +:logaccept-final-1 - [0:0] +:logaccept-final-10 - [0:0] +:logaccept-final-11 - [0:0] +:logaccept-final-12 - [0:0] +:logaccept-final-13 - [0:0] +:logaccept-final-14 - [0:0] +:logaccept-final-15 - [0:0] +:logaccept-final-16 - [0:0] +:logaccept-final-17 - [0:0] +:logaccept-final-18 - [0:0] +:logaccept-final-19 - [0:0] +:logaccept-final-2 - [0:0] +:logaccept-final-20 - [0:0] +:logaccept-final-21 - [0:0] +:logaccept-final-22 - [0:0] +:logaccept-final-23 - [0:0] +:logaccept-final-24 - [0:0] +:logaccept-final-25 - [0:0] +:logaccept-final-26 - [0:0] +:logaccept-final-27 - [0:0] +:logaccept-final-28 - [0:0] +:logaccept-final-29 - [0:0] +:logaccept-final-3 - [0:0] +:logaccept-final-30 - [0:0] +:logaccept-final-31 - [0:0] +:logaccept-final-32 - [0:0] +:logaccept-final-33 - [0:0] +:logaccept-final-34 - [0:0] +:logaccept-final-35 - [0:0] +:logaccept-final-36 - [0:0] +:logaccept-final-37 - [0:0] +:logaccept-final-38 - [0:0] +:logaccept-final-39 - [0:0] +:logaccept-final-4 - [0:0] +:logaccept-final-40 - [0:0] +:logaccept-final-41 - [0:0] +:logaccept-final-42 - [0:0] +:logaccept-final-43 - [0:0] +:logaccept-final-44 - [0:0] +:logaccept-final-45 - [0:0] +:logaccept-final-46 - [0:0] +:logaccept-final-47 - [0:0] +:logaccept-final-48 - [0:0] +:logaccept-final-49 - [0:0] +:logaccept-final-5 - [0:0] +:logaccept-final-50 - [0:0] +:logaccept-final-51 - [0:0] +:logaccept-final-52 - [0:0] +:logaccept-final-53 - [0:0] +:logaccept-final-54 - [0:0] +:logaccept-final-55 - [0:0] +:logaccept-final-56 - [0:0] +:logaccept-final-57 - [0:0] +:logaccept-final-58 - [0:0] +:logaccept-final-59 - [0:0] +:logaccept-final-6 - [0:0] +:logaccept-final-60 - [0:0] +:logaccept-final-61 - [0:0] +:logaccept-final-7 - [0:0] +:logaccept-final-8 - [0:0] +:logaccept-final-9 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logdrop-10 - [0:0] +:logdrop-100 - [0:0] +:logdrop-101 - [0:0] +:logdrop-102 - [0:0] +:logdrop-103 - [0:0] +:logdrop-104 - [0:0] +:logdrop-105 - [0:0] +:logdrop-106 - [0:0] +:logdrop-107 - [0:0] +:logdrop-108 - [0:0] +:logdrop-109 - [0:0] +:logdrop-11 - [0:0] +:logdrop-110 - [0:0] +:logdrop-111 - [0:0] +:logdrop-112 - [0:0] +:logdrop-113 - [0:0] +:logdrop-114 - [0:0] +:logdrop-115 - [0:0] +:logdrop-116 - [0:0] +:logdrop-117 - [0:0] +:logdrop-118 - [0:0] +:logdrop-119 - [0:0] +:logdrop-12 - [0:0] +:logdrop-120 - [0:0] +:logdrop-121 - [0:0] +:logdrop-122 - [0:0] +:logdrop-123 - [0:0] +:logdrop-124 - [0:0] +:logdrop-125 - [0:0] +:logdrop-126 - [0:0] +:logdrop-127 - [0:0] +:logdrop-128 - [0:0] +:logdrop-129 - [0:0] +:logdrop-13 - [0:0] +:logdrop-130 - [0:0] +:logdrop-131 - [0:0] +:logdrop-132 - [0:0] +:logdrop-133 - [0:0] +:logdrop-134 - [0:0] +:logdrop-135 - [0:0] +:logdrop-136 - [0:0] +:logdrop-137 - [0:0] +:logdrop-138 - [0:0] +:logdrop-139 - [0:0] +:logdrop-14 - [0:0] +:logdrop-140 - [0:0] +:logdrop-141 - [0:0] +:logdrop-142 - [0:0] +:logdrop-143 - [0:0] +:logdrop-144 - [0:0] +:logdrop-145 - [0:0] +:logdrop-146 - [0:0] +:logdrop-147 - [0:0] +:logdrop-148 - [0:0] +:logdrop-149 - [0:0] +:logdrop-15 - [0:0] +:logdrop-150 - [0:0] +:logdrop-151 - [0:0] +:logdrop-152 - [0:0] +:logdrop-153 - [0:0] +:logdrop-154 - [0:0] +:logdrop-155 - [0:0] +:logdrop-156 - [0:0] +:logdrop-157 - [0:0] +:logdrop-158 - [0:0] +:logdrop-159 - [0:0] +:logdrop-16 - [0:0] +:logdrop-160 - [0:0] +:logdrop-161 - [0:0] +:logdrop-162 - [0:0] +:logdrop-163 - [0:0] +:logdrop-164 - [0:0] +:logdrop-165 - [0:0] +:logdrop-166 - [0:0] +:logdrop-167 - [0:0] +:logdrop-168 - [0:0] +:logdrop-169 - [0:0] +:logdrop-17 - [0:0] +:logdrop-170 - [0:0] +:logdrop-171 - [0:0] +:logdrop-172 - [0:0] +:logdrop-173 - [0:0] +:logdrop-174 - [0:0] +:logdrop-175 - [0:0] +:logdrop-176 - [0:0] +:logdrop-177 - [0:0] +:logdrop-178 - [0:0] +:logdrop-179 - [0:0] +:logdrop-18 - [0:0] +:logdrop-180 - [0:0] +:logdrop-181 - [0:0] +:logdrop-182 - [0:0] +:logdrop-183 - [0:0] +:logdrop-184 - [0:0] +:logdrop-185 - [0:0] +:logdrop-186 - [0:0] +:logdrop-187 - [0:0] +:logdrop-188 - [0:0] +:logdrop-189 - [0:0] +:logdrop-19 - [0:0] +:logdrop-190 - [0:0] +:logdrop-191 - [0:0] +:logdrop-192 - [0:0] +:logdrop-193 - [0:0] +:logdrop-194 - [0:0] +:logdrop-195 - [0:0] +:logdrop-196 - [0:0] +:logdrop-197 - [0:0] +:logdrop-198 - [0:0] +:logdrop-199 - [0:0] +:logdrop-2 - [0:0] +:logdrop-20 - [0:0] +:logdrop-200 - [0:0] +:logdrop-201 - [0:0] +:logdrop-202 - [0:0] +:logdrop-203 - [0:0] +:logdrop-204 - [0:0] +:logdrop-205 - [0:0] +:logdrop-206 - [0:0] +:logdrop-207 - [0:0] +:logdrop-208 - [0:0] +:logdrop-209 - [0:0] +:logdrop-21 - [0:0] +:logdrop-210 - [0:0] +:logdrop-211 - [0:0] +:logdrop-212 - [0:0] +:logdrop-213 - [0:0] +:logdrop-214 - [0:0] +:logdrop-215 - [0:0] +:logdrop-216 - [0:0] +:logdrop-217 - [0:0] +:logdrop-218 - [0:0] +:logdrop-219 - [0:0] +:logdrop-22 - [0:0] +:logdrop-220 - [0:0] +:logdrop-221 - [0:0] +:logdrop-222 - [0:0] +:logdrop-223 - [0:0] +:logdrop-224 - [0:0] +:logdrop-225 - [0:0] +:logdrop-226 - [0:0] +:logdrop-227 - [0:0] +:logdrop-228 - [0:0] +:logdrop-229 - [0:0] +:logdrop-23 - [0:0] +:logdrop-230 - [0:0] +:logdrop-231 - [0:0] +:logdrop-232 - [0:0] +:logdrop-233 - [0:0] +:logdrop-234 - [0:0] +:logdrop-235 - [0:0] +:logdrop-236 - [0:0] +:logdrop-237 - [0:0] +:logdrop-238 - [0:0] +:logdrop-239 - [0:0] +:logdrop-24 - [0:0] +:logdrop-240 - [0:0] +:logdrop-241 - [0:0] +:logdrop-242 - [0:0] +:logdrop-243 - [0:0] +:logdrop-244 - [0:0] +:logdrop-245 - [0:0] +:logdrop-246 - [0:0] +:logdrop-247 - [0:0] +:logdrop-248 - [0:0] +:logdrop-249 - [0:0] +:logdrop-25 - [0:0] +:logdrop-250 - [0:0] +:logdrop-251 - [0:0] +:logdrop-252 - [0:0] +:logdrop-253 - [0:0] +:logdrop-254 - [0:0] +:logdrop-255 - [0:0] +:logdrop-256 - [0:0] +:logdrop-257 - [0:0] +:logdrop-258 - [0:0] +:logdrop-259 - [0:0] +:logdrop-26 - [0:0] +:logdrop-260 - [0:0] +:logdrop-261 - [0:0] +:logdrop-262 - [0:0] +:logdrop-263 - [0:0] +:logdrop-264 - [0:0] +:logdrop-265 - [0:0] +:logdrop-266 - [0:0] +:logdrop-267 - [0:0] +:logdrop-268 - [0:0] +:logdrop-269 - [0:0] +:logdrop-27 - [0:0] +:logdrop-270 - [0:0] +:logdrop-271 - [0:0] +:logdrop-272 - [0:0] +:logdrop-273 - [0:0] +:logdrop-274 - [0:0] +:logdrop-275 - [0:0] +:logdrop-276 - [0:0] +:logdrop-277 - [0:0] +:logdrop-278 - [0:0] +:logdrop-279 - [0:0] +:logdrop-28 - [0:0] +:logdrop-280 - [0:0] +:logdrop-281 - [0:0] +:logdrop-282 - [0:0] +:logdrop-283 - [0:0] +:logdrop-284 - [0:0] +:logdrop-285 - [0:0] +:logdrop-286 - [0:0] +:logdrop-287 - [0:0] +:logdrop-288 - [0:0] +:logdrop-289 - [0:0] +:logdrop-29 - [0:0] +:logdrop-290 - [0:0] +:logdrop-291 - [0:0] +:logdrop-292 - [0:0] +:logdrop-293 - [0:0] +:logdrop-294 - [0:0] +:logdrop-295 - [0:0] +:logdrop-296 - [0:0] +:logdrop-297 - [0:0] +:logdrop-298 - [0:0] +:logdrop-299 - [0:0] +:logdrop-3 - [0:0] +:logdrop-30 - [0:0] +:logdrop-300 - [0:0] +:logdrop-301 - [0:0] +:logdrop-302 - [0:0] +:logdrop-303 - [0:0] +:logdrop-304 - [0:0] +:logdrop-305 - [0:0] +:logdrop-306 - [0:0] +:logdrop-307 - [0:0] +:logdrop-308 - [0:0] +:logdrop-309 - [0:0] +:logdrop-31 - [0:0] +:logdrop-310 - [0:0] +:logdrop-311 - [0:0] +:logdrop-312 - [0:0] +:logdrop-313 - [0:0] +:logdrop-314 - [0:0] +:logdrop-315 - [0:0] +:logdrop-316 - [0:0] +:logdrop-317 - [0:0] +:logdrop-318 - [0:0] +:logdrop-319 - [0:0] +:logdrop-32 - [0:0] +:logdrop-320 - [0:0] +:logdrop-321 - [0:0] +:logdrop-322 - [0:0] +:logdrop-323 - [0:0] +:logdrop-324 - [0:0] +:logdrop-325 - [0:0] +:logdrop-326 - [0:0] +:logdrop-327 - [0:0] +:logdrop-328 - [0:0] +:logdrop-329 - [0:0] +:logdrop-33 - [0:0] +:logdrop-330 - [0:0] +:logdrop-331 - [0:0] +:logdrop-332 - [0:0] +:logdrop-333 - [0:0] +:logdrop-334 - [0:0] +:logdrop-335 - [0:0] +:logdrop-336 - [0:0] +:logdrop-337 - [0:0] +:logdrop-338 - [0:0] +:logdrop-339 - [0:0] +:logdrop-34 - [0:0] +:logdrop-340 - [0:0] +:logdrop-341 - [0:0] +:logdrop-342 - [0:0] +:logdrop-343 - [0:0] +:logdrop-344 - [0:0] +:logdrop-345 - [0:0] +:logdrop-346 - [0:0] +:logdrop-347 - [0:0] +:logdrop-348 - [0:0] +:logdrop-349 - [0:0] +:logdrop-35 - [0:0] +:logdrop-350 - [0:0] +:logdrop-351 - [0:0] +:logdrop-352 - [0:0] +:logdrop-353 - [0:0] +:logdrop-354 - [0:0] +:logdrop-355 - [0:0] +:logdrop-356 - [0:0] +:logdrop-357 - [0:0] +:logdrop-358 - [0:0] +:logdrop-359 - [0:0] +:logdrop-36 - [0:0] +:logdrop-360 - [0:0] +:logdrop-361 - [0:0] +:logdrop-362 - [0:0] +:logdrop-363 - [0:0] +:logdrop-364 - [0:0] +:logdrop-365 - [0:0] +:logdrop-366 - [0:0] +:logdrop-367 - [0:0] +:logdrop-368 - [0:0] +:logdrop-369 - [0:0] +:logdrop-37 - [0:0] +:logdrop-370 - [0:0] +:logdrop-371 - [0:0] +:logdrop-372 - [0:0] +:logdrop-373 - [0:0] +:logdrop-374 - [0:0] +:logdrop-375 - [0:0] +:logdrop-376 - [0:0] +:logdrop-377 - [0:0] +:logdrop-378 - [0:0] +:logdrop-379 - [0:0] +:logdrop-38 - [0:0] +:logdrop-380 - [0:0] +:logdrop-381 - [0:0] +:logdrop-382 - [0:0] +:logdrop-383 - [0:0] +:logdrop-384 - [0:0] +:logdrop-385 - [0:0] +:logdrop-386 - [0:0] +:logdrop-387 - [0:0] +:logdrop-388 - [0:0] +:logdrop-389 - [0:0] +:logdrop-39 - [0:0] +:logdrop-390 - [0:0] +:logdrop-391 - [0:0] +:logdrop-392 - [0:0] +:logdrop-393 - [0:0] +:logdrop-394 - [0:0] +:logdrop-395 - [0:0] +:logdrop-396 - [0:0] +:logdrop-397 - [0:0] +:logdrop-398 - [0:0] +:logdrop-399 - [0:0] +:logdrop-4 - [0:0] +:logdrop-40 - [0:0] +:logdrop-400 - [0:0] +:logdrop-401 - [0:0] +:logdrop-402 - [0:0] +:logdrop-403 - [0:0] +:logdrop-404 - [0:0] +:logdrop-405 - [0:0] +:logdrop-406 - [0:0] +:logdrop-407 - [0:0] +:logdrop-408 - [0:0] +:logdrop-409 - [0:0] +:logdrop-41 - [0:0] +:logdrop-410 - [0:0] +:logdrop-411 - [0:0] +:logdrop-412 - [0:0] +:logdrop-413 - [0:0] +:logdrop-414 - [0:0] +:logdrop-415 - [0:0] +:logdrop-416 - [0:0] +:logdrop-417 - [0:0] +:logdrop-418 - [0:0] +:logdrop-419 - [0:0] +:logdrop-42 - [0:0] +:logdrop-420 - [0:0] +:logdrop-421 - [0:0] +:logdrop-422 - [0:0] +:logdrop-423 - [0:0] +:logdrop-424 - [0:0] +:logdrop-425 - [0:0] +:logdrop-426 - [0:0] +:logdrop-427 - [0:0] +:logdrop-428 - [0:0] +:logdrop-429 - [0:0] +:logdrop-43 - [0:0] +:logdrop-430 - [0:0] +:logdrop-431 - [0:0] +:logdrop-432 - [0:0] +:logdrop-433 - [0:0] +:logdrop-434 - [0:0] +:logdrop-435 - [0:0] +:logdrop-436 - [0:0] +:logdrop-437 - [0:0] +:logdrop-438 - [0:0] +:logdrop-439 - [0:0] +:logdrop-44 - [0:0] +:logdrop-440 - [0:0] +:logdrop-441 - [0:0] +:logdrop-442 - [0:0] +:logdrop-443 - [0:0] +:logdrop-444 - [0:0] +:logdrop-445 - [0:0] +:logdrop-446 - [0:0] +:logdrop-447 - [0:0] +:logdrop-448 - [0:0] +:logdrop-449 - [0:0] +:logdrop-45 - [0:0] +:logdrop-450 - [0:0] +:logdrop-451 - [0:0] +:logdrop-452 - [0:0] +:logdrop-453 - [0:0] +:logdrop-454 - [0:0] +:logdrop-455 - [0:0] +:logdrop-456 - [0:0] +:logdrop-457 - [0:0] +:logdrop-46 - [0:0] +:logdrop-47 - [0:0] +:logdrop-48 - [0:0] +:logdrop-49 - [0:0] +:logdrop-5 - [0:0] +:logdrop-50 - [0:0] +:logdrop-51 - [0:0] +:logdrop-52 - [0:0] +:logdrop-53 - [0:0] +:logdrop-54 - [0:0] +:logdrop-55 - [0:0] +:logdrop-56 - [0:0] +:logdrop-57 - [0:0] +:logdrop-58 - [0:0] +:logdrop-59 - [0:0] +:logdrop-6 - [0:0] +:logdrop-60 - [0:0] +:logdrop-61 - [0:0] +:logdrop-62 - [0:0] +:logdrop-63 - [0:0] +:logdrop-64 - [0:0] +:logdrop-65 - [0:0] +:logdrop-66 - [0:0] +:logdrop-67 - [0:0] +:logdrop-68 - [0:0] +:logdrop-69 - [0:0] +:logdrop-7 - [0:0] +:logdrop-70 - [0:0] +:logdrop-71 - [0:0] +:logdrop-72 - [0:0] +:logdrop-73 - [0:0] +:logdrop-74 - [0:0] +:logdrop-75 - [0:0] +:logdrop-76 - [0:0] +:logdrop-77 - [0:0] +:logdrop-78 - [0:0] +:logdrop-79 - [0:0] +:logdrop-8 - [0:0] +:logdrop-80 - [0:0] +:logdrop-81 - [0:0] +:logdrop-82 - [0:0] +:logdrop-83 - [0:0] +:logdrop-84 - [0:0] +:logdrop-85 - [0:0] +:logdrop-86 - [0:0] +:logdrop-87 - [0:0] +:logdrop-88 - [0:0] +:logdrop-89 - [0:0] +:logdrop-9 - [0:0] +:logdrop-90 - [0:0] +:logdrop-91 - [0:0] +:logdrop-92 - [0:0] +:logdrop-93 - [0:0] +:logdrop-94 - [0:0] +:logdrop-95 - [0:0] +:logdrop-96 - [0:0] +:logdrop-97 - [0:0] +:logdrop-98 - [0:0] +:logdrop-99 - [0:0] +:logpass-0 - [0:0] +-A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -j limit-1073 +-A FORWARD -j limit-1072 +-A FORWARD -j limit-1071 +-A FORWARD -j limit-1070 +-A FORWARD -j limit-1069 +-A FORWARD -j limit-1068 +-A FORWARD -j limit-1067 +-A FORWARD -j limit-1066 +-A FORWARD -j limit-1065 +-A FORWARD -j limit-1064 +-A FORWARD -j limit-1063 +-A FORWARD -j limit-1062 +-A FORWARD -j limit-1061 +-A FORWARD -j limit-1060 +-A FORWARD -j limit-1059 +-A FORWARD -j limit-1058 +-A FORWARD -j limit-1057 +-A FORWARD -j limit-1056 +-A FORWARD -j limit-1055 +-A FORWARD -j limit-1054 +-A FORWARD -j limit-1053 +-A FORWARD -j limit-1052 +-A FORWARD -j limit-1051 +-A FORWARD -j limit-1050 +-A FORWARD -j limit-1049 +-A FORWARD -j limit-1048 +-A FORWARD -j limit-1047 +-A FORWARD -j limit-1046 +-A FORWARD -j limit-1045 +-A FORWARD -j limit-1044 +-A FORWARD -j limit-1043 +-A FORWARD -j limit-1042 +-A FORWARD -j limit-1041 +-A FORWARD -j limit-1040 +-A FORWARD -j limit-1039 +-A FORWARD -j limit-1038 +-A FORWARD -j limit-1037 +-A FORWARD -j limit-1036 +-A FORWARD -j limit-1035 +-A FORWARD -j limit-1034 +-A FORWARD -j limit-1033 +-A FORWARD -j limit-1032 +-A FORWARD -j limit-1031 +-A FORWARD -j limit-1030 +-A FORWARD -j limit-1029 +-A FORWARD -j limit-1028 +-A FORWARD -j limit-1027 +-A FORWARD -j limit-1026 +-A FORWARD -j limit-1025 +-A FORWARD -j limit-1024 +-A FORWARD -j limit-1023 +-A FORWARD -j limit-1022 +-A FORWARD -j limit-1021 +-A FORWARD -j limit-1020 +-A FORWARD -j limit-1019 +-A FORWARD -j limit-1018 +-A FORWARD -j limit-1017 +-A FORWARD -j limit-1016 +-A FORWARD -j limit-1015 +-A FORWARD -j limit-1014 +-A FORWARD -j limit-1013 +-A FORWARD -j limit-1012 +-A FORWARD -j limit-1011 +-A FORWARD -j limit-1010 +-A FORWARD -j limit-1009 +-A FORWARD -j limit-1008 +-A FORWARD -j limit-1007 +-A FORWARD -j limit-1006 +-A FORWARD -j limit-1005 +-A FORWARD -j limit-1004 +-A FORWARD -j limit-1003 +-A FORWARD -j limit-1002 +-A FORWARD -j limit-1001 +-A FORWARD -j limit-1000 +-A FORWARD -j limit-999 +-A FORWARD -j limit-998 +-A FORWARD -j limit-997 +-A FORWARD -j limit-996 +-A FORWARD -j limit-995 +-A FORWARD -j limit-994 +-A FORWARD -j limit-993 +-A FORWARD -j limit-992 +-A FORWARD -j limit-991 +-A FORWARD -j limit-990 +-A FORWARD -j limit-989 +-A FORWARD -j limit-988 +-A FORWARD -j limit-987 +-A FORWARD -j limit-986 +-A FORWARD -j limit-985 +-A FORWARD -j limit-984 +-A FORWARD -j limit-983 +-A FORWARD -j limit-982 +-A FORWARD -j limit-981 +-A FORWARD -j limit-980 +-A FORWARD -j limit-979 +-A FORWARD -j limit-978 +-A FORWARD -j limit-977 +-A FORWARD -j limit-976 +-A FORWARD -j limit-975 +-A FORWARD -j limit-974 +-A FORWARD -j limit-973 +-A FORWARD -j limit-972 +-A FORWARD -j limit-971 +-A FORWARD -j limit-970 +-A FORWARD -j limit-969 +-A FORWARD -j limit-968 +-A FORWARD -j limit-967 +-A FORWARD -j limit-966 +-A FORWARD -j limit-965 +-A FORWARD -j limit-964 +-A FORWARD -j limit-963 +-A FORWARD -j limit-962 +-A FORWARD -j limit-961 +-A FORWARD -j limit-960 +-A FORWARD -j limit-959 +-A FORWARD -j limit-958 +-A FORWARD -j limit-957 +-A FORWARD -j limit-956 +-A FORWARD -j limit-955 +-A FORWARD -j limit-954 +-A FORWARD -j limit-953 +-A FORWARD -j limit-952 +-A FORWARD -j limit-951 +-A FORWARD -j limit-950 +-A FORWARD -j limit-949 +-A FORWARD -j limit-948 +-A FORWARD -j limit-947 +-A FORWARD -j limit-946 +-A FORWARD -j limit-945 +-A FORWARD -j limit-944 +-A FORWARD -j limit-943 +-A FORWARD -j limit-942 +-A FORWARD -j limit-941 +-A FORWARD -j limit-940 +-A FORWARD -j limit-939 +-A FORWARD -j limit-938 +-A FORWARD -j limit-937 +-A FORWARD -j limit-936 +-A FORWARD -j limit-935 +-A FORWARD -j limit-934 +-A FORWARD -j limit-933 +-A FORWARD -j limit-932 +-A FORWARD -j limit-931 +-A FORWARD -j limit-930 +-A FORWARD -j limit-929 +-A FORWARD -j limit-928 +-A FORWARD -j limit-927 +-A FORWARD -j limit-926 +-A FORWARD -j limit-925 +-A FORWARD -j limit-924 +-A FORWARD -j limit-923 +-A FORWARD -j limit-922 +-A FORWARD -j limit-921 +-A FORWARD -j limit-920 +-A FORWARD -j limit-919 +-A FORWARD -j limit-918 +-A FORWARD -j limit-917 +-A FORWARD -j limit-916 +-A FORWARD -j limit-915 +-A FORWARD -j limit-914 +-A FORWARD -j limit-913 +-A FORWARD -j limit-912 +-A FORWARD -j limit-911 +-A FORWARD -j limit-910 +-A FORWARD -j limit-909 +-A FORWARD -j limit-908 +-A FORWARD -j limit-907 +-A FORWARD -j limit-906 +-A FORWARD -j limit-905 +-A FORWARD -j limit-904 +-A FORWARD -j limit-903 +-A FORWARD -j limit-902 +-A FORWARD -j limit-901 +-A FORWARD -j limit-900 +-A FORWARD -j limit-899 +-A FORWARD -j limit-898 +-A FORWARD -j limit-897 +-A FORWARD -j limit-896 +-A FORWARD -j limit-895 +-A FORWARD -j limit-894 +-A FORWARD -j limit-893 +-A FORWARD -j limit-892 +-A FORWARD -j limit-891 +-A FORWARD -j limit-890 +-A FORWARD -j limit-889 +-A FORWARD -j limit-888 +-A FORWARD -j limit-887 +-A FORWARD -j limit-886 +-A FORWARD -j limit-885 +-A FORWARD -j limit-884 +-A FORWARD -j limit-883 +-A FORWARD -j limit-882 +-A FORWARD -j limit-881 +-A FORWARD -j limit-880 +-A FORWARD -j limit-879 +-A FORWARD -j limit-878 +-A FORWARD -j limit-877 +-A FORWARD -j limit-876 +-A FORWARD -j limit-875 +-A FORWARD -j limit-874 +-A FORWARD -j limit-873 +-A FORWARD -j limit-872 +-A FORWARD -j limit-871 +-A FORWARD -j limit-870 +-A FORWARD -j limit-869 +-A FORWARD -j limit-868 +-A FORWARD -j limit-867 +-A FORWARD -j limit-866 +-A FORWARD -j limit-865 +-A FORWARD -j limit-864 +-A FORWARD -j limit-863 +-A FORWARD -j limit-862 +-A FORWARD -j limit-861 +-A FORWARD -j limit-860 +-A FORWARD -j limit-859 +-A FORWARD -j limit-858 +-A FORWARD -j limit-857 +-A FORWARD -j limit-856 +-A FORWARD -j limit-855 +-A FORWARD -j limit-854 +-A FORWARD -j limit-853 +-A FORWARD -j limit-852 +-A FORWARD -j limit-851 +-A FORWARD -j limit-850 +-A FORWARD -j limit-849 +-A FORWARD -j limit-848 +-A FORWARD -j limit-847 +-A FORWARD -j limit-846 +-A FORWARD -j limit-845 +-A FORWARD -j limit-844 +-A FORWARD -j limit-843 +-A FORWARD -j limit-842 +-A FORWARD -j limit-841 +-A FORWARD -j limit-840 +-A FORWARD -j limit-839 +-A FORWARD -j limit-838 +-A FORWARD -j limit-837 +-A FORWARD -j limit-836 +-A FORWARD -j limit-835 +-A FORWARD -j limit-834 +-A FORWARD -j limit-833 +-A FORWARD -j limit-832 +-A FORWARD -j limit-831 +-A FORWARD -j limit-830 +-A FORWARD -j limit-829 +-A FORWARD -j limit-828 +-A FORWARD -j limit-827 +-A FORWARD -j limit-826 +-A FORWARD -j limit-825 +-A FORWARD -j limit-824 +-A FORWARD -j limit-823 +-A FORWARD -j limit-822 +-A FORWARD -j limit-821 +-A FORWARD -j limit-820 +-A FORWARD -j limit-819 +-A FORWARD -j limit-818 +-A FORWARD -j limit-817 +-A FORWARD -j limit-816 +-A FORWARD -j limit-815 +-A FORWARD -j limit-814 +-A FORWARD -j limit-813 +-A FORWARD -j limit-812 +-A FORWARD -j limit-811 +-A FORWARD -j limit-810 +-A FORWARD -j limit-809 +-A FORWARD -j limit-808 +-A FORWARD -j limit-807 +-A FORWARD -j limit-806 +-A FORWARD -j limit-805 +-A FORWARD -j limit-804 +-A FORWARD -j limit-803 +-A FORWARD -j limit-802 +-A FORWARD -j limit-801 +-A FORWARD -j limit-800 +-A FORWARD -j limit-799 +-A FORWARD -j limit-798 +-A FORWARD -j limit-797 +-A FORWARD -j limit-796 +-A FORWARD -j limit-795 +-A FORWARD -j limit-794 +-A FORWARD -j limit-793 +-A FORWARD -j limit-792 +-A FORWARD -j limit-791 +-A FORWARD -j limit-790 +-A FORWARD -j limit-789 +-A FORWARD -j limit-788 +-A FORWARD -j limit-787 +-A FORWARD -j limit-786 +-A FORWARD -j limit-785 +-A FORWARD -j limit-784 +-A FORWARD -j limit-783 +-A FORWARD -j limit-782 +-A FORWARD -j limit-781 +-A FORWARD -j limit-780 +-A FORWARD -j limit-779 +-A FORWARD -j limit-778 +-A FORWARD -j limit-777 +-A FORWARD -j limit-776 +-A FORWARD -j limit-775 +-A FORWARD -j limit-774 +-A FORWARD -j limit-773 +-A FORWARD -j limit-772 +-A FORWARD -j limit-771 +-A FORWARD -j limit-770 +-A FORWARD -j limit-769 +-A FORWARD -j limit-768 +-A FORWARD -j limit-767 +-A FORWARD -j limit-766 +-A FORWARD -j limit-765 +-A FORWARD -j limit-764 +-A FORWARD -j limit-763 +-A FORWARD -j limit-762 +-A FORWARD -j limit-761 +-A FORWARD -j limit-760 +-A FORWARD -j limit-759 +-A FORWARD -j limit-758 +-A FORWARD -j limit-757 +-A FORWARD -j limit-756 +-A FORWARD -j limit-755 +-A FORWARD -j limit-754 +-A FORWARD -j limit-753 +-A FORWARD -j limit-752 +-A FORWARD -j limit-751 +-A FORWARD -j limit-750 +-A FORWARD -j limit-749 +-A FORWARD -j limit-748 +-A FORWARD -j limit-747 +-A FORWARD -j limit-746 +-A FORWARD -j limit-745 +-A FORWARD -j limit-744 +-A FORWARD -j limit-743 +-A FORWARD -j limit-742 +-A FORWARD -j limit-741 +-A FORWARD -j limit-740 +-A FORWARD -j limit-739 +-A FORWARD -j limit-738 +-A FORWARD -j limit-737 +-A FORWARD -j limit-736 +-A FORWARD -j limit-735 +-A FORWARD -j limit-734 +-A FORWARD -j limit-733 +-A FORWARD -j limit-732 +-A FORWARD -j limit-731 +-A FORWARD -j limit-730 +-A FORWARD -j limit-729 +-A FORWARD -j limit-728 +-A FORWARD -j limit-727 +-A FORWARD -j limit-726 +-A FORWARD -j limit-725 +-A FORWARD -j limit-724 +-A FORWARD -j limit-723 +-A FORWARD -j limit-722 +-A FORWARD -j limit-721 +-A FORWARD -j limit-720 +-A FORWARD -j limit-719 +-A FORWARD -j limit-718 +-A FORWARD -j limit-717 +-A FORWARD -j limit-716 +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j limit-0 +-A FORWARD -o eth1 -d fc00::/7 -j limit-1 +-A FORWARD -o eth1 -d fc00::/7 -j limit-2 +-A FORWARD -o eth1 -d fc00::/7 -j limit-3 +-A FORWARD -o eth1 -d fc00::/7 -j limit-4 +-A FORWARD -o eth1 -d fc00::/7 -j limit-5 +-A FORWARD -o eth1 -d fc00::/7 -j limit-6 +-A FORWARD -o eth1 -d fc00::/7 -j limit-7 +-A FORWARD -o eth1 -d fc00::/7 -j limit-8 +-A FORWARD -o eth1 -d fc00::/7 -j limit-9 +-A FORWARD -o eth1 -d fc00::/7 -j limit-10 +-A FORWARD -o eth1 -d fc00::/7 -j limit-11 +-A FORWARD -o eth1 -d fc00::/7 -j limit-12 +-A FORWARD -o eth1 -d fc00::/7 -j limit-13 +-A FORWARD -o eth1 -d fc00::/7 -j limit-14 +-A FORWARD -o eth1 -d fc00::/7 -j limit-15 +-A FORWARD -o eth1 -d fc00::/7 -j limit-16 +-A FORWARD -o eth1 -d fc00::/7 -j limit-17 +-A FORWARD -o eth1 -d fc00::/7 -j limit-18 +-A FORWARD -o eth1 -d fc00::/7 -j limit-19 +-A FORWARD -o eth1 -d fc00::/7 -j limit-20 +-A FORWARD -o eth1 -d fc00::/7 -j limit-21 +-A FORWARD -o eth1 -d fc00::/7 -j limit-22 +-A FORWARD -o eth1 -d fc00::/7 -j limit-23 +-A FORWARD -o eth1 -d fc00::/7 -j limit-24 +-A FORWARD -o eth1 -d fc00::/7 -j limit-25 +-A FORWARD -o eth1 -d fc00::/7 -j limit-26 +-A FORWARD -o eth1 -d fc00::/7 -j limit-27 +-A FORWARD -o eth1 -d fc00::/7 -j limit-28 +-A FORWARD -o eth1 -d fc00::/7 -j limit-29 +-A FORWARD -o eth1 -d fc00::/7 -j limit-30 +-A FORWARD -o eth1 -d fc00::/7 -j limit-31 +-A FORWARD -o eth1 -d fc00::/7 -j limit-32 +-A FORWARD -o eth1 -d fc00::/7 -j limit-33 +-A FORWARD -o eth1 -d fc00::/7 -j limit-34 +-A FORWARD -o eth1 -d fc00::/7 -j limit-35 +-A FORWARD -o eth1 -d fc00::/7 -j limit-36 +-A FORWARD -o eth1 -d fc00::/7 -j limit-37 +-A FORWARD -o eth1 -d fc00::/7 -j limit-38 +-A FORWARD -o eth1 -d fc00::/7 -j limit-39 +-A FORWARD -o eth1 -d fc00::/7 -j limit-40 +-A FORWARD -o eth1 -d fc00::/7 -j limit-41 +-A FORWARD -o eth1 -d fc00::/7 -j limit-42 +-A FORWARD -o eth1 -d fc00::/7 -j limit-43 +-A FORWARD -o eth1 -d fc00::/7 -j limit-44 +-A FORWARD -o eth1 -d fc00::/7 -j limit-45 +-A FORWARD -o eth1 -d fc00::/7 -j limit-46 +-A FORWARD -o eth1 -d fc00::/7 -j limit-47 +-A FORWARD -o eth1 -d fc00::/7 -j limit-48 +-A FORWARD -o eth1 -d fc00::/7 -j limit-49 +-A FORWARD -o eth1 -d fc00::/7 -j limit-50 +-A FORWARD -o eth1 -d fc00::/7 -j limit-51 +-A FORWARD -o eth1 -d fc00::/7 -j limit-52 +-A FORWARD -o eth1 -d fc00::/7 -j limit-53 +-A FORWARD -o eth1 -d fc00::/7 -j limit-54 +-A FORWARD -o eth1 -d fc00::/7 -j limit-55 +-A FORWARD -o eth1 -d fc00::/7 -j limit-56 +-A FORWARD -o eth1 -d fc00::/7 -j limit-57 +-A FORWARD -o eth1 -d fc00::/7 -j limit-58 +-A FORWARD -o eth1 -d fc00::/7 -j limit-59 +-A FORWARD -o eth1 -d fc00::/7 -j limit-60 +-A FORWARD -o eth1 -d fc00::/7 -j limit-61 +-A FORWARD -o eth1 -d fc00::/7 -j limit-62 +-A FORWARD -o eth1 -d fc00::/7 -j limit-63 +-A FORWARD -o eth1 -d fc00::/7 -j limit-64 +-A FORWARD -o eth1 -d fc00::/7 -j limit-65 +-A FORWARD -o eth1 -d fc00::/7 -j limit-66 +-A FORWARD -o eth1 -d fc00::/7 -j limit-67 +-A FORWARD -o eth1 -d fc00::/7 -j limit-68 +-A FORWARD -o eth1 -d fc00::/7 -j limit-69 +-A FORWARD -o eth1 -d fc00::/7 -j limit-70 +-A FORWARD -o eth1 -d fc00::/7 -j limit-71 +-A FORWARD -o eth1 -d fc00::/7 -j limit-72 +-A FORWARD -o eth1 -d fc00::/7 -j limit-73 +-A FORWARD -o eth1 -d fc00::/7 -j limit-74 +-A FORWARD -o eth1 -d fc00::/7 -j limit-75 +-A FORWARD -o eth1 -d fc00::/7 -j limit-76 +-A FORWARD -o eth1 -d fc00::/7 -j limit-77 +-A FORWARD -o eth1 -d fc00::/7 -j limit-78 +-A FORWARD -o eth1 -d fc00::/7 -j limit-79 +-A FORWARD -o eth1 -d fc00::/7 -j limit-80 +-A FORWARD -o eth1 -d fc00::/7 -j limit-81 +-A FORWARD -o eth1 -d fc00::/7 -j limit-82 +-A FORWARD -o eth1 -d fc00::/7 -j limit-83 +-A FORWARD -o eth1 -d fc00::/7 -j limit-84 +-A FORWARD -o eth1 -d fc00::/7 -j limit-85 +-A FORWARD -o eth1 -d fc00::/7 -j limit-86 +-A FORWARD -o eth1 -d fc00::/7 -j limit-87 +-A FORWARD -o eth1 -d fc00::/7 -j limit-88 +-A FORWARD -o eth1 -d fc00::/7 -j limit-89 +-A FORWARD -o eth1 -d fc00::/7 -j limit-90 +-A FORWARD -o eth1 -d fc00::/7 -j limit-91 +-A FORWARD -o eth1 -d fc00::/7 -j limit-92 +-A FORWARD -o eth1 -d fc00::/7 -j limit-93 +-A FORWARD -o eth1 -d fc00::/7 -j limit-94 +-A FORWARD -o eth1 -d fc00::/7 -j limit-95 +-A FORWARD -o eth1 -d fc00::/7 -j limit-96 +-A FORWARD -o eth1 -d fc00::/7 -j limit-97 +-A FORWARD -o eth1 -d fc00::/7 -j limit-98 +-A FORWARD -o eth1 -d fc00::/7 -j limit-99 +-A FORWARD -o eth1 -d fc00::/7 -j limit-100 +-A FORWARD -o eth1 -d fc00::/7 -j limit-101 +-A FORWARD -o eth1 -d fc00::/7 -j limit-102 +-A FORWARD -o eth1 -d fc00::/7 -j limit-103 +-A FORWARD -o eth1 -d fc00::/7 -j limit-104 +-A FORWARD -o eth1 -d fc00::/7 -j limit-105 +-A FORWARD -o eth1 -d fc00::/7 -j limit-106 +-A FORWARD -o eth1 -d fc00::/7 -j limit-107 +-A FORWARD -o eth1 -d fc00::/7 -j limit-108 +-A FORWARD -o eth1 -d fc00::/7 -j limit-109 +-A FORWARD -o eth1 -d fc00::/7 -j limit-110 +-A FORWARD -o eth1 -d fc00::/7 -j limit-111 +-A FORWARD -o eth1 -d fc00::/7 -j limit-112 +-A FORWARD -o eth1 -d fc00::/7 -j limit-113 +-A FORWARD -o eth1 -d fc00::/7 -j limit-114 +-A FORWARD -o eth1 -d fc00::/7 -j limit-115 +-A FORWARD -o eth1 -d fc00::/7 -j limit-116 +-A FORWARD -o eth1 -d fc00::/7 -j limit-117 +-A FORWARD -o eth1 -d fc00::/7 -j limit-118 +-A FORWARD -o eth1 -d fc00::/7 -j limit-119 +-A FORWARD -o eth1 -d fc00::/7 -j limit-120 +-A FORWARD -o eth1 -d fc00::/7 -j limit-121 +-A FORWARD -o eth1 -d fc00::/7 -j limit-122 +-A FORWARD -o eth1 -d fc00::/7 -j limit-123 +-A FORWARD -o eth1 -d fc00::/7 -j limit-124 +-A FORWARD -o eth1 -d fc00::/7 -j limit-125 +-A FORWARD -o eth1 -d fc00::/7 -j limit-126 +-A FORWARD -o eth1 -d fc00::/7 -j limit-127 +-A FORWARD -o eth1 -d fc00::/7 -j limit-128 +-A FORWARD -o eth1 -d fc00::/7 -j limit-129 +-A FORWARD -o eth1 -d fc00::/7 -j limit-130 +-A FORWARD -o eth1 -d fc00::/7 -j limit-131 +-A FORWARD -o eth1 -d fc00::/7 -j limit-132 +-A FORWARD -o eth1 -d fc00::/7 -j limit-133 +-A FORWARD -o eth1 -d fc00::/7 -j limit-134 +-A FORWARD -o eth1 -d fc00::/7 -j limit-135 +-A FORWARD -o eth1 -d fc00::/7 -j limit-136 +-A FORWARD -o eth1 -d fc00::/7 -j limit-137 +-A FORWARD -o eth1 -d fc00::/7 -j limit-138 +-A FORWARD -o eth1 -d fc00::/7 -j limit-139 +-A FORWARD -o eth1 -d fc00::/7 -j limit-140 +-A FORWARD -o eth1 -d fc00::/7 -j limit-141 +-A FORWARD -o eth1 -d fc00::/7 -j limit-142 +-A FORWARD -o eth1 -d fc00::/7 -j limit-143 +-A FORWARD -o eth1 -d fc00::/7 -j limit-144 +-A FORWARD -o eth1 -d fc00::/7 -j limit-145 +-A FORWARD -o eth1 -d fc00::/7 -j limit-146 +-A FORWARD -o eth1 -d fc00::/7 -j limit-147 +-A FORWARD -o eth1 -d fc00::/7 -j limit-148 +-A FORWARD -o eth1 -d fc00::/7 -j limit-149 +-A FORWARD -o eth1 -d fc00::/7 -j limit-150 +-A FORWARD -o eth1 -d fc00::/7 -j limit-151 +-A FORWARD -o eth1 -d fc00::/7 -j limit-152 +-A FORWARD -o eth1 -d fc00::/7 -j limit-153 +-A FORWARD -o eth1 -d fc00::/7 -j limit-154 +-A FORWARD -o eth1 -d fc00::/7 -j limit-155 +-A FORWARD -o eth1 -d fc00::/7 -j limit-156 +-A FORWARD -o eth1 -d fc00::/7 -j limit-157 +-A FORWARD -o eth1 -d fc00::/7 -j limit-158 +-A FORWARD -o eth1 -d fc00::/7 -j limit-159 +-A FORWARD -o eth1 -d fc00::/7 -j limit-160 +-A FORWARD -o eth1 -d fc00::/7 -j limit-161 +-A FORWARD -o eth1 -d fc00::/7 -j limit-162 +-A FORWARD -o eth1 -d fc00::/7 -j limit-163 +-A FORWARD -o eth1 -d fc00::/7 -j limit-164 +-A FORWARD -o eth1 -d fc00::/7 -j limit-165 +-A FORWARD -o eth1 -d fc00::/7 -j limit-166 +-A FORWARD -o eth1 -d fc00::/7 -j limit-167 +-A FORWARD -o eth1 -d fc00::/7 -j limit-168 +-A FORWARD -o eth1 -d fc00::/7 -j limit-169 +-A FORWARD -o eth1 -d fc00::/7 -j limit-170 +-A FORWARD -o eth1 -d fc00::/7 -j limit-171 +-A FORWARD -o eth1 -d fc00::/7 -j limit-172 +-A FORWARD -o eth1 -d fc00::/7 -j limit-173 +-A FORWARD -o eth1 -d fc00::/7 -j limit-174 +-A FORWARD -o eth1 -d fc00::/7 -j limit-175 +-A FORWARD -o eth1 -d fc00::/7 -j limit-176 +-A FORWARD -o eth1 -d fc00::/7 -j limit-177 +-A FORWARD -o eth1 -d fc00::/7 -j limit-178 +-A FORWARD -o eth1 -d fc00::/7 -j limit-179 +-A FORWARD -o eth1 -d fc00::/7 -j limit-180 +-A FORWARD -o eth1 -d fc00::/7 -j limit-181 +-A FORWARD -o eth1 -d fc00::/7 -j limit-182 +-A FORWARD -o eth1 -d fc00::/7 -j limit-183 +-A FORWARD -o eth1 -d fc00::/7 -j limit-184 +-A FORWARD -o eth1 -d fc00::/7 -j limit-185 +-A FORWARD -o eth1 -d fc00::/7 -j limit-186 +-A FORWARD -o eth1 -d fc00::/7 -j limit-187 +-A FORWARD -o eth1 -d fc00::/7 -j limit-188 +-A FORWARD -o eth1 -d fc00::/7 -j limit-189 +-A FORWARD -o eth1 -d fc00::/7 -j limit-190 +-A FORWARD -o eth1 -d fc00::/7 -j limit-191 +-A FORWARD -o eth1 -d fc00::/7 -j limit-192 +-A FORWARD -o eth1 -d fc00::/7 -j limit-193 +-A FORWARD -o eth1 -d fc00::/7 -j limit-194 +-A FORWARD -o eth1 -d fc00::/7 -j limit-195 +-A FORWARD -o eth1 -d fc00::/7 -j limit-196 +-A FORWARD -o eth1 -d fc00::/7 -j limit-197 +-A FORWARD -o eth1 -d fc00::/7 -j limit-198 +-A FORWARD -o eth1 -d fc00::/7 -j limit-199 +-A FORWARD -o eth1 -d fc00::/7 -j limit-200 +-A FORWARD -o eth1 -d fc00::/7 -j limit-201 +-A FORWARD -o eth1 -d fc00::/7 -j limit-202 +-A FORWARD -o eth1 -d fc00::/7 -j limit-203 +-A FORWARD -o eth1 -d fc00::/7 -j limit-204 +-A FORWARD -o eth1 -d fc00::/7 -j limit-205 +-A FORWARD -o eth1 -d fc00::/7 -j limit-206 +-A FORWARD -o eth1 -d fc00::/7 -j limit-207 +-A FORWARD -o eth1 -d fc00::/7 -j limit-208 +-A FORWARD -o eth1 -d fc00::/7 -j limit-209 +-A FORWARD -o eth1 -d fc00::/7 -j limit-210 +-A FORWARD -o eth1 -d fc00::/7 -j limit-211 +-A FORWARD -o eth1 -d fc00::/7 -j limit-212 +-A FORWARD -o eth1 -d fc00::/7 -j limit-213 +-A FORWARD -o eth1 -d fc00::/7 -j limit-214 +-A FORWARD -o eth1 -d fc00::/7 -j limit-215 +-A FORWARD -o eth1 -d fc00::/7 -j limit-216 +-A FORWARD -o eth1 -d fc00::/7 -j limit-217 +-A FORWARD -o eth1 -d fc00::/7 -j limit-218 +-A FORWARD -o eth1 -d fc00::/7 -j limit-219 +-A FORWARD -o eth1 -d fc00::/7 -j limit-220 +-A FORWARD -o eth1 -d fc00::/7 -j limit-221 +-A FORWARD -o eth1 -d fc00::/7 -j limit-222 +-A FORWARD -o eth1 -d fc00::/7 -j limit-223 +-A FORWARD -o eth1 -d fc00::/7 -j limit-224 +-A FORWARD -o eth1 -d fc00::/7 -j limit-225 +-A FORWARD -o eth1 -d fc00::/7 -j limit-226 +-A FORWARD -o eth1 -d fc00::/7 -j limit-227 +-A FORWARD -o eth1 -d fc00::/7 -j limit-228 +-A FORWARD -o eth1 -d fc00::/7 -j limit-229 +-A FORWARD -o eth1 -d fc00::/7 -j limit-230 +-A FORWARD -o eth1 -d fc00::/7 -j limit-231 +-A FORWARD -o eth1 -d fc00::/7 -j limit-232 +-A FORWARD -o eth1 -d fc00::/7 -j limit-233 +-A FORWARD -o eth1 -d fc00::/7 -j limit-234 +-A FORWARD -o eth1 -d fc00::/7 -j limit-235 +-A FORWARD -o eth1 -d fc00::/7 -j limit-236 +-A FORWARD -o eth1 -d fc00::/7 -j limit-237 +-A FORWARD -o eth1 -d fc00::/7 -j limit-238 +-A FORWARD -o eth1 -d fc00::/7 -j limit-239 +-A FORWARD -o eth1 -d fc00::/7 -j limit-240 +-A FORWARD -o eth1 -d fc00::/7 -j limit-241 +-A FORWARD -o eth1 -d fc00::/7 -j limit-242 +-A FORWARD -o eth1 -d fc00::/7 -j limit-243 +-A FORWARD -o eth1 -d fc00::/7 -j limit-244 +-A FORWARD -o eth1 -d fc00::/7 -j limit-245 +-A FORWARD -o eth1 -d fc00::/7 -j limit-246 +-A FORWARD -o eth1 -d fc00::/7 -j limit-247 +-A FORWARD -o eth1 -d fc00::/7 -j limit-248 +-A FORWARD -o eth1 -d fc00::/7 -j limit-249 +-A FORWARD -o eth1 -d fc00::/7 -j limit-250 +-A FORWARD -o eth1 -d fc00::/7 -j limit-251 +-A FORWARD -o eth1 -d fc00::/7 -j limit-252 +-A FORWARD -o eth1 -d fc00::/7 -j limit-253 +-A FORWARD -o eth1 -d fc00::/7 -j limit-254 +-A FORWARD -o eth1 -d fc00::/7 -j limit-255 +-A FORWARD -o eth1 -d fc00::/7 -j limit-256 +-A FORWARD -o eth1 -d fc00::/7 -j limit-257 +-A FORWARD -o eth1 -d fc00::/7 -j limit-258 +-A FORWARD -o eth1 -d fc00::/7 -j limit-259 +-A FORWARD -o eth1 -d fc00::/7 -j limit-260 +-A FORWARD -o eth1 -d fc00::/7 -j limit-261 +-A FORWARD -o eth1 -d fc00::/7 -j limit-262 +-A FORWARD -o eth1 -d fc00::/7 -j limit-263 +-A FORWARD -o eth1 -d fc00::/7 -j limit-264 +-A FORWARD -o eth1 -d fc00::/7 -j limit-265 +-A FORWARD -o eth1 -d fc00::/7 -j limit-266 +-A FORWARD -o eth1 -d fc00::/7 -j limit-267 +-A FORWARD -o eth1 -d fc00::/7 -j limit-268 +-A FORWARD -o eth1 -d fc00::/7 -j limit-269 +-A FORWARD -o eth1 -d fc00::/7 -j limit-270 +-A FORWARD -o eth1 -d fc00::/7 -j limit-271 +-A FORWARD -o eth1 -d fc00::/7 -j limit-272 +-A FORWARD -o eth1 -d fc00::/7 -j limit-273 +-A FORWARD -o eth1 -d fc00::/7 -j limit-274 +-A FORWARD -o eth1 -d fc00::/7 -j limit-275 +-A FORWARD -o eth1 -d fc00::/7 -j limit-276 +-A FORWARD -o eth1 -d fc00::/7 -j limit-277 +-A FORWARD -o eth1 -d fc00::/7 -j limit-278 +-A FORWARD -o eth1 -d fc00::/7 -j limit-279 +-A FORWARD -o eth1 -d fc00::/7 -j limit-280 +-A FORWARD -o eth1 -d fc00::/7 -j limit-281 +-A FORWARD -o eth1 -d fc00::/7 -j limit-282 +-A FORWARD -o eth1 -d fc00::/7 -j limit-283 +-A FORWARD -o eth1 -d fc00::/7 -j limit-284 +-A FORWARD -o eth1 -d fc00::/7 -j limit-285 +-A FORWARD -o eth1 -d fc00::/7 -j limit-286 +-A FORWARD -o eth1 -d fc00::/7 -j limit-287 +-A FORWARD -o eth1 -d fc00::/7 -j limit-288 +-A FORWARD -o eth1 -d fc00::/7 -j limit-289 +-A FORWARD -o eth1 -d fc00::/7 -j limit-290 +-A FORWARD -o eth1 -d fc00::/7 -j limit-291 +-A FORWARD -o eth1 -d fc00::/7 -j limit-292 +-A FORWARD -o eth1 -d fc00::/7 -j limit-293 +-A FORWARD -o eth1 -d fc00::/7 -j limit-294 +-A FORWARD -o eth1 -d fc00::/7 -j limit-295 +-A FORWARD -o eth1 -d fc00::/7 -j limit-296 +-A FORWARD -o eth1 -d fc00::/7 -j limit-297 +-A FORWARD -o eth1 -d fc00::/7 -j limit-298 +-A FORWARD -o eth1 -d fc00::/7 -j limit-299 +-A FORWARD -o eth1 -d fc00::/7 -j limit-300 +-A FORWARD -o eth1 -d fc00::/7 -j limit-301 +-A FORWARD -o eth1 -d fc00::/7 -j limit-302 +-A FORWARD -o eth1 -d fc00::/7 -j limit-303 +-A FORWARD -o eth1 -d fc00::/7 -j limit-304 +-A FORWARD -o eth1 -d fc00::/7 -j limit-305 +-A FORWARD -o eth1 -d fc00::/7 -j limit-306 +-A FORWARD -o eth1 -d fc00::/7 -j limit-307 +-A FORWARD -o eth1 -d fc00::/7 -j limit-308 +-A FORWARD -o eth1 -d fc00::/7 -j limit-309 +-A FORWARD -o eth1 -d fc00::/7 -j limit-310 +-A FORWARD -o eth1 -d fc00::/7 -j limit-311 +-A FORWARD -o eth1 -d fc00::/7 -j limit-312 +-A FORWARD -o eth1 -d fc00::/7 -j limit-313 +-A FORWARD -o eth1 -d fc00::/7 -j limit-314 +-A FORWARD -o eth1 -d fc00::/7 -j limit-315 +-A FORWARD -o eth1 -d fc00::/7 -j limit-316 +-A FORWARD -o eth1 -d fc00::/7 -j limit-317 +-A FORWARD -o eth1 -d fc00::/7 -j limit-318 +-A FORWARD -o eth1 -d fc00::/7 -j limit-319 +-A FORWARD -o eth1 -d fc00::/7 -j limit-320 +-A FORWARD -o eth1 -d fc00::/7 -j limit-321 +-A FORWARD -o eth1 -d fc00::/7 -j limit-322 +-A FORWARD -o eth1 -d fc00::/7 -j limit-323 +-A FORWARD -o eth1 -d fc00::/7 -j limit-324 +-A FORWARD -o eth1 -d fc00::/7 -j limit-325 +-A FORWARD -o eth1 -d fc00::/7 -j limit-326 +-A FORWARD -o eth1 -d fc00::/7 -j limit-327 +-A FORWARD -o eth1 -d fc00::/7 -j limit-328 +-A FORWARD -o eth1 -d fc00::/7 -j limit-329 +-A FORWARD -o eth1 -d fc00::/7 -j limit-330 +-A FORWARD -o eth1 -d fc00::/7 -j limit-331 +-A FORWARD -o eth1 -d fc00::/7 -j limit-332 +-A FORWARD -o eth1 -d fc00::/7 -j limit-333 +-A FORWARD -o eth1 -d fc00::/7 -j limit-334 +-A FORWARD -o eth1 -d fc00::/7 -j limit-335 +-A FORWARD -o eth1 -d fc00::/7 -j limit-336 +-A FORWARD -o eth1 -d fc00::/7 -j limit-337 +-A FORWARD -o eth1 -d fc00::/7 -j limit-338 +-A FORWARD -o eth1 -d fc00::/7 -j limit-339 +-A FORWARD -o eth1 -d fc00::/7 -j limit-340 +-A FORWARD -o eth1 -d fc00::/7 -j limit-341 +-A FORWARD -o eth1 -d fc00::/7 -j limit-342 +-A FORWARD -o eth1 -d fc00::/7 -j limit-343 +-A FORWARD -o eth1 -d fc00::/7 -j limit-344 +-A FORWARD -o eth1 -d fc00::/7 -j limit-345 +-A FORWARD -o eth1 -d fc00::/7 -j limit-346 +-A FORWARD -o eth1 -d fc00::/7 -j limit-347 +-A FORWARD -o eth1 -d fc00::/7 -j limit-348 +-A FORWARD -o eth1 -d fc00::/7 -j limit-349 +-A FORWARD -o eth1 -d fc00::/7 -j limit-350 +-A FORWARD -o eth1 -d fc00::/7 -j limit-351 +-A FORWARD -o eth1 -d fc00::/7 -j limit-352 +-A FORWARD -o eth1 -d fc00::/7 -j limit-353 +-A FORWARD -o eth1 -d fc00::/7 -j limit-354 +-A FORWARD -o eth1 -d fc00::/7 -j limit-355 +-A FORWARD -o eth1 -d fc00::/7 -j limit-356 +-A FORWARD -o eth1 -d fc00::/7 -j limit-357 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-0 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-1 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-2 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-3 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-4 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-5 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-6 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-7 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-8 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-9 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-10 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-11 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-12 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-13 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-14 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-15 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-16 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-17 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-18 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-19 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-20 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-21 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-22 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-23 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-24 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-25 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-26 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-27 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-28 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-29 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-30 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-31 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-32 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-33 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-34 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-35 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-36 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-37 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-38 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-39 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-40 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-41 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-42 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-43 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-44 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-45 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-46 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-47 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-48 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-49 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-50 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-51 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-52 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-53 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-54 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-55 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-56 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-57 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-58 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-59 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-60 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-61 +-A FORWARD -j ACCEPT +-A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -m recent --name user:C --rsource --mask fe00:: --set +-A FORWARD -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set +-A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-456 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-21 +-A FORWARD -j logdrop-457 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -j limit-1073 +-A INPUT -j limit-1072 +-A INPUT -j limit-1071 +-A INPUT -j limit-1070 +-A INPUT -j limit-1069 +-A INPUT -j limit-1068 +-A INPUT -j limit-1067 +-A INPUT -j limit-1066 +-A INPUT -j limit-1065 +-A INPUT -j limit-1064 +-A INPUT -j limit-1063 +-A INPUT -j limit-1062 +-A INPUT -j limit-1061 +-A INPUT -j limit-1060 +-A INPUT -j limit-1059 +-A INPUT -j limit-1058 +-A INPUT -j limit-1057 +-A INPUT -j limit-1056 +-A INPUT -j limit-1055 +-A INPUT -j limit-1054 +-A INPUT -j limit-1053 +-A INPUT -j limit-1052 +-A INPUT -j limit-1051 +-A INPUT -j limit-1050 +-A INPUT -j limit-1049 +-A INPUT -j limit-1048 +-A INPUT -j limit-1047 +-A INPUT -j limit-1046 +-A INPUT -j limit-1045 +-A INPUT -j limit-1044 +-A INPUT -j limit-1043 +-A INPUT -j limit-1042 +-A INPUT -j limit-1041 +-A INPUT -j limit-1040 +-A INPUT -j limit-1039 +-A INPUT -j limit-1038 +-A INPUT -j limit-1037 +-A INPUT -j limit-1036 +-A INPUT -j limit-1035 +-A INPUT -j limit-1034 +-A INPUT -j limit-1033 +-A INPUT -j limit-1032 +-A INPUT -j limit-1031 +-A INPUT -j limit-1030 +-A INPUT -j limit-1029 +-A INPUT -j limit-1028 +-A INPUT -j limit-1027 +-A INPUT -j limit-1026 +-A INPUT -j limit-1025 +-A INPUT -j limit-1024 +-A INPUT -j limit-1023 +-A INPUT -j limit-1022 +-A INPUT -j limit-1021 +-A INPUT -j limit-1020 +-A INPUT -j limit-1019 +-A INPUT -j limit-1018 +-A INPUT -j limit-1017 +-A INPUT -j limit-1016 +-A INPUT -j limit-1015 +-A INPUT -j limit-1014 +-A INPUT -j limit-1013 +-A INPUT -j limit-1012 +-A INPUT -j limit-1011 +-A INPUT -j limit-1010 +-A INPUT -j limit-1009 +-A INPUT -j limit-1008 +-A INPUT -j limit-1007 +-A INPUT -j limit-1006 +-A INPUT -j limit-1005 +-A INPUT -j limit-1004 +-A INPUT -j limit-1003 +-A INPUT -j limit-1002 +-A INPUT -j limit-1001 +-A INPUT -j limit-1000 +-A INPUT -j limit-999 +-A INPUT -j limit-998 +-A INPUT -j limit-997 +-A INPUT -j limit-996 +-A INPUT -j limit-995 +-A INPUT -j limit-994 +-A INPUT -j limit-993 +-A INPUT -j limit-992 +-A INPUT -j limit-991 +-A INPUT -j limit-990 +-A INPUT -j limit-989 +-A INPUT -j limit-988 +-A INPUT -j limit-987 +-A INPUT -j limit-986 +-A INPUT -j limit-985 +-A INPUT -j limit-984 +-A INPUT -j limit-983 +-A INPUT -j limit-982 +-A INPUT -j limit-981 +-A INPUT -j limit-980 +-A INPUT -j limit-979 +-A INPUT -j limit-978 +-A INPUT -j limit-977 +-A INPUT -j limit-976 +-A INPUT -j limit-975 +-A INPUT -j limit-974 +-A INPUT -j limit-973 +-A INPUT -j limit-972 +-A INPUT -j limit-971 +-A INPUT -j limit-970 +-A INPUT -j limit-969 +-A INPUT -j limit-968 +-A INPUT -j limit-967 +-A INPUT -j limit-966 +-A INPUT -j limit-965 +-A INPUT -j limit-964 +-A INPUT -j limit-963 +-A INPUT -j limit-962 +-A INPUT -j limit-961 +-A INPUT -j limit-960 +-A INPUT -j limit-959 +-A INPUT -j limit-958 +-A INPUT -j limit-957 +-A INPUT -j limit-956 +-A INPUT -j limit-955 +-A INPUT -j limit-954 +-A INPUT -j limit-953 +-A INPUT -j limit-952 +-A INPUT -j limit-951 +-A INPUT -j limit-950 +-A INPUT -j limit-949 +-A INPUT -j limit-948 +-A INPUT -j limit-947 +-A INPUT -j limit-946 +-A INPUT -j limit-945 +-A INPUT -j limit-944 +-A INPUT -j limit-943 +-A INPUT -j limit-942 +-A INPUT -j limit-941 +-A INPUT -j limit-940 +-A INPUT -j limit-939 +-A INPUT -j limit-938 +-A INPUT -j limit-937 +-A INPUT -j limit-936 +-A INPUT -j limit-935 +-A INPUT -j limit-934 +-A INPUT -j limit-933 +-A INPUT -j limit-932 +-A INPUT -j limit-931 +-A INPUT -j limit-930 +-A INPUT -j limit-929 +-A INPUT -j limit-928 +-A INPUT -j limit-927 +-A INPUT -j limit-926 +-A INPUT -j limit-925 +-A INPUT -j limit-924 +-A INPUT -j limit-923 +-A INPUT -j limit-922 +-A INPUT -j limit-921 +-A INPUT -j limit-920 +-A INPUT -j limit-919 +-A INPUT -j limit-918 +-A INPUT -j limit-917 +-A INPUT -j limit-916 +-A INPUT -j limit-915 +-A INPUT -j limit-914 +-A INPUT -j limit-913 +-A INPUT -j limit-912 +-A INPUT -j limit-911 +-A INPUT -j limit-910 +-A INPUT -j limit-909 +-A INPUT -j limit-908 +-A INPUT -j limit-907 +-A INPUT -j limit-906 +-A INPUT -j limit-905 +-A INPUT -j limit-904 +-A INPUT -j limit-903 +-A INPUT -j limit-902 +-A INPUT -j limit-901 +-A INPUT -j limit-900 +-A INPUT -j limit-899 +-A INPUT -j limit-898 +-A INPUT -j limit-897 +-A INPUT -j limit-896 +-A INPUT -j limit-895 +-A INPUT -j limit-894 +-A INPUT -j limit-893 +-A INPUT -j limit-892 +-A INPUT -j limit-891 +-A INPUT -j limit-890 +-A INPUT -j limit-889 +-A INPUT -j limit-888 +-A INPUT -j limit-887 +-A INPUT -j limit-886 +-A INPUT -j limit-885 +-A INPUT -j limit-884 +-A INPUT -j limit-883 +-A INPUT -j limit-882 +-A INPUT -j limit-881 +-A INPUT -j limit-880 +-A INPUT -j limit-879 +-A INPUT -j limit-878 +-A INPUT -j limit-877 +-A INPUT -j limit-876 +-A INPUT -j limit-875 +-A INPUT -j limit-874 +-A INPUT -j limit-873 +-A INPUT -j limit-872 +-A INPUT -j limit-871 +-A INPUT -j limit-870 +-A INPUT -j limit-869 +-A INPUT -j limit-868 +-A INPUT -j limit-867 +-A INPUT -j limit-866 +-A INPUT -j limit-865 +-A INPUT -j limit-864 +-A INPUT -j limit-863 +-A INPUT -j limit-862 +-A INPUT -j limit-861 +-A INPUT -j limit-860 +-A INPUT -j limit-859 +-A INPUT -j limit-858 +-A INPUT -j limit-857 +-A INPUT -j limit-856 +-A INPUT -j limit-855 +-A INPUT -j limit-854 +-A INPUT -j limit-853 +-A INPUT -j limit-852 +-A INPUT -j limit-851 +-A INPUT -j limit-850 +-A INPUT -j limit-849 +-A INPUT -j limit-848 +-A INPUT -j limit-847 +-A INPUT -j limit-846 +-A INPUT -j limit-845 +-A INPUT -j limit-844 +-A INPUT -j limit-843 +-A INPUT -j limit-842 +-A INPUT -j limit-841 +-A INPUT -j limit-840 +-A INPUT -j limit-839 +-A INPUT -j limit-838 +-A INPUT -j limit-837 +-A INPUT -j limit-836 +-A INPUT -j limit-835 +-A INPUT -j limit-834 +-A INPUT -j limit-833 +-A INPUT -j limit-832 +-A INPUT -j limit-831 +-A INPUT -j limit-830 +-A INPUT -j limit-829 +-A INPUT -j limit-828 +-A INPUT -j limit-827 +-A INPUT -j limit-826 +-A INPUT -j limit-825 +-A INPUT -j limit-824 +-A INPUT -j limit-823 +-A INPUT -j limit-822 +-A INPUT -j limit-821 +-A INPUT -j limit-820 +-A INPUT -j limit-819 +-A INPUT -j limit-818 +-A INPUT -j limit-817 +-A INPUT -j limit-816 +-A INPUT -j limit-815 +-A INPUT -j limit-814 +-A INPUT -j limit-813 +-A INPUT -j limit-812 +-A INPUT -j limit-811 +-A INPUT -j limit-810 +-A INPUT -j limit-809 +-A INPUT -j limit-808 +-A INPUT -j limit-807 +-A INPUT -j limit-806 +-A INPUT -j limit-805 +-A INPUT -j limit-804 +-A INPUT -j limit-803 +-A INPUT -j limit-802 +-A INPUT -j limit-801 +-A INPUT -j limit-800 +-A INPUT -j limit-799 +-A INPUT -j limit-798 +-A INPUT -j limit-797 +-A INPUT -j limit-796 +-A INPUT -j limit-795 +-A INPUT -j limit-794 +-A INPUT -j limit-793 +-A INPUT -j limit-792 +-A INPUT -j limit-791 +-A INPUT -j limit-790 +-A INPUT -j limit-789 +-A INPUT -j limit-788 +-A INPUT -j limit-787 +-A INPUT -j limit-786 +-A INPUT -j limit-785 +-A INPUT -j limit-784 +-A INPUT -j limit-783 +-A INPUT -j limit-782 +-A INPUT -j limit-781 +-A INPUT -j limit-780 +-A INPUT -j limit-779 +-A INPUT -j limit-778 +-A INPUT -j limit-777 +-A INPUT -j limit-776 +-A INPUT -j limit-775 +-A INPUT -j limit-774 +-A INPUT -j limit-773 +-A INPUT -j limit-772 +-A INPUT -j limit-771 +-A INPUT -j limit-770 +-A INPUT -j limit-769 +-A INPUT -j limit-768 +-A INPUT -j limit-767 +-A INPUT -j limit-766 +-A INPUT -j limit-765 +-A INPUT -j limit-764 +-A INPUT -j limit-763 +-A INPUT -j limit-762 +-A INPUT -j limit-761 +-A INPUT -j limit-760 +-A INPUT -j limit-759 +-A INPUT -j limit-758 +-A INPUT -j limit-757 +-A INPUT -j limit-756 +-A INPUT -j limit-755 +-A INPUT -j limit-754 +-A INPUT -j limit-753 +-A INPUT -j limit-752 +-A INPUT -j limit-751 +-A INPUT -j limit-750 +-A INPUT -j limit-749 +-A INPUT -j limit-748 +-A INPUT -j limit-747 +-A INPUT -j limit-746 +-A INPUT -j limit-745 +-A INPUT -j limit-744 +-A INPUT -j limit-743 +-A INPUT -j limit-742 +-A INPUT -j limit-741 +-A INPUT -j limit-740 +-A INPUT -j limit-739 +-A INPUT -j limit-738 +-A INPUT -j limit-737 +-A INPUT -j limit-736 +-A INPUT -j limit-735 +-A INPUT -j limit-734 +-A INPUT -j limit-733 +-A INPUT -j limit-732 +-A INPUT -j limit-731 +-A INPUT -j limit-730 +-A INPUT -j limit-729 +-A INPUT -j limit-728 +-A INPUT -j limit-727 +-A INPUT -j limit-726 +-A INPUT -j limit-725 +-A INPUT -j limit-724 +-A INPUT -j limit-723 +-A INPUT -j limit-722 +-A INPUT -j limit-721 +-A INPUT -j limit-720 +-A INPUT -j limit-719 +-A INPUT -j limit-718 +-A INPUT -j limit-717 +-A INPUT -j limit-716 +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-0 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-1 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-2 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-3 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-4 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-5 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-6 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-7 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-8 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-9 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-10 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-11 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-12 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-13 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-14 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-15 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-16 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-17 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-18 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-19 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-20 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-21 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-22 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-23 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-24 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-25 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-26 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-27 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-28 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-29 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-30 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-31 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-32 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-33 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-34 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-35 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-36 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-37 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-38 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-39 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-40 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-41 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-42 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-43 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-44 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-45 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-46 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-47 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-48 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-49 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-50 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-51 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-52 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-53 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-54 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-55 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-56 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-57 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-58 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-59 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-60 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-61 +-A INPUT -j ACCEPT +-A INPUT -i eth0 -j limit-1074 +-A INPUT -i eth0 -j limit-1075 +-A INPUT -i eth0 -j limit-1076 +-A INPUT -i eth0 -j limit-1077 +-A INPUT -i eth0 -j limit-1078 +-A INPUT -i eth0 -j limit-1079 +-A INPUT -i eth0 -j limit-1080 +-A INPUT -i eth0 -j limit-1081 +-A INPUT -i eth0 -j limit-1082 +-A INPUT -i eth0 -j limit-1083 +-A INPUT -i eth0 -j limit-1084 +-A INPUT -i eth0 -j limit-1085 +-A INPUT -i eth0 -j limit-1086 +-A INPUT -i eth0 -j limit-1087 +-A INPUT -i eth0 -j limit-1088 +-A INPUT -i eth0 -j limit-1089 +-A INPUT -i eth0 -j limit-1090 +-A INPUT -i eth0 -j limit-1091 +-A INPUT -i eth0 -j limit-1092 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-361 +-A INPUT -i eth0 -j limit-1094 +-A INPUT -i eth0 -j limit-1095 +-A INPUT -i eth0 -j limit-1096 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-365 +-A INPUT -i eth0 -j limit-1098 +-A INPUT -i eth0 -j limit-1099 +-A INPUT -i eth0 -j limit-1100 +-A INPUT -i eth0 -j limit-1101 +-A INPUT -i eth0 -j limit-1102 +-A INPUT -i eth0 -j limit-1103 +-A INPUT -i eth0 -j limit-1104 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-373 +-A INPUT -i eth0 -j limit-1106 +-A INPUT -i eth0 -j limit-1107 +-A INPUT -i eth0 -j limit-1108 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-377 +-A INPUT -i eth0 -j limit-1110 +-A INPUT -i eth0 -j limit-1111 +-A INPUT -i eth0 -j limit-1112 +-A INPUT -i eth0 -j limit-1113 +-A INPUT -i eth0 -j limit-1114 +-A INPUT -i eth0 -j limit-1115 +-A INPUT -i eth0 -j limit-1116 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-385 +-A INPUT -i eth0 -j limit-1118 +-A INPUT -i eth0 -j limit-1119 +-A INPUT -i eth0 -j limit-1120 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-389 +-A INPUT -i eth0 -j limit-1122 +-A INPUT -i eth0 -j limit-1123 +-A INPUT -i eth0 -j limit-1124 +-A INPUT -i eth0 -j limit-1125 +-A INPUT -i eth0 -j limit-1126 +-A INPUT -i eth0 -j limit-1127 +-A INPUT -i eth0 -j limit-1128 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-397 +-A INPUT -i eth0 -j limit-1130 +-A INPUT -i eth0 -j limit-1131 +-A INPUT -i eth0 -j limit-1132 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-401 +-A INPUT -i eth0 -j limit-1134 +-A INPUT -i eth0 -j limit-1135 +-A INPUT -i eth0 -j limit-1136 +-A INPUT -i eth0 -j limit-1137 +-A INPUT -i eth0 -j limit-1138 +-A INPUT -i eth0 -j limit-1139 +-A INPUT -i eth0 -j limit-1140 +-A INPUT -i eth0 -j limit-1141 +-A INPUT -i eth0 -j limit-1142 +-A INPUT -i eth0 -j limit-1143 +-A INPUT -i eth0 -j limit-1144 +-A INPUT -i eth0 -j limit-1145 +-A INPUT -i eth0 -j limit-1146 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1148 +-A INPUT -i eth0 -j limit-1149 +-A INPUT -i eth0 -j limit-1150 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1152 +-A INPUT -i eth0 -j limit-1153 +-A INPUT -i eth0 -j limit-1154 +-A INPUT -i eth0 -j limit-1155 +-A INPUT -i eth0 -j limit-1156 +-A INPUT -i eth0 -j limit-1157 +-A INPUT -i eth0 -j limit-1158 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1160 +-A INPUT -i eth0 -j limit-1161 +-A INPUT -i eth0 -j limit-1162 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1164 +-A INPUT -i eth0 -j limit-1165 +-A INPUT -i eth0 -j limit-1166 +-A INPUT -i eth0 -j limit-1167 +-A INPUT -i eth0 -j limit-1168 +-A INPUT -i eth0 -j limit-1169 +-A INPUT -i eth0 -j limit-1170 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1172 +-A INPUT -i eth0 -j limit-1173 +-A INPUT -i eth0 -j limit-1174 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1176 +-A INPUT -i eth0 -j limit-1177 +-A INPUT -i eth0 -j limit-1178 +-A INPUT -i eth0 -j limit-1179 +-A INPUT -i eth0 -j limit-1180 +-A INPUT -i eth0 -j limit-1181 +-A INPUT -i eth0 -j limit-1182 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1184 +-A INPUT -i eth0 -j limit-1185 +-A INPUT -i eth0 -j limit-1186 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1188 +-A INPUT -i eth0 -j limit-1189 +-A INPUT -i eth0 -j limit-1190 +-A INPUT -i eth0 -j limit-1191 +-A INPUT -i eth0 -j limit-1192 +-A INPUT -i eth0 -j limit-1193 +-A INPUT -i eth0 -j limit-1194 +-A INPUT -i eth0 -j limit-1195 +-A INPUT -i eth0 -j limit-1196 +-A INPUT -i eth0 -j limit-1197 +-A INPUT -i eth0 -j limit-1198 +-A INPUT -i eth0 -j limit-1199 +-A INPUT -i eth0 -j limit-1200 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1202 +-A INPUT -i eth0 -j limit-1203 +-A INPUT -i eth0 -j limit-1204 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1206 +-A INPUT -i eth0 -j limit-1207 +-A INPUT -i eth0 -j limit-1208 +-A INPUT -i eth0 -j limit-1209 +-A INPUT -i eth0 -j limit-1210 +-A INPUT -i eth0 -j limit-1211 +-A INPUT -i eth0 -j limit-1212 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1214 +-A INPUT -i eth0 -j limit-1215 +-A INPUT -i eth0 -j limit-1216 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1218 +-A INPUT -i eth0 -j limit-1219 +-A INPUT -i eth0 -j limit-1220 +-A INPUT -i eth0 -j limit-1221 +-A INPUT -i eth0 -j limit-1222 +-A INPUT -i eth0 -j limit-1223 +-A INPUT -i eth0 -j limit-1224 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1226 +-A INPUT -i eth0 -j limit-1227 +-A INPUT -i eth0 -j limit-1228 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1230 +-A INPUT -i eth0 -j limit-1231 +-A INPUT -i eth0 -j limit-1232 +-A INPUT -i eth0 -j limit-1233 +-A INPUT -i eth0 -j limit-1234 +-A INPUT -i eth0 -j limit-1235 +-A INPUT -i eth0 -j limit-1236 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1238 +-A INPUT -i eth0 -j limit-1239 +-A INPUT -i eth0 -j limit-1240 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-1242 +-A INPUT -i eth0 -j limit-1243 +-A INPUT -i eth0 -j limit-1244 +-A INPUT -i eth0 -j limit-1245 +-A INPUT -i eth0 -j limit-1246 +-A INPUT -i eth0 -j limit-1247 +-A INPUT -i eth0 -j limit-1248 +-A INPUT -i eth0 -j limit-1249 +-A INPUT -i eth0 -j limit-1250 +-A INPUT -i eth0 -j limit-1251 +-A INPUT -i eth0 -j limit-1252 +-A INPUT -i eth0 -j limit-1253 +-A INPUT -i eth0 -j limit-1254 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 +-A INPUT -i eth0 -j limit-1256 +-A INPUT -i eth0 -j limit-1257 +-A INPUT -i eth0 -j limit-1258 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 +-A INPUT -i eth0 -j limit-1260 +-A INPUT -i eth0 -j limit-1261 +-A INPUT -i eth0 -j limit-1262 +-A INPUT -i eth0 -j limit-1263 +-A INPUT -i eth0 -j limit-1264 +-A INPUT -i eth0 -j limit-1265 +-A INPUT -i eth0 -j limit-1266 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-427 +-A INPUT -i eth0 -j limit-1268 +-A INPUT -i eth0 -j limit-1269 +-A INPUT -i eth0 -j limit-1270 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-431 +-A INPUT -i eth0 -j limit-1272 +-A INPUT -i eth0 -j limit-1273 +-A INPUT -i eth0 -j limit-1274 +-A INPUT -i eth0 -j limit-1275 +-A INPUT -i eth0 -j limit-1276 +-A INPUT -i eth0 -j limit-1277 +-A INPUT -i eth0 -j limit-1278 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 +-A INPUT -i eth0 -j limit-1280 +-A INPUT -i eth0 -j limit-1281 +-A INPUT -i eth0 -j limit-1282 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-443 +-A INPUT -i eth0 -j limit-1284 +-A INPUT -i eth0 -j limit-1285 +-A INPUT -i eth0 -j limit-1286 +-A INPUT -i eth0 -j limit-1287 +-A INPUT -i eth0 -j limit-1288 +-A INPUT -i eth0 -j limit-1289 +-A INPUT -i eth0 -j limit-1290 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 +-A INPUT -i eth0 -j limit-1292 +-A INPUT -i eth0 -j limit-1293 +-A INPUT -i eth0 -j limit-1294 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 +-A INPUT -i eth0 -j limit-1296 +-A INPUT -i eth0 -j limit-1297 +-A INPUT -i eth0 -j limit-1298 +-A INPUT -i eth0 -j limit-1299 +-A INPUT -i eth0 -j limit-1300 +-A INPUT -i eth0 -j limit-1301 +-A INPUT -i eth0 -j limit-1302 +-A INPUT -i eth0 -j limit-1303 +-A INPUT -i eth0 -j limit-1304 +-A INPUT -i eth0 -j limit-1305 +-A INPUT -i eth0 -j limit-1306 +-A INPUT -i eth0 -j limit-1307 +-A INPUT -i eth0 -j limit-1308 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1310 +-A INPUT -i eth0 -j limit-1311 +-A INPUT -i eth0 -j limit-1312 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1314 +-A INPUT -i eth0 -j limit-1315 +-A INPUT -i eth0 -j limit-1316 +-A INPUT -i eth0 -j limit-1317 +-A INPUT -i eth0 -j limit-1318 +-A INPUT -i eth0 -j limit-1319 +-A INPUT -i eth0 -j limit-1320 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1322 +-A INPUT -i eth0 -j limit-1323 +-A INPUT -i eth0 -j limit-1324 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1326 +-A INPUT -i eth0 -j limit-1327 +-A INPUT -i eth0 -j limit-1328 +-A INPUT -i eth0 -j limit-1329 +-A INPUT -i eth0 -j limit-1330 +-A INPUT -i eth0 -j limit-1331 +-A INPUT -i eth0 -j limit-1332 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1334 +-A INPUT -i eth0 -j limit-1335 +-A INPUT -i eth0 -j limit-1336 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1338 +-A INPUT -i eth0 -j limit-1339 +-A INPUT -i eth0 -j limit-1340 +-A INPUT -i eth0 -j limit-1341 +-A INPUT -i eth0 -j limit-1342 +-A INPUT -i eth0 -j limit-1343 +-A INPUT -i eth0 -j limit-1344 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1346 +-A INPUT -i eth0 -j limit-1347 +-A INPUT -i eth0 -j limit-1348 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1350 +-A INPUT -i eth0 -j limit-1351 +-A INPUT -i eth0 -j limit-1352 +-A INPUT -i eth0 -j limit-1353 +-A INPUT -i eth0 -j limit-1354 +-A INPUT -i eth0 -j limit-1355 +-A INPUT -i eth0 -j limit-1356 +-A INPUT -i eth0 -j limit-1357 +-A INPUT -i eth0 -j limit-1358 +-A INPUT -i eth0 -j limit-1359 +-A INPUT -i eth0 -j limit-1360 +-A INPUT -i eth0 -j limit-1361 +-A INPUT -i eth0 -j limit-1362 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1364 +-A INPUT -i eth0 -j limit-1365 +-A INPUT -i eth0 -j limit-1366 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1368 +-A INPUT -i eth0 -j limit-1369 +-A INPUT -i eth0 -j limit-1370 +-A INPUT -i eth0 -j limit-1371 +-A INPUT -i eth0 -j limit-1372 +-A INPUT -i eth0 -j limit-1373 +-A INPUT -i eth0 -j limit-1374 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1376 +-A INPUT -i eth0 -j limit-1377 +-A INPUT -i eth0 -j limit-1378 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1380 +-A INPUT -i eth0 -j limit-1381 +-A INPUT -i eth0 -j limit-1382 +-A INPUT -i eth0 -j limit-1383 +-A INPUT -i eth0 -j limit-1384 +-A INPUT -i eth0 -j limit-1385 +-A INPUT -i eth0 -j limit-1386 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1388 +-A INPUT -i eth0 -j limit-1389 +-A INPUT -i eth0 -j limit-1390 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1392 +-A INPUT -i eth0 -j limit-1393 +-A INPUT -i eth0 -j limit-1394 +-A INPUT -i eth0 -j limit-1395 +-A INPUT -i eth0 -j limit-1396 +-A INPUT -i eth0 -j limit-1397 +-A INPUT -i eth0 -j limit-1398 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1400 +-A INPUT -i eth0 -j limit-1401 +-A INPUT -i eth0 -j limit-1402 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1404 +-A INPUT -i eth0 -j limit-1405 +-A INPUT -i eth0 -j limit-1406 +-A INPUT -i eth0 -j limit-1407 +-A INPUT -i eth0 -j limit-1408 +-A INPUT -i eth0 -j limit-1409 +-A INPUT -i eth0 -j limit-1410 +-A INPUT -i eth0 -j limit-1411 +-A INPUT -i eth0 -j limit-1412 +-A INPUT -i eth0 -j limit-1413 +-A INPUT -i eth0 -j limit-1414 +-A INPUT -i eth0 -j limit-1415 +-A INPUT -i eth0 -j limit-1416 +-A INPUT -i eth0 -j limit-1417 +-A INPUT -i eth0 -j limit-1418 +-A INPUT -i eth0 -j limit-1419 +-A INPUT -i eth0 -j limit-1420 +-A INPUT -i eth0 -j limit-1421 +-A INPUT -i eth0 -j limit-1422 +-A INPUT -i eth0 -j limit-1423 +-A INPUT -i eth0 -j limit-1424 +-A INPUT -i eth0 -j limit-1425 +-A INPUT -i eth0 -j limit-1426 +-A INPUT -i eth0 -j limit-1427 +-A INPUT -i eth0 -j limit-1428 +-A INPUT -i eth0 -j limit-1429 +-A INPUT -i eth0 -j limit-1430 +-A INPUT -i eth0 -j limit-1431 +-A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:C --rsource --mask fe00:: --set +-A INPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set +-A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -j ACCEPT +-A INPUT -j logdrop-456 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-21 +-A INPUT -j logdrop-457 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -j limit-1073 +-A OUTPUT -j limit-1072 +-A OUTPUT -j limit-1071 +-A OUTPUT -j limit-1070 +-A OUTPUT -j limit-1069 +-A OUTPUT -j limit-1068 +-A OUTPUT -j limit-1067 +-A OUTPUT -j limit-1066 +-A OUTPUT -j limit-1065 +-A OUTPUT -j limit-1064 +-A OUTPUT -j limit-1063 +-A OUTPUT -j limit-1062 +-A OUTPUT -j limit-1061 +-A OUTPUT -j limit-1060 +-A OUTPUT -j limit-1059 +-A OUTPUT -j limit-1058 +-A OUTPUT -j limit-1057 +-A OUTPUT -j limit-1056 +-A OUTPUT -j limit-1055 +-A OUTPUT -j limit-1054 +-A OUTPUT -j limit-1053 +-A OUTPUT -j limit-1052 +-A OUTPUT -j limit-1051 +-A OUTPUT -j limit-1050 +-A OUTPUT -j limit-1049 +-A OUTPUT -j limit-1048 +-A OUTPUT -j limit-1047 +-A OUTPUT -j limit-1046 +-A OUTPUT -j limit-1045 +-A OUTPUT -j limit-1044 +-A OUTPUT -j limit-1043 +-A OUTPUT -j limit-1042 +-A OUTPUT -j limit-1041 +-A OUTPUT -j limit-1040 +-A OUTPUT -j limit-1039 +-A OUTPUT -j limit-1038 +-A OUTPUT -j limit-1037 +-A OUTPUT -j limit-1036 +-A OUTPUT -j limit-1035 +-A OUTPUT -j limit-1034 +-A OUTPUT -j limit-1033 +-A OUTPUT -j limit-1032 +-A OUTPUT -j limit-1031 +-A OUTPUT -j limit-1030 +-A OUTPUT -j limit-1029 +-A OUTPUT -j limit-1028 +-A OUTPUT -j limit-1027 +-A OUTPUT -j limit-1026 +-A OUTPUT -j limit-1025 +-A OUTPUT -j limit-1024 +-A OUTPUT -j limit-1023 +-A OUTPUT -j limit-1022 +-A OUTPUT -j limit-1021 +-A OUTPUT -j limit-1020 +-A OUTPUT -j limit-1019 +-A OUTPUT -j limit-1018 +-A OUTPUT -j limit-1017 +-A OUTPUT -j limit-1016 +-A OUTPUT -j limit-1015 +-A OUTPUT -j limit-1014 +-A OUTPUT -j limit-1013 +-A OUTPUT -j limit-1012 +-A OUTPUT -j limit-1011 +-A OUTPUT -j limit-1010 +-A OUTPUT -j limit-1009 +-A OUTPUT -j limit-1008 +-A OUTPUT -j limit-1007 +-A OUTPUT -j limit-1006 +-A OUTPUT -j limit-1005 +-A OUTPUT -j limit-1004 +-A OUTPUT -j limit-1003 +-A OUTPUT -j limit-1002 +-A OUTPUT -j limit-1001 +-A OUTPUT -j limit-1000 +-A OUTPUT -j limit-999 +-A OUTPUT -j limit-998 +-A OUTPUT -j limit-997 +-A OUTPUT -j limit-996 +-A OUTPUT -j limit-995 +-A OUTPUT -j limit-994 +-A OUTPUT -j limit-993 +-A OUTPUT -j limit-992 +-A OUTPUT -j limit-991 +-A OUTPUT -j limit-990 +-A OUTPUT -j limit-989 +-A OUTPUT -j limit-988 +-A OUTPUT -j limit-987 +-A OUTPUT -j limit-986 +-A OUTPUT -j limit-985 +-A OUTPUT -j limit-984 +-A OUTPUT -j limit-983 +-A OUTPUT -j limit-982 +-A OUTPUT -j limit-981 +-A OUTPUT -j limit-980 +-A OUTPUT -j limit-979 +-A OUTPUT -j limit-978 +-A OUTPUT -j limit-977 +-A OUTPUT -j limit-976 +-A OUTPUT -j limit-975 +-A OUTPUT -j limit-974 +-A OUTPUT -j limit-973 +-A OUTPUT -j limit-972 +-A OUTPUT -j limit-971 +-A OUTPUT -j limit-970 +-A OUTPUT -j limit-969 +-A OUTPUT -j limit-968 +-A OUTPUT -j limit-967 +-A OUTPUT -j limit-966 +-A OUTPUT -j limit-965 +-A OUTPUT -j limit-964 +-A OUTPUT -j limit-963 +-A OUTPUT -j limit-962 +-A OUTPUT -j limit-961 +-A OUTPUT -j limit-960 +-A OUTPUT -j limit-959 +-A OUTPUT -j limit-958 +-A OUTPUT -j limit-957 +-A OUTPUT -j limit-956 +-A OUTPUT -j limit-955 +-A OUTPUT -j limit-954 +-A OUTPUT -j limit-953 +-A OUTPUT -j limit-952 +-A OUTPUT -j limit-951 +-A OUTPUT -j limit-950 +-A OUTPUT -j limit-949 +-A OUTPUT -j limit-948 +-A OUTPUT -j limit-947 +-A OUTPUT -j limit-946 +-A OUTPUT -j limit-945 +-A OUTPUT -j limit-944 +-A OUTPUT -j limit-943 +-A OUTPUT -j limit-942 +-A OUTPUT -j limit-941 +-A OUTPUT -j limit-940 +-A OUTPUT -j limit-939 +-A OUTPUT -j limit-938 +-A OUTPUT -j limit-937 +-A OUTPUT -j limit-936 +-A OUTPUT -j limit-935 +-A OUTPUT -j limit-934 +-A OUTPUT -j limit-933 +-A OUTPUT -j limit-932 +-A OUTPUT -j limit-931 +-A OUTPUT -j limit-930 +-A OUTPUT -j limit-929 +-A OUTPUT -j limit-928 +-A OUTPUT -j limit-927 +-A OUTPUT -j limit-926 +-A OUTPUT -j limit-925 +-A OUTPUT -j limit-924 +-A OUTPUT -j limit-923 +-A OUTPUT -j limit-922 +-A OUTPUT -j limit-921 +-A OUTPUT -j limit-920 +-A OUTPUT -j limit-919 +-A OUTPUT -j limit-918 +-A OUTPUT -j limit-917 +-A OUTPUT -j limit-916 +-A OUTPUT -j limit-915 +-A OUTPUT -j limit-914 +-A OUTPUT -j limit-913 +-A OUTPUT -j limit-912 +-A OUTPUT -j limit-911 +-A OUTPUT -j limit-910 +-A OUTPUT -j limit-909 +-A OUTPUT -j limit-908 +-A OUTPUT -j limit-907 +-A OUTPUT -j limit-906 +-A OUTPUT -j limit-905 +-A OUTPUT -j limit-904 +-A OUTPUT -j limit-903 +-A OUTPUT -j limit-902 +-A OUTPUT -j limit-901 +-A OUTPUT -j limit-900 +-A OUTPUT -j limit-899 +-A OUTPUT -j limit-898 +-A OUTPUT -j limit-897 +-A OUTPUT -j limit-896 +-A OUTPUT -j limit-895 +-A OUTPUT -j limit-894 +-A OUTPUT -j limit-893 +-A OUTPUT -j limit-892 +-A OUTPUT -j limit-891 +-A OUTPUT -j limit-890 +-A OUTPUT -j limit-889 +-A OUTPUT -j limit-888 +-A OUTPUT -j limit-887 +-A OUTPUT -j limit-886 +-A OUTPUT -j limit-885 +-A OUTPUT -j limit-884 +-A OUTPUT -j limit-883 +-A OUTPUT -j limit-882 +-A OUTPUT -j limit-881 +-A OUTPUT -j limit-880 +-A OUTPUT -j limit-879 +-A OUTPUT -j limit-878 +-A OUTPUT -j limit-877 +-A OUTPUT -j limit-876 +-A OUTPUT -j limit-875 +-A OUTPUT -j limit-874 +-A OUTPUT -j limit-873 +-A OUTPUT -j limit-872 +-A OUTPUT -j limit-871 +-A OUTPUT -j limit-870 +-A OUTPUT -j limit-869 +-A OUTPUT -j limit-868 +-A OUTPUT -j limit-867 +-A OUTPUT -j limit-866 +-A OUTPUT -j limit-865 +-A OUTPUT -j limit-864 +-A OUTPUT -j limit-863 +-A OUTPUT -j limit-862 +-A OUTPUT -j limit-861 +-A OUTPUT -j limit-860 +-A OUTPUT -j limit-859 +-A OUTPUT -j limit-858 +-A OUTPUT -j limit-857 +-A OUTPUT -j limit-856 +-A OUTPUT -j limit-855 +-A OUTPUT -j limit-854 +-A OUTPUT -j limit-853 +-A OUTPUT -j limit-852 +-A OUTPUT -j limit-851 +-A OUTPUT -j limit-850 +-A OUTPUT -j limit-849 +-A OUTPUT -j limit-848 +-A OUTPUT -j limit-847 +-A OUTPUT -j limit-846 +-A OUTPUT -j limit-845 +-A OUTPUT -j limit-844 +-A OUTPUT -j limit-843 +-A OUTPUT -j limit-842 +-A OUTPUT -j limit-841 +-A OUTPUT -j limit-840 +-A OUTPUT -j limit-839 +-A OUTPUT -j limit-838 +-A OUTPUT -j limit-837 +-A OUTPUT -j limit-836 +-A OUTPUT -j limit-835 +-A OUTPUT -j limit-834 +-A OUTPUT -j limit-833 +-A OUTPUT -j limit-832 +-A OUTPUT -j limit-831 +-A OUTPUT -j limit-830 +-A OUTPUT -j limit-829 +-A OUTPUT -j limit-828 +-A OUTPUT -j limit-827 +-A OUTPUT -j limit-826 +-A OUTPUT -j limit-825 +-A OUTPUT -j limit-824 +-A OUTPUT -j limit-823 +-A OUTPUT -j limit-822 +-A OUTPUT -j limit-821 +-A OUTPUT -j limit-820 +-A OUTPUT -j limit-819 +-A OUTPUT -j limit-818 +-A OUTPUT -j limit-817 +-A OUTPUT -j limit-816 +-A OUTPUT -j limit-815 +-A OUTPUT -j limit-814 +-A OUTPUT -j limit-813 +-A OUTPUT -j limit-812 +-A OUTPUT -j limit-811 +-A OUTPUT -j limit-810 +-A OUTPUT -j limit-809 +-A OUTPUT -j limit-808 +-A OUTPUT -j limit-807 +-A OUTPUT -j limit-806 +-A OUTPUT -j limit-805 +-A OUTPUT -j limit-804 +-A OUTPUT -j limit-803 +-A OUTPUT -j limit-802 +-A OUTPUT -j limit-801 +-A OUTPUT -j limit-800 +-A OUTPUT -j limit-799 +-A OUTPUT -j limit-798 +-A OUTPUT -j limit-797 +-A OUTPUT -j limit-796 +-A OUTPUT -j limit-795 +-A OUTPUT -j limit-794 +-A OUTPUT -j limit-793 +-A OUTPUT -j limit-792 +-A OUTPUT -j limit-791 +-A OUTPUT -j limit-790 +-A OUTPUT -j limit-789 +-A OUTPUT -j limit-788 +-A OUTPUT -j limit-787 +-A OUTPUT -j limit-786 +-A OUTPUT -j limit-785 +-A OUTPUT -j limit-784 +-A OUTPUT -j limit-783 +-A OUTPUT -j limit-782 +-A OUTPUT -j limit-781 +-A OUTPUT -j limit-780 +-A OUTPUT -j limit-779 +-A OUTPUT -j limit-778 +-A OUTPUT -j limit-777 +-A OUTPUT -j limit-776 +-A OUTPUT -j limit-775 +-A OUTPUT -j limit-774 +-A OUTPUT -j limit-773 +-A OUTPUT -j limit-772 +-A OUTPUT -j limit-771 +-A OUTPUT -j limit-770 +-A OUTPUT -j limit-769 +-A OUTPUT -j limit-768 +-A OUTPUT -j limit-767 +-A OUTPUT -j limit-766 +-A OUTPUT -j limit-765 +-A OUTPUT -j limit-764 +-A OUTPUT -j limit-763 +-A OUTPUT -j limit-762 +-A OUTPUT -j limit-761 +-A OUTPUT -j limit-760 +-A OUTPUT -j limit-759 +-A OUTPUT -j limit-758 +-A OUTPUT -j limit-757 +-A OUTPUT -j limit-756 +-A OUTPUT -j limit-755 +-A OUTPUT -j limit-754 +-A OUTPUT -j limit-753 +-A OUTPUT -j limit-752 +-A OUTPUT -j limit-751 +-A OUTPUT -j limit-750 +-A OUTPUT -j limit-749 +-A OUTPUT -j limit-748 +-A OUTPUT -j limit-747 +-A OUTPUT -j limit-746 +-A OUTPUT -j limit-745 +-A OUTPUT -j limit-744 +-A OUTPUT -j limit-743 +-A OUTPUT -j limit-742 +-A OUTPUT -j limit-741 +-A OUTPUT -j limit-740 +-A OUTPUT -j limit-739 +-A OUTPUT -j limit-738 +-A OUTPUT -j limit-737 +-A OUTPUT -j limit-736 +-A OUTPUT -j limit-735 +-A OUTPUT -j limit-734 +-A OUTPUT -j limit-733 +-A OUTPUT -j limit-732 +-A OUTPUT -j limit-731 +-A OUTPUT -j limit-730 +-A OUTPUT -j limit-729 +-A OUTPUT -j limit-728 +-A OUTPUT -j limit-727 +-A OUTPUT -j limit-726 +-A OUTPUT -j limit-725 +-A OUTPUT -j limit-724 +-A OUTPUT -j limit-723 +-A OUTPUT -j limit-722 +-A OUTPUT -j limit-721 +-A OUTPUT -j limit-720 +-A OUTPUT -j limit-719 +-A OUTPUT -j limit-718 +-A OUTPUT -j limit-717 +-A OUTPUT -j limit-716 +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j limit-0 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-2 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-3 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-4 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-5 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-6 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-7 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-8 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-9 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-10 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-11 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-12 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-13 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-14 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-15 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-16 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-17 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-18 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-19 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-20 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-21 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-22 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-23 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-24 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-25 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-26 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-27 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-28 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-29 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-30 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-31 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-32 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-33 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-34 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-35 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-36 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-37 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-38 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-39 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-40 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-41 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-42 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-43 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-44 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-45 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-46 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-47 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-48 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-49 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-50 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-51 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-52 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-53 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-54 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-55 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-56 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-57 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-58 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-59 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-60 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-61 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-62 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-63 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-64 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-65 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-66 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-67 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-68 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-69 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-70 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-71 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-72 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-73 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-74 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-75 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-76 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-77 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-78 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-79 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-80 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-81 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-82 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-83 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-84 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-85 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-86 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-87 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-88 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-89 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-90 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-91 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-92 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-93 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-94 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-95 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-96 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-97 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-98 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-99 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-100 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-101 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-102 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-103 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-104 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-105 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-106 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-107 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-108 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-109 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-110 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-111 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-112 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-113 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-114 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-115 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-116 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-117 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-118 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-119 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-120 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-121 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-122 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-123 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-124 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-125 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-126 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-127 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-128 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-129 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-130 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-131 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-132 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-133 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-134 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-135 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-136 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-137 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-138 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-139 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-140 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-141 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-142 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-143 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-144 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-145 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-146 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-147 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-148 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-149 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-150 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-151 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-152 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-153 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-154 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-155 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-156 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-157 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-158 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-159 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-160 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-161 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-162 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-163 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-164 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-165 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-166 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-167 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-168 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-169 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-170 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-171 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-172 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-173 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-174 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-175 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-176 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-177 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-178 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-179 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-180 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-181 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-182 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-183 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-184 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-185 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-186 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-187 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-188 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-189 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-190 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-191 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-192 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-193 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-194 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-195 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-196 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-197 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-198 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-199 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-200 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-201 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-202 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-203 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-204 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-205 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-206 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-207 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-208 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-209 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-210 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-211 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-212 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-213 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-214 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-215 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-216 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-217 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-218 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-219 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-220 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-221 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-222 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-223 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-224 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-225 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-226 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-227 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-228 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-229 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-230 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-231 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-232 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-233 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-234 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-235 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-236 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-237 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-238 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-239 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-240 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-241 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-242 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-243 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-244 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-245 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-246 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-247 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-248 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-249 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-250 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-251 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-252 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-253 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-254 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-255 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-256 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-257 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-258 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-259 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-260 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-261 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-262 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-263 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-264 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-265 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-266 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-267 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-268 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-269 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-270 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-271 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-272 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-273 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-274 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-275 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-276 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-277 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-278 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-279 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-280 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-281 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-282 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-283 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-284 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-285 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-286 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-287 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-288 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-289 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-290 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-291 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-292 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-293 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-294 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-295 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-296 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-297 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-298 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-299 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-300 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-301 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-302 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-303 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-304 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-305 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-306 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-307 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-308 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-309 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-310 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-311 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-312 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-313 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-314 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-315 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-316 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-317 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-318 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-319 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-320 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-321 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-322 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-323 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-324 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-325 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-326 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-327 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-328 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-329 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-330 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-331 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-332 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-333 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-334 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-335 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-336 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-337 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-338 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-339 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-340 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-341 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-342 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-343 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-344 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-345 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-346 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-347 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-348 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-349 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-350 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-351 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-352 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-353 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-354 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-355 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-356 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-357 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-358 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-359 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-360 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-361 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-362 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-363 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-364 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-365 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-366 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-367 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-368 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-369 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-370 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-371 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-372 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-373 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-374 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-375 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-376 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-378 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-379 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-380 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-382 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-383 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-384 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-385 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-386 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-387 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-388 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-390 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-391 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-392 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-394 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-395 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-396 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-397 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-398 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-399 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-400 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-402 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-403 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-404 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-406 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-407 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-408 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-409 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-410 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-411 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-412 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-414 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-415 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-416 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-418 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-419 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-420 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-421 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-422 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-423 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-424 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-425 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-426 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-427 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-428 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-429 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-430 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-432 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-433 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-434 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-436 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-437 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-438 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-439 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-440 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-441 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-442 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-444 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-445 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-446 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-448 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-449 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-450 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-451 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-452 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-453 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-454 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-456 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-457 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-458 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-460 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-461 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-462 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-463 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-464 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-465 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-466 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-468 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-469 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-470 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-472 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-473 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-474 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-475 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-476 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-477 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-478 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-479 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-480 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-481 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-482 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-483 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-484 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-486 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-487 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-488 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-490 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-491 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-492 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-493 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-494 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-495 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-496 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-498 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-499 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-500 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-502 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-503 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-504 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-505 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-506 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-507 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-508 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-510 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-511 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-512 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-514 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-515 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-516 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-517 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-518 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-519 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-520 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-522 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-523 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-524 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-526 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-527 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-528 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-529 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-530 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-531 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-532 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-533 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-534 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-535 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-536 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-537 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-538 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-540 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-541 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-542 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-544 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-545 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-546 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-547 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-548 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-549 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-550 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-552 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-553 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-554 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-556 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-557 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-558 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-559 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-560 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-561 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-562 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-564 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-565 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-566 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-568 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-569 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-570 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-571 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-572 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-573 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-574 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-576 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-577 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-578 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-580 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-581 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-582 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-583 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-584 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-585 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-586 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-587 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-588 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-589 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-590 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-591 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-592 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-594 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-595 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-596 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-598 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-599 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-600 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-601 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-602 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-603 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-604 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-606 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-607 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-608 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-610 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-611 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-612 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-613 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-614 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-615 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-616 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-618 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-619 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-620 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-622 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-623 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-624 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-625 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-626 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-627 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-628 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-630 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-631 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-632 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-634 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-635 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-636 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-637 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-638 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-639 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-640 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-641 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-642 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-643 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-644 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-645 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-646 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-648 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-649 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-650 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-652 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-653 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-654 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-655 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-656 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-657 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-658 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-660 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-661 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-662 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-664 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-665 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-666 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-667 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-668 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-669 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-670 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-672 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-673 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-674 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-676 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-677 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-678 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-679 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-680 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-681 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-682 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-684 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-685 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-686 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-688 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-689 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-690 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-691 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-692 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-693 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-694 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-695 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-696 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-697 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-698 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-699 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-700 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-701 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-702 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-703 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-704 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-705 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-706 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-707 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-708 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-709 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-710 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-711 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-712 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-713 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-714 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-715 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-1 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-2 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-3 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-4 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-5 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-6 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-7 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-8 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-9 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-10 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-11 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-12 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-13 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-14 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-15 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-16 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-17 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-18 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-19 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-20 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-21 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-22 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-23 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-24 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-25 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-26 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-27 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-28 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-29 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-30 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-31 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-32 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-33 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-34 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-35 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-36 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-37 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-38 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-39 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-40 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-41 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-42 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-43 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-44 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-45 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-46 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-47 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-48 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-49 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-51 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-52 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-53 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-54 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-55 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-56 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-57 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-58 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-59 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-60 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-61 +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:C --rsource --mask fe00:: --set +-A OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set +-A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-456 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-21 +-A OUTPUT -j logdrop-457 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-0 +-A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 +-A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-100 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-100 -j ACCEPT +-A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1007 -m limit --limit 1/second -j LOG +-A limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-101 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1019 -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1022 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1022 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1023 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1023 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1024 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1024 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1025 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1025 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1026 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1026 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1027 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1027 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1029 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-103 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1031 -m limit --limit 1/second -j LOG +-A limit-1032 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1033 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1034 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1035 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1036 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1037 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1038 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1039 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-104 -m limit --limit 1/second -j LOG +-A limit-104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1040 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1041 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1043 -m limit --limit 1/second -j LOG +-A limit-1044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1045 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1046 -j RETURN +-A limit-1046 -m limit --limit 1/second -j LOG +-A limit-1046 -j DROP +-A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1047 -j RETURN +-A limit-1047 -m limit --limit 1/second -j LOG +-A limit-1047 -j DROP +-A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j RETURN +-A limit-1048 -m limit --limit 1/second -j LOG +-A limit-1048 -j DROP +-A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1049 -j RETURN +-A limit-1049 -m limit --limit 1/second -j LOG +-A limit-1049 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1050 -j RETURN +-A limit-1050 -m limit --limit 1/second -j LOG +-A limit-1050 -j DROP +-A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1051 -j RETURN +-A limit-1051 -m limit --limit 1/second -j LOG +-A limit-1051 -j DROP +-A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j RETURN +-A limit-1052 -m limit --limit 1/second -j LOG +-A limit-1052 -j DROP +-A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1053 -j RETURN +-A limit-1053 -m limit --limit 1/second -j LOG +-A limit-1053 -j DROP +-A limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1054 -j RETURN +-A limit-1054 -j DROP +-A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1055 -j RETURN +-A limit-1055 -j DROP +-A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j RETURN +-A limit-1056 -j DROP +-A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1057 -j RETURN +-A limit-1057 -j DROP +-A limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1058 -j RETURN +-A limit-1058 -j DROP +-A limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1059 -j RETURN +-A limit-1059 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j RETURN +-A limit-1060 -j DROP +-A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1061 -j RETURN +-A limit-1061 -j DROP +-A limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1062 -j RETURN +-A limit-1062 -m limit --limit 1/second -j LOG +-A limit-1062 -j DROP +-A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1063 -j RETURN +-A limit-1063 -m limit --limit 1/second -j LOG +-A limit-1063 -j DROP +-A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j RETURN +-A limit-1064 -m limit --limit 1/second -j LOG +-A limit-1064 -j DROP +-A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1065 -j RETURN +-A limit-1065 -m limit --limit 1/second -j LOG +-A limit-1065 -j DROP +-A limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1066 -j RETURN +-A limit-1066 -j DROP +-A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1067 -j RETURN +-A limit-1067 -j DROP +-A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j RETURN +-A limit-1068 -j DROP +-A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1069 -j RETURN +-A limit-1069 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1070 -j RETURN +-A limit-1070 -j DROP +-A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1071 -j RETURN +-A limit-1071 -j DROP +-A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j RETURN +-A limit-1072 -j DROP +-A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1073 -j RETURN +-A limit-1073 -j DROP +-A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-342 +-A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-343 +-A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-344 +-A limit-1076 -m limit --limit 1/second -j LOG +-A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-345 +-A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-346 +-A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-347 +-A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-108 -j ACCEPT +-A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-348 +-A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-349 +-A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-350 +-A limit-1082 -m limit --limit 1/second -j LOG +-A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-351 +-A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-352 +-A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-353 +-A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-354 +-A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-355 +-A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-356 +-A limit-1088 -m limit --limit 1/second -j LOG +-A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-357 +-A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-109 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-358 +-A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-359 +-A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-360 +-A limit-1092 -j ACCEPT +-A limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-362 +-A limit-1094 -m limit --limit 1/second -j LOG +-A limit-1094 -j ACCEPT +-A limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-363 +-A limit-1095 -m limit --limit 1/second -j LOG +-A limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-364 +-A limit-1096 -j ACCEPT +-A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-366 +-A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-367 +-A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 +-A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-110 -m limit --limit 1/second -j LOG +-A limit-110 -j ACCEPT +-A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-368 +-A limit-1100 -m limit --limit 1/second -j LOG +-A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-369 +-A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-370 +-A limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-371 +-A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-372 +-A limit-1104 -j ACCEPT +-A limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-374 +-A limit-1106 -m limit --limit 1/second -j LOG +-A limit-1106 -j ACCEPT +-A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-375 +-A limit-1107 -m limit --limit 1/second -j LOG +-A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-376 +-A limit-1108 -j ACCEPT +-A limit-111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-111 -m limit --limit 1/second -j LOG +-A limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-378 +-A limit-1110 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-379 +-A limit-1111 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-380 +-A limit-1112 -m limit --limit 1/second -j LOG +-A limit-1112 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-381 +-A limit-1113 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-382 +-A limit-1114 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-383 +-A limit-1115 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-384 +-A limit-1116 -j ACCEPT +-A limit-1118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-386 +-A limit-1118 -m limit --limit 1/second -j LOG +-A limit-1118 -j ACCEPT +-A limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-387 +-A limit-1119 -m limit --limit 1/second -j LOG +-A limit-112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-112 -j ACCEPT +-A limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-388 +-A limit-1120 -j ACCEPT +-A limit-1122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-390 +-A limit-1122 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-391 +-A limit-1123 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-392 +-A limit-1124 -m limit --limit 1/second -j LOG +-A limit-1124 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-393 +-A limit-1125 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-394 +-A limit-1126 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-395 +-A limit-1127 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1128 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-396 +-A limit-1128 -j ACCEPT +-A limit-113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1130 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-398 +-A limit-1130 -m limit --limit 1/second -j LOG +-A limit-1130 -j ACCEPT +-A limit-1131 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-399 +-A limit-1131 -m limit --limit 1/second -j LOG +-A limit-1132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-400 +-A limit-1132 -j ACCEPT +-A limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1135 -m recent --name limit-1135 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1135 -m recent --name limit-1135 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1136 -m recent --name limit-1136 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1136 -m limit --limit 1/second -j LOG +-A limit-1136 -m recent --name limit-1136 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1137 -m recent --name limit-1137 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1137 -m recent --name limit-1137 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1138 -m recent --name limit-1138 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1138 -m recent --name limit-1138 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1139 -m recent --name limit-1139 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1139 -m recent --name limit-1139 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1142 -m limit --limit 1/second -j LOG +-A limit-1142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1145 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1145 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1146 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1146 -j ACCEPT +-A limit-1148 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1148 -m limit --limit 1/second -j LOG +-A limit-1148 -j ACCEPT +-A limit-1149 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1149 -m limit --limit 1/second -j LOG +-A limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1150 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1150 -j ACCEPT +-A limit-1152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1154 -m limit --limit 1/second -j LOG +-A limit-1154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1158 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1158 -j ACCEPT +-A limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-116 -m limit --limit 1/second -j LOG +-A limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1160 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1160 -m limit --limit 1/second -j LOG +-A limit-1160 -j ACCEPT +-A limit-1161 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1161 -m limit --limit 1/second -j LOG +-A limit-1162 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1162 -j ACCEPT +-A limit-1164 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1164 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1165 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1165 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1166 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1166 -m limit --limit 1/second -j LOG +-A limit-1166 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1167 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1167 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1168 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1168 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1169 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1169 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1170 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1170 -j ACCEPT +-A limit-1172 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1172 -m limit --limit 1/second -j LOG +-A limit-1172 -j ACCEPT +-A limit-1173 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1173 -m limit --limit 1/second -j LOG +-A limit-1174 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1174 -j ACCEPT +-A limit-1176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1177 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1178 -m limit --limit 1/second -j LOG +-A limit-1178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1179 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1180 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1180 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1181 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1181 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1182 -j ACCEPT +-A limit-1184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1184 -m limit --limit 1/second -j LOG +-A limit-1184 -j ACCEPT +-A limit-1185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1185 -m limit --limit 1/second -j LOG +-A limit-1186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1186 -j ACCEPT +-A limit-1188 -m recent --name limit-1188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1188 -m recent --name limit-1188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1189 -m recent --name limit-1189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1189 -m recent --name limit-1189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1190 -m recent --name limit-1190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1190 -m limit --limit 1/second -j LOG +-A limit-1190 -m recent --name limit-1190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1191 -m recent --name limit-1191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1191 -m recent --name limit-1191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1192 -m recent --name limit-1192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1192 -m recent --name limit-1192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1193 -m recent --name limit-1193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1193 -m recent --name limit-1193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1196 -m limit --limit 1/second -j LOG +-A limit-1196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 +-A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1200 -j ACCEPT +-A limit-1202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1202 -m limit --limit 1/second -j LOG +-A limit-1202 -j ACCEPT +-A limit-1203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1203 -m limit --limit 1/second -j LOG +-A limit-1204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1204 -j ACCEPT +-A limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1208 -m limit --limit 1/second -j LOG +-A limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1212 -j ACCEPT +-A limit-1214 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1214 -m limit --limit 1/second -j LOG +-A limit-1214 -j ACCEPT +-A limit-1215 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1215 -m limit --limit 1/second -j LOG +-A limit-1216 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1216 -j ACCEPT +-A limit-1218 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1218 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1219 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1219 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-122 -m limit --limit 1/second -j LOG +-A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1220 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1220 -m limit --limit 1/second -j LOG +-A limit-1220 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1221 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1221 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1222 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1222 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1223 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1223 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1224 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1224 -j ACCEPT +-A limit-1226 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1226 -m limit --limit 1/second -j LOG +-A limit-1226 -j ACCEPT +-A limit-1227 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1227 -m limit --limit 1/second -j LOG +-A limit-1228 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1228 -j ACCEPT +-A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1230 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1230 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1231 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1231 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1232 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1232 -m limit --limit 1/second -j LOG +-A limit-1232 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1233 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1233 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1234 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1234 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1235 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1235 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1236 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1236 -j ACCEPT +-A limit-1238 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1238 -m limit --limit 1/second -j LOG +-A limit-1238 -j ACCEPT +-A limit-1239 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1239 -m limit --limit 1/second -j LOG +-A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1240 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1240 -j ACCEPT +-A limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-402 +-A limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 +-A limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 +-A limit-1244 -m limit --limit 1/second -j LOG +-A limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 +-A limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 +-A limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 +-A limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 +-A limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 +-A limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-410 +-A limit-1250 -m limit --limit 1/second -j LOG +-A limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-411 +-A limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-412 +-A limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-413 +-A limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-414 +-A limit-1254 -j ACCEPT +-A limit-1256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 +-A limit-1256 -m limit --limit 1/second -j LOG +-A limit-1256 -j ACCEPT +-A limit-1257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 +-A limit-1257 -m limit --limit 1/second -j LOG +-A limit-1258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 +-A limit-1258 -j ACCEPT +-A limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-126 -j ACCEPT +-A limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-420 +-A limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-421 +-A limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-422 +-A limit-1262 -m limit --limit 1/second -j LOG +-A limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-423 +-A limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-424 +-A limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-425 +-A limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-426 +-A limit-1266 -j ACCEPT +-A limit-1268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-428 +-A limit-1268 -m limit --limit 1/second -j LOG +-A limit-1268 -j ACCEPT +-A limit-1269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-429 +-A limit-1269 -m limit --limit 1/second -j LOG +-A limit-127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-430 +-A limit-1270 -j ACCEPT +-A limit-1272 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-432 +-A limit-1272 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1273 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-433 +-A limit-1273 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1274 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-434 +-A limit-1274 -m limit --limit 1/second -j LOG +-A limit-1274 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1275 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-435 +-A limit-1275 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1276 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-436 +-A limit-1276 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1277 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-437 +-A limit-1277 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-438 +-A limit-1278 -j ACCEPT +-A limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-128 -m limit --limit 1/second -j LOG +-A limit-128 -j ACCEPT +-A limit-1280 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-440 +-A limit-1280 -m limit --limit 1/second -j LOG +-A limit-1280 -j ACCEPT +-A limit-1281 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-441 +-A limit-1281 -m limit --limit 1/second -j LOG +-A limit-1282 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-442 +-A limit-1282 -j ACCEPT +-A limit-1284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-444 +-A limit-1284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 +-A limit-1285 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 +-A limit-1286 -m limit --limit 1/second -j LOG +-A limit-1286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 +-A limit-1287 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1288 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 +-A limit-1288 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1289 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 +-A limit-1289 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-129 -m limit --limit 1/second -j LOG +-A limit-1290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-450 +-A limit-1290 -j ACCEPT +-A limit-1292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 +-A limit-1292 -m limit --limit 1/second -j LOG +-A limit-1292 -j ACCEPT +-A limit-1293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 +-A limit-1293 -m limit --limit 1/second -j LOG +-A limit-1294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 +-A limit-1294 -j ACCEPT +-A limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1297 -m recent --name limit-1297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1297 -m recent --name limit-1297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1298 -m recent --name limit-1298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1298 -m limit --limit 1/second -j LOG +-A limit-1298 -m recent --name limit-1298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 +-A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-130 -j ACCEPT +-A limit-1300 -m recent --name limit-1300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1300 -m recent --name limit-1300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1301 -m recent --name limit-1301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1301 -m recent --name limit-1301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1304 -m limit --limit 1/second -j LOG +-A limit-1304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1308 -j ACCEPT +-A limit-131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1310 -m limit --limit 1/second -j LOG +-A limit-1310 -j ACCEPT +-A limit-1311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1311 -m limit --limit 1/second -j LOG +-A limit-1312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1312 -j ACCEPT +-A limit-1314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1316 -m limit --limit 1/second -j LOG +-A limit-1316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1320 -j ACCEPT +-A limit-1322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1322 -m limit --limit 1/second -j LOG +-A limit-1322 -j ACCEPT +-A limit-1323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1323 -m limit --limit 1/second -j LOG +-A limit-1324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1324 -j ACCEPT +-A limit-1326 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1326 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1327 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1327 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1328 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1328 -m limit --limit 1/second -j LOG +-A limit-1328 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1329 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1329 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1331 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1332 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1332 -j ACCEPT +-A limit-1334 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1334 -m limit --limit 1/second -j LOG +-A limit-1334 -j ACCEPT +-A limit-1335 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1335 -m limit --limit 1/second -j LOG +-A limit-1336 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1336 -j ACCEPT +-A limit-1338 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1338 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1339 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1339 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-134 -m limit --limit 1/second -j LOG +-A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1340 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1340 -m limit --limit 1/second -j LOG +-A limit-1340 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1341 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1341 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1342 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1342 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1343 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1343 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1344 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1344 -j ACCEPT +-A limit-1346 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1346 -m limit --limit 1/second -j LOG +-A limit-1346 -j ACCEPT +-A limit-1347 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1347 -m limit --limit 1/second -j LOG +-A limit-1348 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1348 -j ACCEPT +-A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1352 -m limit --limit 1/second -j LOG +-A limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1358 -m limit --limit 1/second -j LOG +-A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1362 -j ACCEPT +-A limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1364 -m limit --limit 1/second -j LOG +-A limit-1364 -j ACCEPT +-A limit-1365 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1365 -m limit --limit 1/second -j LOG +-A limit-1366 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1366 -j ACCEPT +-A limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1370 -m limit --limit 1/second -j LOG +-A limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1374 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1374 -j ACCEPT +-A limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1376 -m limit --limit 1/second -j LOG +-A limit-1376 -j ACCEPT +-A limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1377 -m limit --limit 1/second -j LOG +-A limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1378 -j ACCEPT +-A limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-138 -j ACCEPT +-A limit-1380 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1380 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1381 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1381 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1382 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1382 -m limit --limit 1/second -j LOG +-A limit-1382 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1383 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1383 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1384 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1384 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1385 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1385 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1386 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1386 -j ACCEPT +-A limit-1388 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1388 -m limit --limit 1/second -j LOG +-A limit-1388 -j ACCEPT +-A limit-1389 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1389 -m limit --limit 1/second -j LOG +-A limit-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1390 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1390 -j ACCEPT +-A limit-1392 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1392 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1393 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1393 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1394 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1394 -m limit --limit 1/second -j LOG +-A limit-1394 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1395 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1395 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1396 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1396 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1397 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1397 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1398 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1398 -j ACCEPT +-A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 +-A limit-14 -m limit --limit 1/second -j LOG +-A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-140 -m limit --limit 1/second -j LOG +-A limit-140 -j ACCEPT +-A limit-1400 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1400 -m limit --limit 1/second -j LOG +-A limit-1400 -j ACCEPT +-A limit-1401 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1401 -m limit --limit 1/second -j LOG +-A limit-1402 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1402 -j ACCEPT +-A limit-1404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1404 -j ACCEPT +-A limit-1404 -m limit --limit 1/second -j LOG +-A limit-1404 -j DROP +-A limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1405 -j RETURN +-A limit-1405 -m limit --limit 1/second -j LOG +-A limit-1405 -j DROP +-A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1406 -j logaccept-14 +-A limit-1406 -m limit --limit 1/second -j LOG +-A limit-1406 -j DROP +-A limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1407 -j ACCEPT +-A limit-1407 -m limit --limit 1/second -j LOG +-A limit-1407 -j DROP +-A limit-1408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1408 -j ACCEPT +-A limit-1408 -m limit --limit 1/second -j LOG +-A limit-1408 -j DROP +-A limit-1409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1409 -j RETURN +-A limit-1409 -m limit --limit 1/second -j LOG +-A limit-1409 -j DROP +-A limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-141 -m limit --limit 1/second -j LOG +-A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1410 -j logaccept-15 +-A limit-1410 -m limit --limit 1/second -j LOG +-A limit-1410 -j DROP +-A limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1411 -j ACCEPT +-A limit-1411 -m limit --limit 1/second -j LOG +-A limit-1411 -j DROP +-A limit-1412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1412 -j ACCEPT +-A limit-1412 -j DROP +-A limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1413 -j RETURN +-A limit-1413 -j DROP +-A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1414 -j logaccept-16 +-A limit-1414 -j DROP +-A limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1415 -j ACCEPT +-A limit-1415 -j DROP +-A limit-1416 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1416 -j ACCEPT +-A limit-1416 -j DROP +-A limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1417 -j RETURN +-A limit-1417 -j DROP +-A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1418 -j logaccept-17 +-A limit-1418 -j DROP +-A limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1419 -j ACCEPT +-A limit-1419 -j DROP +-A limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-142 -j ACCEPT +-A limit-1420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1420 -j ACCEPT +-A limit-1420 -m limit --limit 1/second -j LOG +-A limit-1420 -j DROP +-A limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1421 -j RETURN +-A limit-1421 -m limit --limit 1/second -j LOG +-A limit-1421 -j DROP +-A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1422 -j logaccept-18 +-A limit-1422 -m limit --limit 1/second -j LOG +-A limit-1422 -j DROP +-A limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1423 -j ACCEPT +-A limit-1423 -m limit --limit 1/second -j LOG +-A limit-1423 -j DROP +-A limit-1424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1424 -j ACCEPT +-A limit-1424 -j DROP +-A limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1425 -j RETURN +-A limit-1425 -j DROP +-A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1426 -j logaccept-19 +-A limit-1426 -j DROP +-A limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1427 -j ACCEPT +-A limit-1427 -j DROP +-A limit-1428 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1428 -j ACCEPT +-A limit-1428 -j DROP +-A limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1429 -j RETURN +-A limit-1429 -j DROP +-A limit-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1430 -j logaccept-20 +-A limit-1430 -j DROP +-A limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1431 -j ACCEPT +-A limit-1431 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-145 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-145 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-146 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-146 -m limit --limit 1/second -j LOG +-A limit-146 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-147 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-147 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-148 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-148 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-149 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-149 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 +-A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-150 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-150 -j ACCEPT +-A limit-151 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-152 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-152 -m limit --limit 1/second -j LOG +-A limit-152 -j ACCEPT +-A limit-153 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-153 -m limit --limit 1/second -j LOG +-A limit-154 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-154 -j ACCEPT +-A limit-155 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-157 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-157 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-158 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-158 -m limit --limit 1/second -j LOG +-A limit-158 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-159 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-159 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 +-A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-160 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-160 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-161 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-161 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-162 -j ACCEPT +-A limit-163 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-164 -m limit --limit 1/second -j LOG +-A limit-164 -j ACCEPT +-A limit-165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-165 -m limit --limit 1/second -j LOG +-A limit-166 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-166 -j ACCEPT +-A limit-167 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-60 +-A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 +-A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 +-A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 +-A limit-170 -m limit --limit 1/second -j LOG +-A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 +-A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 +-A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 +-A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 +-A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 +-A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 +-A limit-176 -m limit --limit 1/second -j LOG +-A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 +-A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 +-A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 +-A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-18 +-A limit-18 -j ACCEPT +-A limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-72 +-A limit-180 -j ACCEPT +-A limit-181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 +-A limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 +-A limit-182 -m limit --limit 1/second -j LOG +-A limit-182 -j ACCEPT +-A limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 +-A limit-183 -m limit --limit 1/second -j LOG +-A limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 +-A limit-184 -j ACCEPT +-A limit-185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 +-A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-78 +-A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 +-A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 +-A limit-188 -m limit --limit 1/second -j LOG +-A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 +-A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 +-A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 +-A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-84 +-A limit-192 -j ACCEPT +-A limit-193 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 +-A limit-194 -m limit --limit 1/second -j LOG +-A limit-194 -j ACCEPT +-A limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 +-A limit-195 -m limit --limit 1/second -j LOG +-A limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 +-A limit-196 -j ACCEPT +-A limit-197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-90 +-A limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 +-A limit-199 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 +-A limit-2 -m limit --limit 1/second -j LOG +-A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-20 +-A limit-20 -m limit --limit 1/second -j LOG +-A limit-20 -j ACCEPT +-A limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 +-A limit-200 -m limit --limit 1/second -j LOG +-A limit-200 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 +-A limit-201 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 +-A limit-202 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 +-A limit-203 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-96 +-A limit-204 -j ACCEPT +-A limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 +-A limit-206 -m limit --limit 1/second -j LOG +-A limit-206 -j ACCEPT +-A limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 +-A limit-207 -m limit --limit 1/second -j LOG +-A limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 +-A limit-208 -j ACCEPT +-A limit-209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 +-A limit-21 -m limit --limit 1/second -j LOG +-A limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-102 +-A limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 +-A limit-211 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 +-A limit-212 -m limit --limit 1/second -j LOG +-A limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 +-A limit-213 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 +-A limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 +-A limit-215 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-108 +-A limit-216 -j ACCEPT +-A limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 +-A limit-218 -m limit --limit 1/second -j LOG +-A limit-218 -j ACCEPT +-A limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 +-A limit-219 -m limit --limit 1/second -j LOG +-A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 +-A limit-22 -j ACCEPT +-A limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 +-A limit-220 -j ACCEPT +-A limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 +-A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-224 -m limit --limit 1/second -j LOG +-A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 +-A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-230 -m limit --limit 1/second -j LOG +-A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-234 -j ACCEPT +-A limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-236 -m limit --limit 1/second -j LOG +-A limit-236 -j ACCEPT +-A limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-237 -m limit --limit 1/second -j LOG +-A limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-238 -j ACCEPT +-A limit-239 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-242 -m limit --limit 1/second -j LOG +-A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-246 -j ACCEPT +-A limit-247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m limit --limit 1/second -j LOG +-A limit-248 -j ACCEPT +-A limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-249 -m limit --limit 1/second -j LOG +-A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 +-A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-250 -j ACCEPT +-A limit-251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-252 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-252 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-253 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-253 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-254 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-254 -m limit --limit 1/second -j LOG +-A limit-254 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-255 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-255 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-256 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-256 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-257 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-257 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-258 -j ACCEPT +-A limit-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 +-A limit-26 -m limit --limit 1/second -j LOG +-A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-260 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-260 -m limit --limit 1/second -j LOG +-A limit-260 -j ACCEPT +-A limit-261 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-261 -m limit --limit 1/second -j LOG +-A limit-262 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-262 -j ACCEPT +-A limit-263 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-265 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-266 -m limit --limit 1/second -j LOG +-A limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-267 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-269 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 +-A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-270 -j ACCEPT +-A limit-271 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-272 -m limit --limit 1/second -j LOG +-A limit-272 -j ACCEPT +-A limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-273 -m limit --limit 1/second -j LOG +-A limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-274 -j ACCEPT +-A limit-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-278 -m limit --limit 1/second -j LOG +-A limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 +-A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-284 -m limit --limit 1/second -j LOG +-A limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-288 -j ACCEPT +-A limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 +-A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-290 -m limit --limit 1/second -j LOG +-A limit-290 -j ACCEPT +-A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-291 -m limit --limit 1/second -j LOG +-A limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-292 -j ACCEPT +-A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-296 -m limit --limit 1/second -j LOG +-A limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 +-A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-30 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-30 +-A limit-30 -j ACCEPT +-A limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-300 -j ACCEPT +-A limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-302 -m limit --limit 1/second -j LOG +-A limit-302 -j ACCEPT +-A limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-303 -m limit --limit 1/second -j LOG +-A limit-304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-304 -j ACCEPT +-A limit-305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-307 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-308 -m limit --limit 1/second -j LOG +-A limit-308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-31 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 +-A limit-310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-311 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-312 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-312 -j ACCEPT +-A limit-313 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-314 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-314 -m limit --limit 1/second -j LOG +-A limit-314 -j ACCEPT +-A limit-315 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-315 -m limit --limit 1/second -j LOG +-A limit-316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-316 -j ACCEPT +-A limit-317 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-318 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-318 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-319 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-319 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 +-A limit-32 -m limit --limit 1/second -j LOG +-A limit-32 -j ACCEPT +-A limit-320 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-320 -m limit --limit 1/second -j LOG +-A limit-320 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-321 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-321 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-322 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-322 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-323 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-323 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-324 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-324 -j ACCEPT +-A limit-325 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-326 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-326 -m limit --limit 1/second -j LOG +-A limit-326 -j ACCEPT +-A limit-327 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-327 -m limit --limit 1/second -j LOG +-A limit-328 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-328 -j ACCEPT +-A limit-329 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 +-A limit-33 -m limit --limit 1/second -j LOG +-A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-330 -j ACCEPT +-A limit-330 -m limit --limit 1/second -j LOG +-A limit-330 -j DROP +-A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j RETURN +-A limit-331 -m limit --limit 1/second -j LOG +-A limit-331 -j DROP +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-0 +-A limit-332 -m limit --limit 1/second -j LOG +-A limit-332 -j DROP +-A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j ACCEPT +-A limit-333 -m limit --limit 1/second -j LOG +-A limit-333 -j DROP +-A limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-334 -j ACCEPT +-A limit-334 -m limit --limit 1/second -j LOG +-A limit-334 -j DROP +-A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j RETURN +-A limit-335 -m limit --limit 1/second -j LOG +-A limit-335 -j DROP +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-1 +-A limit-336 -m limit --limit 1/second -j LOG +-A limit-336 -j DROP +-A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-337 -j ACCEPT +-A limit-337 -m limit --limit 1/second -j LOG +-A limit-337 -j DROP +-A limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-338 -j ACCEPT +-A limit-338 -j DROP +-A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-339 -j RETURN +-A limit-339 -j DROP +-A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 +-A limit-34 -j ACCEPT +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-2 +-A limit-340 -j DROP +-A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-341 -j ACCEPT +-A limit-341 -j DROP +-A limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-342 -j ACCEPT +-A limit-342 -j DROP +-A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-343 -j RETURN +-A limit-343 -j DROP +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-3 +-A limit-344 -j DROP +-A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-345 -j ACCEPT +-A limit-345 -j DROP +-A limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-346 -j ACCEPT +-A limit-346 -m limit --limit 1/second -j LOG +-A limit-346 -j DROP +-A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-347 -j RETURN +-A limit-347 -m limit --limit 1/second -j LOG +-A limit-347 -j DROP +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-4 +-A limit-348 -m limit --limit 1/second -j LOG +-A limit-348 -j DROP +-A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-349 -j ACCEPT +-A limit-349 -m limit --limit 1/second -j LOG +-A limit-349 -j DROP +-A limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 +-A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-350 -j ACCEPT +-A limit-350 -j DROP +-A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-351 -j RETURN +-A limit-351 -j DROP +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-5 +-A limit-352 -j DROP +-A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-353 -j ACCEPT +-A limit-353 -j DROP +-A limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-354 -j ACCEPT +-A limit-354 -j DROP +-A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-355 -j RETURN +-A limit-355 -j DROP +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-6 +-A limit-356 -j DROP +-A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-357 -j ACCEPT +-A limit-357 -j DROP +-A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-114 +-A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-36 +-A limit-36 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-360 -m limit --limit 1/second -j LOG +-A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-366 -m limit --limit 1/second -j LOG +-A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-37 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 +-A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-372 -m limit --limit 1/second -j LOG +-A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-376 -j ACCEPT +-A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-378 -m limit --limit 1/second -j LOG +-A limit-378 -j ACCEPT +-A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-379 -m limit --limit 1/second -j LOG +-A limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-38 -m limit --limit 1/second -j LOG +-A limit-38 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-380 -j ACCEPT +-A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-384 -m limit --limit 1/second -j LOG +-A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-388 -j ACCEPT +-A limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 +-A limit-39 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A limit-390 -m limit --limit 1/second -j LOG +-A limit-390 -j ACCEPT +-A limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-391 -m limit --limit 1/second -j LOG +-A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 +-A limit-392 -j ACCEPT +-A limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-150 +-A limit-394 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-395 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 +-A limit-396 -m limit --limit 1/second -j LOG +-A limit-396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-399 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 +-A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-40 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-400 -j ACCEPT +-A limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 +-A limit-402 -m limit --limit 1/second -j LOG +-A limit-402 -j ACCEPT +-A limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-403 -m limit --limit 1/second -j LOG +-A limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 +-A limit-404 -j ACCEPT +-A limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-162 +-A limit-406 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-407 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-408 -m limit --limit 1/second -j LOG +-A limit-408 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-41 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 +-A limit-410 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-411 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-412 -j ACCEPT +-A limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 +-A limit-414 -m limit --limit 1/second -j LOG +-A limit-414 -j ACCEPT +-A limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-415 -m limit --limit 1/second -j LOG +-A limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-416 -j ACCEPT +-A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-42 -j ACCEPT +-A limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-420 -m limit --limit 1/second -j LOG +-A limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-426 -m limit --limit 1/second -j LOG +-A limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-43 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-430 -j ACCEPT +-A limit-432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-432 -m limit --limit 1/second -j LOG +-A limit-432 -j ACCEPT +-A limit-433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-433 -m limit --limit 1/second -j LOG +-A limit-434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-434 -j ACCEPT +-A limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-438 -m limit --limit 1/second -j LOG +-A limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 +-A limit-44 -m limit --limit 1/second -j LOG +-A limit-44 -j ACCEPT +-A limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-442 -j ACCEPT +-A limit-444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-444 -m limit --limit 1/second -j LOG +-A limit-444 -j ACCEPT +-A limit-445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-445 -m limit --limit 1/second -j LOG +-A limit-446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-446 -j ACCEPT +-A limit-448 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-448 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-449 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-449 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 +-A limit-45 -m limit --limit 1/second -j LOG +-A limit-450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-450 -m limit --limit 1/second -j LOG +-A limit-450 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-451 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-451 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-452 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-452 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-453 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-453 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-454 -j ACCEPT +-A limit-456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-456 -m limit --limit 1/second -j LOG +-A limit-456 -j ACCEPT +-A limit-457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-457 -m limit --limit 1/second -j LOG +-A limit-458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-458 -j ACCEPT +-A limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-46 -j ACCEPT +-A limit-460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-461 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-462 -m limit --limit 1/second -j LOG +-A limit-462 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-463 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-464 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-465 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-466 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-466 -j ACCEPT +-A limit-468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-468 -m limit --limit 1/second -j LOG +-A limit-468 -j ACCEPT +-A limit-469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-469 -m limit --limit 1/second -j LOG +-A limit-47 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-470 -j ACCEPT +-A limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-474 -m limit --limit 1/second -j LOG +-A limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-48 +-A limit-48 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-480 -m limit --limit 1/second -j LOG +-A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-484 -j ACCEPT +-A limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-486 -m limit --limit 1/second -j LOG +-A limit-486 -j ACCEPT +-A limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-487 -m limit --limit 1/second -j LOG +-A limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-488 -j ACCEPT +-A limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-49 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-492 -m limit --limit 1/second -j LOG +-A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-496 -j ACCEPT +-A limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-498 -m limit --limit 1/second -j LOG +-A limit-498 -j ACCEPT +-A limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-499 -m limit --limit 1/second -j LOG +-A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 +-A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-50 -m limit --limit 1/second -j LOG +-A limit-50 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-500 -j ACCEPT +-A limit-502 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-502 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-503 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-503 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-504 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-504 -m limit --limit 1/second -j LOG +-A limit-504 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-505 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-505 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-506 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-506 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-507 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-507 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-508 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-508 -j ACCEPT +-A limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 +-A limit-51 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-510 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-510 -m limit --limit 1/second -j LOG +-A limit-510 -j ACCEPT +-A limit-511 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-511 -m limit --limit 1/second -j LOG +-A limit-512 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-512 -j ACCEPT +-A limit-514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-514 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-515 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-516 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-516 -m limit --limit 1/second -j LOG +-A limit-516 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-517 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-517 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-518 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-518 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-519 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-519 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-52 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-520 -j ACCEPT +-A limit-522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-522 -m limit --limit 1/second -j LOG +-A limit-522 -j ACCEPT +-A limit-523 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-523 -m limit --limit 1/second -j LOG +-A limit-524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-524 -j ACCEPT +-A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-174 +-A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 +-A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 +-A limit-528 -m limit --limit 1/second -j LOG +-A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 +-A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-53 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 +-A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 +-A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 +-A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 +-A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 +-A limit-534 -m limit --limit 1/second -j LOG +-A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 +-A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 +-A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 +-A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-538 -j ACCEPT +-A limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-54 -j ACCEPT +-A limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 +-A limit-540 -m limit --limit 1/second -j LOG +-A limit-540 -j ACCEPT +-A limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 +-A limit-541 -m limit --limit 1/second -j LOG +-A limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 +-A limit-542 -j ACCEPT +-A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-192 +-A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 +-A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 +-A limit-546 -m limit --limit 1/second -j LOG +-A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 +-A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 +-A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 +-A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-55 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-198 +-A limit-550 -j ACCEPT +-A limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A limit-552 -m limit --limit 1/second -j LOG +-A limit-552 -j ACCEPT +-A limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 +-A limit-553 -m limit --limit 1/second -j LOG +-A limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 +-A limit-554 -j ACCEPT +-A limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-204 +-A limit-556 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 +-A limit-557 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 +-A limit-558 -m limit --limit 1/second -j LOG +-A limit-558 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 +-A limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 +-A limit-56 -m limit --limit 1/second -j LOG +-A limit-56 -j ACCEPT +-A limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 +-A limit-560 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 +-A limit-561 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-210 +-A limit-562 -j ACCEPT +-A limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 +-A limit-564 -m limit --limit 1/second -j LOG +-A limit-564 -j ACCEPT +-A limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 +-A limit-565 -m limit --limit 1/second -j LOG +-A limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 +-A limit-566 -j ACCEPT +-A limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-216 +-A limit-568 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 +-A limit-569 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-57 -m limit --limit 1/second -j LOG +-A limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 +-A limit-570 -m limit --limit 1/second -j LOG +-A limit-570 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 +-A limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-572 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 +-A limit-573 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-574 -j ACCEPT +-A limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 +-A limit-576 -m limit --limit 1/second -j LOG +-A limit-576 -j ACCEPT +-A limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 +-A limit-577 -m limit --limit 1/second -j LOG +-A limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 +-A limit-578 -j ACCEPT +-A limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-58 -j ACCEPT +-A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-582 -m limit --limit 1/second -j LOG +-A limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-588 -m limit --limit 1/second -j LOG +-A limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-59 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-592 -j ACCEPT +-A limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-594 -m limit --limit 1/second -j LOG +-A limit-594 -j ACCEPT +-A limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-595 -m limit --limit 1/second -j LOG +-A limit-596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-596 -j ACCEPT +-A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 +-A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-600 -m limit --limit 1/second -j LOG +-A limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-604 -j ACCEPT +-A limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-606 -m limit --limit 1/second -j LOG +-A limit-606 -j ACCEPT +-A limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-607 -m limit --limit 1/second -j LOG +-A limit-608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-608 -j ACCEPT +-A limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-610 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-610 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-611 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-611 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-612 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-612 -m limit --limit 1/second -j LOG +-A limit-612 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-613 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-613 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-614 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-614 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-615 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-615 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-616 -j ACCEPT +-A limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-618 -m limit --limit 1/second -j LOG +-A limit-618 -j ACCEPT +-A limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-619 -m limit --limit 1/second -j LOG +-A limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-62 -m limit --limit 1/second -j LOG +-A limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-620 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-620 -j ACCEPT +-A limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-623 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-624 -m limit --limit 1/second -j LOG +-A limit-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-625 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-627 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-628 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-628 -j ACCEPT +-A limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-630 -m limit --limit 1/second -j LOG +-A limit-630 -j ACCEPT +-A limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-631 -m limit --limit 1/second -j LOG +-A limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-632 -j ACCEPT +-A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-636 -m limit --limit 1/second -j LOG +-A limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-642 -m limit --limit 1/second -j LOG +-A limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-646 -j ACCEPT +-A limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-648 -m limit --limit 1/second -j LOG +-A limit-648 -j ACCEPT +-A limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-649 -m limit --limit 1/second -j LOG +-A limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-650 -j ACCEPT +-A limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-654 -m limit --limit 1/second -j LOG +-A limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-658 -j ACCEPT +-A limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-660 -m limit --limit 1/second -j LOG +-A limit-660 -j ACCEPT +-A limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-661 -m limit --limit 1/second -j LOG +-A limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-662 -j ACCEPT +-A limit-664 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-664 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-665 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-665 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-666 -m limit --limit 1/second -j LOG +-A limit-666 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-667 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-668 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-669 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-670 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-670 -j ACCEPT +-A limit-672 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-672 -m limit --limit 1/second -j LOG +-A limit-672 -j ACCEPT +-A limit-673 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-673 -m limit --limit 1/second -j LOG +-A limit-674 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-674 -j ACCEPT +-A limit-676 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-676 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-677 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-677 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-678 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-678 -m limit --limit 1/second -j LOG +-A limit-678 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-679 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-679 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-68 -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-680 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-680 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-681 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-681 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-682 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-682 -j ACCEPT +-A limit-684 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-684 -m limit --limit 1/second -j LOG +-A limit-684 -j ACCEPT +-A limit-685 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-685 -m limit --limit 1/second -j LOG +-A limit-686 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-686 -j ACCEPT +-A limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-688 -j ACCEPT +-A limit-688 -m limit --limit 1/second -j LOG +-A limit-688 -j DROP +-A limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-689 -j RETURN +-A limit-689 -m limit --limit 1/second -j LOG +-A limit-689 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j logaccept-7 +-A limit-690 -m limit --limit 1/second -j LOG +-A limit-690 -j DROP +-A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-691 -j ACCEPT +-A limit-691 -m limit --limit 1/second -j LOG +-A limit-691 -j DROP +-A limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-692 -j ACCEPT +-A limit-692 -m limit --limit 1/second -j LOG +-A limit-692 -j DROP +-A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-693 -j RETURN +-A limit-693 -m limit --limit 1/second -j LOG +-A limit-693 -j DROP +-A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j logaccept-8 +-A limit-694 -m limit --limit 1/second -j LOG +-A limit-694 -j DROP +-A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-695 -j ACCEPT +-A limit-695 -m limit --limit 1/second -j LOG +-A limit-695 -j DROP +-A limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-696 -j ACCEPT +-A limit-696 -j DROP +-A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-697 -j RETURN +-A limit-697 -j DROP +-A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j logaccept-9 +-A limit-698 -j DROP +-A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-699 -j ACCEPT +-A limit-699 -j DROP +-A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 +-A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-700 -j ACCEPT +-A limit-700 -j DROP +-A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-701 -j RETURN +-A limit-701 -j DROP +-A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j logaccept-10 +-A limit-702 -j DROP +-A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-703 -j ACCEPT +-A limit-703 -j DROP +-A limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-704 -j ACCEPT +-A limit-704 -m limit --limit 1/second -j LOG +-A limit-704 -j DROP +-A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-705 -j RETURN +-A limit-705 -m limit --limit 1/second -j LOG +-A limit-705 -j DROP +-A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j logaccept-11 +-A limit-706 -m limit --limit 1/second -j LOG +-A limit-706 -j DROP +-A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-707 -j ACCEPT +-A limit-707 -m limit --limit 1/second -j LOG +-A limit-707 -j DROP +-A limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-708 -j ACCEPT +-A limit-708 -j DROP +-A limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-709 -j RETURN +-A limit-709 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j logaccept-12 +-A limit-710 -j DROP +-A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-711 -j ACCEPT +-A limit-711 -j DROP +-A limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-712 -j ACCEPT +-A limit-712 -j DROP +-A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-713 -j RETURN +-A limit-713 -j DROP +-A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j logaccept-13 +-A limit-714 -j DROP +-A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-715 -j ACCEPT +-A limit-715 -j DROP +-A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-228 +-A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-72 -j ACCEPT +-A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 +-A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 +-A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 +-A limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 +-A limit-737 -m limit --limit 1/second -j LOG +-A limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-739 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 +-A limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-74 -m limit --limit 1/second -j LOG +-A limit-74 -j ACCEPT +-A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-252 +-A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 +-A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 +-A limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 +-A limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 +-A limit-749 -m limit --limit 1/second -j LOG +-A limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-75 -m limit --limit 1/second -j LOG +-A limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-264 +-A limit-752 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-753 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-754 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-756 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-757 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 +-A limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-76 -j ACCEPT +-A limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 +-A limit-761 -m limit --limit 1/second -j LOG +-A limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-276 +-A limit-764 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-765 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 +-A limit-766 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-767 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 +-A limit-768 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 +-A limit-769 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 +-A limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 +-A limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 +-A limit-773 -m limit --limit 1/second -j LOG +-A limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 +-A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-791 -m limit --limit 1/second -j LOG +-A limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 +-A limit-8 -m limit --limit 1/second -j LOG +-A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m limit --limit 1/second -j LOG +-A limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-801 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-803 -m limit --limit 1/second -j LOG +-A limit-804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-806 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-807 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-808 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-808 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-809 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-809 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-810 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-810 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-811 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-811 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-813 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-815 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-815 -m limit --limit 1/second -j LOG +-A limit-816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-817 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-819 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-820 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-822 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-823 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-824 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-825 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-826 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-827 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-827 -m limit --limit 1/second -j LOG +-A limit-828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-829 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-84 -j ACCEPT +-A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-845 -m limit --limit 1/second -j LOG +-A limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-847 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-857 -m limit --limit 1/second -j LOG +-A limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-86 -m limit --limit 1/second -j LOG +-A limit-86 -j ACCEPT +-A limit-860 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-860 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-861 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-861 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-862 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-862 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-863 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-863 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-864 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-864 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-865 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-865 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-866 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-867 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-868 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-869 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-869 -m limit --limit 1/second -j LOG +-A limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-87 -m limit --limit 1/second -j LOG +-A limit-870 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-871 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-872 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-873 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-874 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-875 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-876 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-876 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-877 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-877 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-879 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-88 -j ACCEPT +-A limit-880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-881 -m limit --limit 1/second -j LOG +-A limit-882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-883 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-288 +-A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 +-A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-897 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 +-A limit-899 -m limit --limit 1/second -j LOG +-A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 +-A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-90 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-90 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-901 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-306 +-A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 +-A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-909 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 +-A limit-91 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-91 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 +-A limit-911 -m limit --limit 1/second -j LOG +-A limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-913 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-318 +-A limit-914 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-915 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-916 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-917 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-918 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-919 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-92 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-92 -m limit --limit 1/second -j LOG +-A limit-92 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-921 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 +-A limit-923 -m limit --limit 1/second -j LOG +-A limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-925 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 +-A limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-330 +-A limit-926 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-927 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-928 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-929 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-93 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-93 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-930 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-931 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-933 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 +-A limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 +-A limit-935 -m limit --limit 1/second -j LOG +-A limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-937 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 +-A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-94 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-94 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-95 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-95 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-953 -m limit --limit 1/second -j LOG +-A limit-954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-96 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-96 -j ACCEPT +-A limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-962 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-963 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-964 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-965 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-965 -m limit --limit 1/second -j LOG +-A limit-966 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-967 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-968 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-968 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-969 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-969 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-97 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-970 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-970 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-971 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-971 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-972 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-972 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-973 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-973 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-974 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-975 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-976 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-977 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-977 -m limit --limit 1/second -j LOG +-A limit-978 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-979 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-98 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-98 -m limit --limit 1/second -j LOG +-A limit-98 -j ACCEPT +-A limit-980 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-980 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-981 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-981 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-982 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-982 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-983 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-983 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-984 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-984 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-985 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-985 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-986 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-987 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-988 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-989 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-989 -m limit --limit 1/second -j LOG +-A limit-99 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-99 -m limit --limit 1/second -j LOG +-A limit-990 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-991 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logaccept-1 -m limit --limit 1/second -j LOG +-A logaccept-1 -j ACCEPT +-A logaccept-10 -m limit --limit 1/second -j LOG +-A logaccept-10 -j ACCEPT +-A logaccept-11 -m limit --limit 1/second -j LOG +-A logaccept-11 -j ACCEPT +-A logaccept-12 -m limit --limit 1/second -j LOG +-A logaccept-12 -j ACCEPT +-A logaccept-13 -m limit --limit 1/second -j LOG +-A logaccept-13 -j ACCEPT +-A logaccept-14 -m limit --limit 1/second -j LOG +-A logaccept-14 -j ACCEPT +-A logaccept-15 -m limit --limit 1/second -j LOG +-A logaccept-15 -j ACCEPT +-A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j ACCEPT +-A logaccept-17 -m limit --limit 1/second -j LOG +-A logaccept-17 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-19 -m limit --limit 1/second -j LOG +-A logaccept-19 -j ACCEPT +-A logaccept-2 -m limit --limit 1/second -j LOG +-A logaccept-2 -j ACCEPT +-A logaccept-20 -m limit --limit 1/second -j LOG +-A logaccept-20 -j ACCEPT +-A logaccept-21 -m limit --limit 1/second -j LOG +-A logaccept-21 -j ACCEPT +-A logaccept-3 -m limit --limit 1/second -j LOG +-A logaccept-3 -j ACCEPT +-A logaccept-4 -m limit --limit 1/second -j LOG +-A logaccept-4 -j ACCEPT +-A logaccept-5 -m limit --limit 1/second -j LOG +-A logaccept-5 -j ACCEPT +-A logaccept-6 -m limit --limit 1/second -j LOG +-A logaccept-6 -j ACCEPT +-A logaccept-7 -m limit --limit 1/second -j LOG +-A logaccept-7 -j ACCEPT +-A logaccept-8 -m limit --limit 1/second -j LOG +-A logaccept-8 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG +-A logaccept-9 -j ACCEPT +-A logaccept-final-0 -m limit --limit 1/second -j LOG +-A logaccept-final-0 -j ACCEPT +-A logaccept-final-1 -m limit --limit 1/second -j LOG +-A logaccept-final-1 -j ACCEPT +-A logaccept-final-10 -m limit --limit 1/second -j LOG +-A logaccept-final-10 -j ACCEPT +-A logaccept-final-11 -m limit --limit 1/second -j LOG +-A logaccept-final-11 -j ACCEPT +-A logaccept-final-12 -m limit --limit 1/second -j LOG +-A logaccept-final-12 -j ACCEPT +-A logaccept-final-13 -m limit --limit 1/second -j LOG +-A logaccept-final-13 -j ACCEPT +-A logaccept-final-14 -m limit --limit 1/second -j LOG +-A logaccept-final-14 -j ACCEPT +-A logaccept-final-15 -m limit --limit 1/second -j LOG +-A logaccept-final-15 -j ACCEPT +-A logaccept-final-16 -m limit --limit 1/second -j LOG +-A logaccept-final-16 -j ACCEPT +-A logaccept-final-17 -m limit --limit 1/second -j LOG +-A logaccept-final-17 -j ACCEPT +-A logaccept-final-18 -m limit --limit 1/second -j LOG +-A logaccept-final-18 -j ACCEPT +-A logaccept-final-19 -m limit --limit 1/second -j LOG +-A logaccept-final-19 -j ACCEPT +-A logaccept-final-2 -m limit --limit 1/second -j LOG +-A logaccept-final-2 -j ACCEPT +-A logaccept-final-20 -m limit --limit 1/second -j LOG +-A logaccept-final-20 -j ACCEPT +-A logaccept-final-21 -m limit --limit 1/second -j LOG +-A logaccept-final-21 -j ACCEPT +-A logaccept-final-22 -m limit --limit 1/second -j LOG +-A logaccept-final-22 -j ACCEPT +-A logaccept-final-23 -m limit --limit 1/second -j LOG +-A logaccept-final-23 -j ACCEPT +-A logaccept-final-24 -m limit --limit 1/second -j LOG +-A logaccept-final-24 -j ACCEPT +-A logaccept-final-25 -m limit --limit 1/second -j LOG +-A logaccept-final-25 -j ACCEPT +-A logaccept-final-26 -m limit --limit 1/second -j LOG +-A logaccept-final-26 -j ACCEPT +-A logaccept-final-27 -m limit --limit 1/second -j LOG +-A logaccept-final-27 -j ACCEPT +-A logaccept-final-28 -m limit --limit 1/second -j LOG +-A logaccept-final-28 -j ACCEPT +-A logaccept-final-29 -m limit --limit 1/second -j LOG +-A logaccept-final-29 -j ACCEPT +-A logaccept-final-3 -m limit --limit 1/second -j LOG +-A logaccept-final-3 -j ACCEPT +-A logaccept-final-30 -m limit --limit 1/second -j LOG +-A logaccept-final-30 -j ACCEPT +-A logaccept-final-31 -m limit --limit 1/second -j LOG +-A logaccept-final-31 -j ACCEPT +-A logaccept-final-32 -m limit --limit 1/second -j LOG +-A logaccept-final-32 -j ACCEPT +-A logaccept-final-33 -m limit --limit 1/second -j LOG +-A logaccept-final-33 -j ACCEPT +-A logaccept-final-34 -m limit --limit 1/second -j LOG +-A logaccept-final-34 -j ACCEPT +-A logaccept-final-35 -m limit --limit 1/second -j LOG +-A logaccept-final-35 -j ACCEPT +-A logaccept-final-36 -m limit --limit 1/second -j LOG +-A logaccept-final-36 -j ACCEPT +-A logaccept-final-37 -m limit --limit 1/second -j LOG +-A logaccept-final-37 -j ACCEPT +-A logaccept-final-38 -m limit --limit 1/second -j LOG +-A logaccept-final-38 -j ACCEPT +-A logaccept-final-39 -m limit --limit 1/second -j LOG +-A logaccept-final-39 -j ACCEPT +-A logaccept-final-4 -m limit --limit 1/second -j LOG +-A logaccept-final-4 -j ACCEPT +-A logaccept-final-40 -m limit --limit 1/second -j LOG +-A logaccept-final-40 -j ACCEPT +-A logaccept-final-41 -m limit --limit 1/second -j LOG +-A logaccept-final-41 -j ACCEPT +-A logaccept-final-42 -m limit --limit 1/second -j LOG +-A logaccept-final-42 -j ACCEPT +-A logaccept-final-43 -m limit --limit 1/second -j LOG +-A logaccept-final-43 -j ACCEPT +-A logaccept-final-44 -m limit --limit 1/second -j LOG +-A logaccept-final-44 -j ACCEPT +-A logaccept-final-45 -m limit --limit 1/second -j LOG +-A logaccept-final-45 -j ACCEPT +-A logaccept-final-46 -m limit --limit 1/second -j LOG +-A logaccept-final-46 -j ACCEPT +-A logaccept-final-47 -m limit --limit 1/second -j LOG +-A logaccept-final-47 -j ACCEPT +-A logaccept-final-48 -m limit --limit 1/second -j LOG +-A logaccept-final-48 -j ACCEPT +-A logaccept-final-49 -m limit --limit 1/second -j LOG +-A logaccept-final-49 -j ACCEPT +-A logaccept-final-5 -m limit --limit 1/second -j LOG +-A logaccept-final-5 -j ACCEPT +-A logaccept-final-50 -m limit --limit 1/second -j LOG +-A logaccept-final-50 -j ACCEPT +-A logaccept-final-51 -m limit --limit 1/second -j LOG +-A logaccept-final-51 -j ACCEPT +-A logaccept-final-52 -m limit --limit 1/second -j LOG +-A logaccept-final-52 -j ACCEPT +-A logaccept-final-53 -m limit --limit 1/second -j LOG +-A logaccept-final-53 -j ACCEPT +-A logaccept-final-54 -m limit --limit 1/second -j LOG +-A logaccept-final-54 -j ACCEPT +-A logaccept-final-55 -m limit --limit 1/second -j LOG +-A logaccept-final-55 -j ACCEPT +-A logaccept-final-56 -m limit --limit 1/second -j LOG +-A logaccept-final-56 -j ACCEPT +-A logaccept-final-57 -m limit --limit 1/second -j LOG +-A logaccept-final-57 -j ACCEPT +-A logaccept-final-58 -m limit --limit 1/second -j LOG +-A logaccept-final-58 -j ACCEPT +-A logaccept-final-59 -m limit --limit 1/second -j LOG +-A logaccept-final-59 -j ACCEPT +-A logaccept-final-6 -m limit --limit 1/second -j LOG +-A logaccept-final-6 -j ACCEPT +-A logaccept-final-60 -m limit --limit 1/second -j LOG +-A logaccept-final-60 -j ACCEPT +-A logaccept-final-61 -m limit --limit 1/second -j LOG +-A logaccept-final-61 -j ACCEPT +-A logaccept-final-7 -m limit --limit 1/second -j LOG +-A logaccept-final-7 -j ACCEPT +-A logaccept-final-8 -m limit --limit 1/second -j LOG +-A logaccept-final-8 -j ACCEPT +-A logaccept-final-9 -m limit --limit 1/second -j LOG +-A logaccept-final-9 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logdrop-10 -m limit --limit 1/second -j LOG +-A logdrop-10 -j DROP +-A logdrop-100 -m limit --limit 1/second -j LOG +-A logdrop-100 -j DROP +-A logdrop-101 -m limit --limit 1/second -j LOG +-A logdrop-101 -j DROP +-A logdrop-102 -m limit --limit 1/second -j LOG +-A logdrop-102 -j DROP +-A logdrop-103 -m limit --limit 1/second -j LOG +-A logdrop-103 -j DROP +-A logdrop-104 -m limit --limit 1/second -j LOG +-A logdrop-104 -j DROP +-A logdrop-105 -m limit --limit 1/second -j LOG +-A logdrop-105 -j DROP +-A logdrop-106 -m limit --limit 1/second -j LOG +-A logdrop-106 -j DROP +-A logdrop-107 -m limit --limit 1/second -j LOG +-A logdrop-107 -j DROP +-A logdrop-108 -m limit --limit 1/second -j LOG +-A logdrop-108 -j DROP +-A logdrop-109 -m limit --limit 1/second -j LOG +-A logdrop-109 -j DROP +-A logdrop-11 -m limit --limit 1/second -j LOG +-A logdrop-11 -j DROP +-A logdrop-110 -m limit --limit 1/second -j LOG +-A logdrop-110 -j DROP +-A logdrop-111 -m limit --limit 1/second -j LOG +-A logdrop-111 -j DROP +-A logdrop-112 -m limit --limit 1/second -j LOG +-A logdrop-112 -j DROP +-A logdrop-113 -m limit --limit 1/second -j LOG +-A logdrop-113 -j DROP +-A logdrop-114 -m limit --limit 1/second -j LOG +-A logdrop-114 -j DROP +-A logdrop-115 -m limit --limit 1/second -j LOG +-A logdrop-115 -j DROP +-A logdrop-116 -m limit --limit 1/second -j LOG +-A logdrop-116 -j DROP +-A logdrop-117 -m limit --limit 1/second -j LOG +-A logdrop-117 -j DROP +-A logdrop-118 -m limit --limit 1/second -j LOG +-A logdrop-118 -j DROP +-A logdrop-119 -m limit --limit 1/second -j LOG +-A logdrop-119 -j DROP +-A logdrop-12 -m limit --limit 1/second -j LOG +-A logdrop-12 -j DROP +-A logdrop-120 -m limit --limit 1/second -j LOG +-A logdrop-120 -j DROP +-A logdrop-121 -m limit --limit 1/second -j LOG +-A logdrop-121 -j DROP +-A logdrop-122 -m limit --limit 1/second -j LOG +-A logdrop-122 -j DROP +-A logdrop-123 -m limit --limit 1/second -j LOG +-A logdrop-123 -j DROP +-A logdrop-124 -m limit --limit 1/second -j LOG +-A logdrop-124 -j DROP +-A logdrop-125 -m limit --limit 1/second -j LOG +-A logdrop-125 -j DROP +-A logdrop-126 -m limit --limit 1/second -j LOG +-A logdrop-126 -j DROP +-A logdrop-127 -m limit --limit 1/second -j LOG +-A logdrop-127 -j DROP +-A logdrop-128 -m limit --limit 1/second -j LOG +-A logdrop-128 -j DROP +-A logdrop-129 -m limit --limit 1/second -j LOG +-A logdrop-129 -j DROP +-A logdrop-13 -m limit --limit 1/second -j LOG +-A logdrop-13 -j DROP +-A logdrop-130 -m limit --limit 1/second -j LOG +-A logdrop-130 -j DROP +-A logdrop-131 -m limit --limit 1/second -j LOG +-A logdrop-131 -j DROP +-A logdrop-132 -m limit --limit 1/second -j LOG +-A logdrop-132 -j DROP +-A logdrop-133 -m limit --limit 1/second -j LOG +-A logdrop-133 -j DROP +-A logdrop-134 -m limit --limit 1/second -j LOG +-A logdrop-134 -j DROP +-A logdrop-135 -m limit --limit 1/second -j LOG +-A logdrop-135 -j DROP +-A logdrop-136 -m limit --limit 1/second -j LOG +-A logdrop-136 -j DROP +-A logdrop-137 -m limit --limit 1/second -j LOG +-A logdrop-137 -j DROP +-A logdrop-138 -m limit --limit 1/second -j LOG +-A logdrop-138 -j DROP +-A logdrop-139 -m limit --limit 1/second -j LOG +-A logdrop-139 -j DROP +-A logdrop-14 -m limit --limit 1/second -j LOG +-A logdrop-14 -j DROP +-A logdrop-140 -m limit --limit 1/second -j LOG +-A logdrop-140 -j DROP +-A logdrop-141 -m limit --limit 1/second -j LOG +-A logdrop-141 -j DROP +-A logdrop-142 -m limit --limit 1/second -j LOG +-A logdrop-142 -j DROP +-A logdrop-143 -m limit --limit 1/second -j LOG +-A logdrop-143 -j DROP +-A logdrop-144 -m limit --limit 1/second -j LOG +-A logdrop-144 -j DROP +-A logdrop-145 -m limit --limit 1/second -j LOG +-A logdrop-145 -j DROP +-A logdrop-146 -m limit --limit 1/second -j LOG +-A logdrop-146 -j DROP +-A logdrop-147 -m limit --limit 1/second -j LOG +-A logdrop-147 -j DROP +-A logdrop-148 -m limit --limit 1/second -j LOG +-A logdrop-148 -j DROP +-A logdrop-149 -m limit --limit 1/second -j LOG +-A logdrop-149 -j DROP +-A logdrop-15 -m limit --limit 1/second -j LOG +-A logdrop-15 -j DROP +-A logdrop-150 -m limit --limit 1/second -j LOG +-A logdrop-150 -j DROP +-A logdrop-151 -m limit --limit 1/second -j LOG +-A logdrop-151 -j DROP +-A logdrop-152 -m limit --limit 1/second -j LOG +-A logdrop-152 -j DROP +-A logdrop-153 -m limit --limit 1/second -j LOG +-A logdrop-153 -j DROP +-A logdrop-154 -m limit --limit 1/second -j LOG +-A logdrop-154 -j DROP +-A logdrop-155 -m limit --limit 1/second -j LOG +-A logdrop-155 -j DROP +-A logdrop-156 -m limit --limit 1/second -j LOG +-A logdrop-156 -j DROP +-A logdrop-157 -m limit --limit 1/second -j LOG +-A logdrop-157 -j DROP +-A logdrop-158 -m limit --limit 1/second -j LOG +-A logdrop-158 -j DROP +-A logdrop-159 -m limit --limit 1/second -j LOG +-A logdrop-159 -j DROP +-A logdrop-16 -m limit --limit 1/second -j LOG +-A logdrop-16 -j DROP +-A logdrop-160 -m limit --limit 1/second -j LOG +-A logdrop-160 -j DROP +-A logdrop-161 -m limit --limit 1/second -j LOG +-A logdrop-161 -j DROP +-A logdrop-162 -m limit --limit 1/second -j LOG +-A logdrop-162 -j DROP +-A logdrop-163 -m limit --limit 1/second -j LOG +-A logdrop-163 -j DROP +-A logdrop-164 -m limit --limit 1/second -j LOG +-A logdrop-164 -j DROP +-A logdrop-165 -m limit --limit 1/second -j LOG +-A logdrop-165 -j DROP +-A logdrop-166 -m limit --limit 1/second -j LOG +-A logdrop-166 -j DROP +-A logdrop-167 -m limit --limit 1/second -j LOG +-A logdrop-167 -j DROP +-A logdrop-168 -m limit --limit 1/second -j LOG +-A logdrop-168 -j DROP +-A logdrop-169 -m limit --limit 1/second -j LOG +-A logdrop-169 -j DROP +-A logdrop-17 -m limit --limit 1/second -j LOG +-A logdrop-17 -j DROP +-A logdrop-170 -m limit --limit 1/second -j LOG +-A logdrop-170 -j DROP +-A logdrop-171 -m limit --limit 1/second -j LOG +-A logdrop-171 -j DROP +-A logdrop-172 -m limit --limit 1/second -j LOG +-A logdrop-172 -j DROP +-A logdrop-173 -m limit --limit 1/second -j LOG +-A logdrop-173 -j DROP +-A logdrop-174 -m limit --limit 1/second -j LOG +-A logdrop-174 -j DROP +-A logdrop-175 -m limit --limit 1/second -j LOG +-A logdrop-175 -j DROP +-A logdrop-176 -m limit --limit 1/second -j LOG +-A logdrop-176 -j DROP +-A logdrop-177 -m limit --limit 1/second -j LOG +-A logdrop-177 -j DROP +-A logdrop-178 -m limit --limit 1/second -j LOG +-A logdrop-178 -j DROP +-A logdrop-179 -m limit --limit 1/second -j LOG +-A logdrop-179 -j DROP +-A logdrop-18 -m limit --limit 1/second -j LOG +-A logdrop-18 -j DROP +-A logdrop-180 -m limit --limit 1/second -j LOG +-A logdrop-180 -j DROP +-A logdrop-181 -m limit --limit 1/second -j LOG +-A logdrop-181 -j DROP +-A logdrop-182 -m limit --limit 1/second -j LOG +-A logdrop-182 -j DROP +-A logdrop-183 -m limit --limit 1/second -j LOG +-A logdrop-183 -j DROP +-A logdrop-184 -m limit --limit 1/second -j LOG +-A logdrop-184 -j DROP +-A logdrop-185 -m limit --limit 1/second -j LOG +-A logdrop-185 -j DROP +-A logdrop-186 -m limit --limit 1/second -j LOG +-A logdrop-186 -j DROP +-A logdrop-187 -m limit --limit 1/second -j LOG +-A logdrop-187 -j DROP +-A logdrop-188 -m limit --limit 1/second -j LOG +-A logdrop-188 -j DROP +-A logdrop-189 -m limit --limit 1/second -j LOG +-A logdrop-189 -j DROP +-A logdrop-19 -m limit --limit 1/second -j LOG +-A logdrop-19 -j DROP +-A logdrop-190 -m limit --limit 1/second -j LOG +-A logdrop-190 -j DROP +-A logdrop-191 -m limit --limit 1/second -j LOG +-A logdrop-191 -j DROP +-A logdrop-192 -m limit --limit 1/second -j LOG +-A logdrop-192 -j DROP +-A logdrop-193 -m limit --limit 1/second -j LOG +-A logdrop-193 -j DROP +-A logdrop-194 -m limit --limit 1/second -j LOG +-A logdrop-194 -j DROP +-A logdrop-195 -m limit --limit 1/second -j LOG +-A logdrop-195 -j DROP +-A logdrop-196 -m limit --limit 1/second -j LOG +-A logdrop-196 -j DROP +-A logdrop-197 -m limit --limit 1/second -j LOG +-A logdrop-197 -j DROP +-A logdrop-198 -m limit --limit 1/second -j LOG +-A logdrop-198 -j DROP +-A logdrop-199 -m limit --limit 1/second -j LOG +-A logdrop-199 -j DROP +-A logdrop-2 -m limit --limit 1/second -j LOG +-A logdrop-2 -j DROP +-A logdrop-20 -m limit --limit 1/second -j LOG +-A logdrop-20 -j DROP +-A logdrop-200 -m limit --limit 1/second -j LOG +-A logdrop-200 -j DROP +-A logdrop-201 -m limit --limit 1/second -j LOG +-A logdrop-201 -j DROP +-A logdrop-202 -m limit --limit 1/second -j LOG +-A logdrop-202 -j DROP +-A logdrop-203 -m limit --limit 1/second -j LOG +-A logdrop-203 -j DROP +-A logdrop-204 -m limit --limit 1/second -j LOG +-A logdrop-204 -j DROP +-A logdrop-205 -m limit --limit 1/second -j LOG +-A logdrop-205 -j DROP +-A logdrop-206 -m limit --limit 1/second -j LOG +-A logdrop-206 -j DROP +-A logdrop-207 -m limit --limit 1/second -j LOG +-A logdrop-207 -j DROP +-A logdrop-208 -m limit --limit 1/second -j LOG +-A logdrop-208 -j DROP +-A logdrop-209 -m limit --limit 1/second -j LOG +-A logdrop-209 -j DROP +-A logdrop-21 -m limit --limit 1/second -j LOG +-A logdrop-21 -j DROP +-A logdrop-210 -m limit --limit 1/second -j LOG +-A logdrop-210 -j DROP +-A logdrop-211 -m limit --limit 1/second -j LOG +-A logdrop-211 -j DROP +-A logdrop-212 -m limit --limit 1/second -j LOG +-A logdrop-212 -j DROP +-A logdrop-213 -m limit --limit 1/second -j LOG +-A logdrop-213 -j DROP +-A logdrop-214 -m limit --limit 1/second -j LOG +-A logdrop-214 -j DROP +-A logdrop-215 -m limit --limit 1/second -j LOG +-A logdrop-215 -j DROP +-A logdrop-216 -m limit --limit 1/second -j LOG +-A logdrop-216 -j DROP +-A logdrop-217 -m limit --limit 1/second -j LOG +-A logdrop-217 -j DROP +-A logdrop-218 -m limit --limit 1/second -j LOG +-A logdrop-218 -j DROP +-A logdrop-219 -m limit --limit 1/second -j LOG +-A logdrop-219 -j DROP +-A logdrop-22 -m limit --limit 1/second -j LOG +-A logdrop-22 -j DROP +-A logdrop-220 -m limit --limit 1/second -j LOG +-A logdrop-220 -j DROP +-A logdrop-221 -m limit --limit 1/second -j LOG +-A logdrop-221 -j DROP +-A logdrop-222 -m limit --limit 1/second -j LOG +-A logdrop-222 -j DROP +-A logdrop-223 -m limit --limit 1/second -j LOG +-A logdrop-223 -j DROP +-A logdrop-224 -m limit --limit 1/second -j LOG +-A logdrop-224 -j DROP +-A logdrop-225 -m limit --limit 1/second -j LOG +-A logdrop-225 -j DROP +-A logdrop-226 -m limit --limit 1/second -j LOG +-A logdrop-226 -j DROP +-A logdrop-227 -m limit --limit 1/second -j LOG +-A logdrop-227 -j DROP +-A logdrop-228 -m limit --limit 1/second -j LOG +-A logdrop-228 -j DROP +-A logdrop-229 -m limit --limit 1/second -j LOG +-A logdrop-229 -j DROP +-A logdrop-23 -m limit --limit 1/second -j LOG +-A logdrop-23 -j DROP +-A logdrop-230 -m limit --limit 1/second -j LOG +-A logdrop-230 -j DROP +-A logdrop-231 -m limit --limit 1/second -j LOG +-A logdrop-231 -j DROP +-A logdrop-232 -m limit --limit 1/second -j LOG +-A logdrop-232 -j DROP +-A logdrop-233 -m limit --limit 1/second -j LOG +-A logdrop-233 -j DROP +-A logdrop-234 -m limit --limit 1/second -j LOG +-A logdrop-234 -j DROP +-A logdrop-235 -m limit --limit 1/second -j LOG +-A logdrop-235 -j DROP +-A logdrop-236 -m limit --limit 1/second -j LOG +-A logdrop-236 -j DROP +-A logdrop-237 -m limit --limit 1/second -j LOG +-A logdrop-237 -j DROP +-A logdrop-238 -m limit --limit 1/second -j LOG +-A logdrop-238 -j DROP +-A logdrop-239 -m limit --limit 1/second -j LOG +-A logdrop-239 -j DROP +-A logdrop-24 -m limit --limit 1/second -j LOG +-A logdrop-24 -j DROP +-A logdrop-240 -m limit --limit 1/second -j LOG +-A logdrop-240 -j DROP +-A logdrop-241 -m limit --limit 1/second -j LOG +-A logdrop-241 -j DROP +-A logdrop-242 -m limit --limit 1/second -j LOG +-A logdrop-242 -j DROP +-A logdrop-243 -m limit --limit 1/second -j LOG +-A logdrop-243 -j DROP +-A logdrop-244 -m limit --limit 1/second -j LOG +-A logdrop-244 -j DROP +-A logdrop-245 -m limit --limit 1/second -j LOG +-A logdrop-245 -j DROP +-A logdrop-246 -m limit --limit 1/second -j LOG +-A logdrop-246 -j DROP +-A logdrop-247 -m limit --limit 1/second -j LOG +-A logdrop-247 -j DROP +-A logdrop-248 -m limit --limit 1/second -j LOG +-A logdrop-248 -j DROP +-A logdrop-249 -m limit --limit 1/second -j LOG +-A logdrop-249 -j DROP +-A logdrop-25 -m limit --limit 1/second -j LOG +-A logdrop-25 -j DROP +-A logdrop-250 -m limit --limit 1/second -j LOG +-A logdrop-250 -j DROP +-A logdrop-251 -m limit --limit 1/second -j LOG +-A logdrop-251 -j DROP +-A logdrop-252 -m limit --limit 1/second -j LOG +-A logdrop-252 -j DROP +-A logdrop-253 -m limit --limit 1/second -j LOG +-A logdrop-253 -j DROP +-A logdrop-254 -m limit --limit 1/second -j LOG +-A logdrop-254 -j DROP +-A logdrop-255 -m limit --limit 1/second -j LOG +-A logdrop-255 -j DROP +-A logdrop-256 -m limit --limit 1/second -j LOG +-A logdrop-256 -j DROP +-A logdrop-257 -m limit --limit 1/second -j LOG +-A logdrop-257 -j DROP +-A logdrop-258 -m limit --limit 1/second -j LOG +-A logdrop-258 -j DROP +-A logdrop-259 -m limit --limit 1/second -j LOG +-A logdrop-259 -j DROP +-A logdrop-26 -m limit --limit 1/second -j LOG +-A logdrop-26 -j DROP +-A logdrop-260 -m limit --limit 1/second -j LOG +-A logdrop-260 -j DROP +-A logdrop-261 -m limit --limit 1/second -j LOG +-A logdrop-261 -j DROP +-A logdrop-262 -m limit --limit 1/second -j LOG +-A logdrop-262 -j DROP +-A logdrop-263 -m limit --limit 1/second -j LOG +-A logdrop-263 -j DROP +-A logdrop-264 -m limit --limit 1/second -j LOG +-A logdrop-264 -j DROP +-A logdrop-265 -m limit --limit 1/second -j LOG +-A logdrop-265 -j DROP +-A logdrop-266 -m limit --limit 1/second -j LOG +-A logdrop-266 -j DROP +-A logdrop-267 -m limit --limit 1/second -j LOG +-A logdrop-267 -j DROP +-A logdrop-268 -m limit --limit 1/second -j LOG +-A logdrop-268 -j DROP +-A logdrop-269 -m limit --limit 1/second -j LOG +-A logdrop-269 -j DROP +-A logdrop-27 -m limit --limit 1/second -j LOG +-A logdrop-27 -j DROP +-A logdrop-270 -m limit --limit 1/second -j LOG +-A logdrop-270 -j DROP +-A logdrop-271 -m limit --limit 1/second -j LOG +-A logdrop-271 -j DROP +-A logdrop-272 -m limit --limit 1/second -j LOG +-A logdrop-272 -j DROP +-A logdrop-273 -m limit --limit 1/second -j LOG +-A logdrop-273 -j DROP +-A logdrop-274 -m limit --limit 1/second -j LOG +-A logdrop-274 -j DROP +-A logdrop-275 -m limit --limit 1/second -j LOG +-A logdrop-275 -j DROP +-A logdrop-276 -m limit --limit 1/second -j LOG +-A logdrop-276 -j DROP +-A logdrop-277 -m limit --limit 1/second -j LOG +-A logdrop-277 -j DROP +-A logdrop-278 -m limit --limit 1/second -j LOG +-A logdrop-278 -j DROP +-A logdrop-279 -m limit --limit 1/second -j LOG +-A logdrop-279 -j DROP +-A logdrop-28 -m limit --limit 1/second -j LOG +-A logdrop-28 -j DROP +-A logdrop-280 -m limit --limit 1/second -j LOG +-A logdrop-280 -j DROP +-A logdrop-281 -m limit --limit 1/second -j LOG +-A logdrop-281 -j DROP +-A logdrop-282 -m limit --limit 1/second -j LOG +-A logdrop-282 -j DROP +-A logdrop-283 -m limit --limit 1/second -j LOG +-A logdrop-283 -j DROP +-A logdrop-284 -m limit --limit 1/second -j LOG +-A logdrop-284 -j DROP +-A logdrop-285 -m limit --limit 1/second -j LOG +-A logdrop-285 -j DROP +-A logdrop-286 -m limit --limit 1/second -j LOG +-A logdrop-286 -j DROP +-A logdrop-287 -m limit --limit 1/second -j LOG +-A logdrop-287 -j DROP +-A logdrop-288 -m limit --limit 1/second -j LOG +-A logdrop-288 -j DROP +-A logdrop-289 -m limit --limit 1/second -j LOG +-A logdrop-289 -j DROP +-A logdrop-29 -m limit --limit 1/second -j LOG +-A logdrop-29 -j DROP +-A logdrop-290 -m limit --limit 1/second -j LOG +-A logdrop-290 -j DROP +-A logdrop-291 -m limit --limit 1/second -j LOG +-A logdrop-291 -j DROP +-A logdrop-292 -m limit --limit 1/second -j LOG +-A logdrop-292 -j DROP +-A logdrop-293 -m limit --limit 1/second -j LOG +-A logdrop-293 -j DROP +-A logdrop-294 -m limit --limit 1/second -j LOG +-A logdrop-294 -j DROP +-A logdrop-295 -m limit --limit 1/second -j LOG +-A logdrop-295 -j DROP +-A logdrop-296 -m limit --limit 1/second -j LOG +-A logdrop-296 -j DROP +-A logdrop-297 -m limit --limit 1/second -j LOG +-A logdrop-297 -j DROP +-A logdrop-298 -m limit --limit 1/second -j LOG +-A logdrop-298 -j DROP +-A logdrop-299 -m limit --limit 1/second -j LOG +-A logdrop-299 -j DROP +-A logdrop-3 -m limit --limit 1/second -j LOG +-A logdrop-3 -j DROP +-A logdrop-30 -m limit --limit 1/second -j LOG +-A logdrop-30 -j DROP +-A logdrop-300 -m limit --limit 1/second -j LOG +-A logdrop-300 -j DROP +-A logdrop-301 -m limit --limit 1/second -j LOG +-A logdrop-301 -j DROP +-A logdrop-302 -m limit --limit 1/second -j LOG +-A logdrop-302 -j DROP +-A logdrop-303 -m limit --limit 1/second -j LOG +-A logdrop-303 -j DROP +-A logdrop-304 -m limit --limit 1/second -j LOG +-A logdrop-304 -j DROP +-A logdrop-305 -m limit --limit 1/second -j LOG +-A logdrop-305 -j DROP +-A logdrop-306 -m limit --limit 1/second -j LOG +-A logdrop-306 -j DROP +-A logdrop-307 -m limit --limit 1/second -j LOG +-A logdrop-307 -j DROP +-A logdrop-308 -m limit --limit 1/second -j LOG +-A logdrop-308 -j DROP +-A logdrop-309 -m limit --limit 1/second -j LOG +-A logdrop-309 -j DROP +-A logdrop-31 -m limit --limit 1/second -j LOG +-A logdrop-31 -j DROP +-A logdrop-310 -m limit --limit 1/second -j LOG +-A logdrop-310 -j DROP +-A logdrop-311 -m limit --limit 1/second -j LOG +-A logdrop-311 -j DROP +-A logdrop-312 -m limit --limit 1/second -j LOG +-A logdrop-312 -j DROP +-A logdrop-313 -m limit --limit 1/second -j LOG +-A logdrop-313 -j DROP +-A logdrop-314 -m limit --limit 1/second -j LOG +-A logdrop-314 -j DROP +-A logdrop-315 -m limit --limit 1/second -j LOG +-A logdrop-315 -j DROP +-A logdrop-316 -m limit --limit 1/second -j LOG +-A logdrop-316 -j DROP +-A logdrop-317 -m limit --limit 1/second -j LOG +-A logdrop-317 -j DROP +-A logdrop-318 -m limit --limit 1/second -j LOG +-A logdrop-318 -j DROP +-A logdrop-319 -m limit --limit 1/second -j LOG +-A logdrop-319 -j DROP +-A logdrop-32 -m limit --limit 1/second -j LOG +-A logdrop-32 -j DROP +-A logdrop-320 -m limit --limit 1/second -j LOG +-A logdrop-320 -j DROP +-A logdrop-321 -m limit --limit 1/second -j LOG +-A logdrop-321 -j DROP +-A logdrop-322 -m limit --limit 1/second -j LOG +-A logdrop-322 -j DROP +-A logdrop-323 -m limit --limit 1/second -j LOG +-A logdrop-323 -j DROP +-A logdrop-324 -m limit --limit 1/second -j LOG +-A logdrop-324 -j DROP +-A logdrop-325 -m limit --limit 1/second -j LOG +-A logdrop-325 -j DROP +-A logdrop-326 -m limit --limit 1/second -j LOG +-A logdrop-326 -j DROP +-A logdrop-327 -m limit --limit 1/second -j LOG +-A logdrop-327 -j DROP +-A logdrop-328 -m limit --limit 1/second -j LOG +-A logdrop-328 -j DROP +-A logdrop-329 -m limit --limit 1/second -j LOG +-A logdrop-329 -j DROP +-A logdrop-33 -m limit --limit 1/second -j LOG +-A logdrop-33 -j DROP +-A logdrop-330 -m limit --limit 1/second -j LOG +-A logdrop-330 -j DROP +-A logdrop-331 -m limit --limit 1/second -j LOG +-A logdrop-331 -j DROP +-A logdrop-332 -m limit --limit 1/second -j LOG +-A logdrop-332 -j DROP +-A logdrop-333 -m limit --limit 1/second -j LOG +-A logdrop-333 -j DROP +-A logdrop-334 -m limit --limit 1/second -j LOG +-A logdrop-334 -j DROP +-A logdrop-335 -m limit --limit 1/second -j LOG +-A logdrop-335 -j DROP +-A logdrop-336 -m limit --limit 1/second -j LOG +-A logdrop-336 -j DROP +-A logdrop-337 -m limit --limit 1/second -j LOG +-A logdrop-337 -j DROP +-A logdrop-338 -m limit --limit 1/second -j LOG +-A logdrop-338 -j DROP +-A logdrop-339 -m limit --limit 1/second -j LOG +-A logdrop-339 -j DROP +-A logdrop-34 -m limit --limit 1/second -j LOG +-A logdrop-34 -j DROP +-A logdrop-340 -m limit --limit 1/second -j LOG +-A logdrop-340 -j DROP +-A logdrop-341 -m limit --limit 1/second -j LOG +-A logdrop-341 -j DROP +-A logdrop-342 -m limit --limit 1/second -j LOG +-A logdrop-342 -j DROP +-A logdrop-343 -m limit --limit 1/second -j LOG +-A logdrop-343 -j DROP +-A logdrop-344 -m limit --limit 1/second -j LOG +-A logdrop-344 -j DROP +-A logdrop-345 -m limit --limit 1/second -j LOG +-A logdrop-345 -j DROP +-A logdrop-346 -m limit --limit 1/second -j LOG +-A logdrop-346 -j DROP +-A logdrop-347 -m limit --limit 1/second -j LOG +-A logdrop-347 -j DROP +-A logdrop-348 -m limit --limit 1/second -j LOG +-A logdrop-348 -j DROP +-A logdrop-349 -m limit --limit 1/second -j LOG +-A logdrop-349 -j DROP +-A logdrop-35 -m limit --limit 1/second -j LOG +-A logdrop-35 -j DROP +-A logdrop-350 -m limit --limit 1/second -j LOG +-A logdrop-350 -j DROP +-A logdrop-351 -m limit --limit 1/second -j LOG +-A logdrop-351 -j DROP +-A logdrop-352 -m limit --limit 1/second -j LOG +-A logdrop-352 -j DROP +-A logdrop-353 -m limit --limit 1/second -j LOG +-A logdrop-353 -j DROP +-A logdrop-354 -m limit --limit 1/second -j LOG +-A logdrop-354 -j DROP +-A logdrop-355 -m limit --limit 1/second -j LOG +-A logdrop-355 -j DROP +-A logdrop-356 -m limit --limit 1/second -j LOG +-A logdrop-356 -j DROP +-A logdrop-357 -m limit --limit 1/second -j LOG +-A logdrop-357 -j DROP +-A logdrop-358 -m limit --limit 1/second -j LOG +-A logdrop-358 -j DROP +-A logdrop-359 -m limit --limit 1/second -j LOG +-A logdrop-359 -j DROP +-A logdrop-36 -m limit --limit 1/second -j LOG +-A logdrop-36 -j DROP +-A logdrop-360 -m limit --limit 1/second -j LOG +-A logdrop-360 -j DROP +-A logdrop-361 -m limit --limit 1/second -j LOG +-A logdrop-361 -j DROP +-A logdrop-362 -m limit --limit 1/second -j LOG +-A logdrop-362 -j DROP +-A logdrop-363 -m limit --limit 1/second -j LOG +-A logdrop-363 -j DROP +-A logdrop-364 -m limit --limit 1/second -j LOG +-A logdrop-364 -j DROP +-A logdrop-365 -m limit --limit 1/second -j LOG +-A logdrop-365 -j DROP +-A logdrop-366 -m limit --limit 1/second -j LOG +-A logdrop-366 -j DROP +-A logdrop-367 -m limit --limit 1/second -j LOG +-A logdrop-367 -j DROP +-A logdrop-368 -m limit --limit 1/second -j LOG +-A logdrop-368 -j DROP +-A logdrop-369 -m limit --limit 1/second -j LOG +-A logdrop-369 -j DROP +-A logdrop-37 -m limit --limit 1/second -j LOG +-A logdrop-37 -j DROP +-A logdrop-370 -m limit --limit 1/second -j LOG +-A logdrop-370 -j DROP +-A logdrop-371 -m limit --limit 1/second -j LOG +-A logdrop-371 -j DROP +-A logdrop-372 -m limit --limit 1/second -j LOG +-A logdrop-372 -j DROP +-A logdrop-373 -m limit --limit 1/second -j LOG +-A logdrop-373 -j DROP +-A logdrop-374 -m limit --limit 1/second -j LOG +-A logdrop-374 -j DROP +-A logdrop-375 -m limit --limit 1/second -j LOG +-A logdrop-375 -j DROP +-A logdrop-376 -m limit --limit 1/second -j LOG +-A logdrop-376 -j DROP +-A logdrop-377 -m limit --limit 1/second -j LOG +-A logdrop-377 -j DROP +-A logdrop-378 -m limit --limit 1/second -j LOG +-A logdrop-378 -j DROP +-A logdrop-379 -m limit --limit 1/second -j LOG +-A logdrop-379 -j DROP +-A logdrop-38 -m limit --limit 1/second -j LOG +-A logdrop-38 -j DROP +-A logdrop-380 -m limit --limit 1/second -j LOG +-A logdrop-380 -j DROP +-A logdrop-381 -m limit --limit 1/second -j LOG +-A logdrop-381 -j DROP +-A logdrop-382 -m limit --limit 1/second -j LOG +-A logdrop-382 -j DROP +-A logdrop-383 -m limit --limit 1/second -j LOG +-A logdrop-383 -j DROP +-A logdrop-384 -m limit --limit 1/second -j LOG +-A logdrop-384 -j DROP +-A logdrop-385 -m limit --limit 1/second -j LOG +-A logdrop-385 -j DROP +-A logdrop-386 -m limit --limit 1/second -j LOG +-A logdrop-386 -j DROP +-A logdrop-387 -m limit --limit 1/second -j LOG +-A logdrop-387 -j DROP +-A logdrop-388 -m limit --limit 1/second -j LOG +-A logdrop-388 -j DROP +-A logdrop-389 -m limit --limit 1/second -j LOG +-A logdrop-389 -j DROP +-A logdrop-39 -m limit --limit 1/second -j LOG +-A logdrop-39 -j DROP +-A logdrop-390 -m limit --limit 1/second -j LOG +-A logdrop-390 -j DROP +-A logdrop-391 -m limit --limit 1/second -j LOG +-A logdrop-391 -j DROP +-A logdrop-392 -m limit --limit 1/second -j LOG +-A logdrop-392 -j DROP +-A logdrop-393 -m limit --limit 1/second -j LOG +-A logdrop-393 -j DROP +-A logdrop-394 -m limit --limit 1/second -j LOG +-A logdrop-394 -j DROP +-A logdrop-395 -m limit --limit 1/second -j LOG +-A logdrop-395 -j DROP +-A logdrop-396 -m limit --limit 1/second -j LOG +-A logdrop-396 -j DROP +-A logdrop-397 -m limit --limit 1/second -j LOG +-A logdrop-397 -j DROP +-A logdrop-398 -m limit --limit 1/second -j LOG +-A logdrop-398 -j DROP +-A logdrop-399 -m limit --limit 1/second -j LOG +-A logdrop-399 -j DROP +-A logdrop-4 -m limit --limit 1/second -j LOG +-A logdrop-4 -j DROP +-A logdrop-40 -m limit --limit 1/second -j LOG +-A logdrop-40 -j DROP +-A logdrop-400 -m limit --limit 1/second -j LOG +-A logdrop-400 -j DROP +-A logdrop-401 -m limit --limit 1/second -j LOG +-A logdrop-401 -j DROP +-A logdrop-402 -m limit --limit 1/second -j LOG +-A logdrop-402 -j DROP +-A logdrop-403 -m limit --limit 1/second -j LOG +-A logdrop-403 -j DROP +-A logdrop-404 -m limit --limit 1/second -j LOG +-A logdrop-404 -j DROP +-A logdrop-405 -m limit --limit 1/second -j LOG +-A logdrop-405 -j DROP +-A logdrop-406 -m limit --limit 1/second -j LOG +-A logdrop-406 -j DROP +-A logdrop-407 -m limit --limit 1/second -j LOG +-A logdrop-407 -j DROP +-A logdrop-408 -m limit --limit 1/second -j LOG +-A logdrop-408 -j DROP +-A logdrop-409 -m limit --limit 1/second -j LOG +-A logdrop-409 -j DROP +-A logdrop-41 -m limit --limit 1/second -j LOG +-A logdrop-41 -j DROP +-A logdrop-410 -m limit --limit 1/second -j LOG +-A logdrop-410 -j DROP +-A logdrop-411 -m limit --limit 1/second -j LOG +-A logdrop-411 -j DROP +-A logdrop-412 -m limit --limit 1/second -j LOG +-A logdrop-412 -j DROP +-A logdrop-413 -m limit --limit 1/second -j LOG +-A logdrop-413 -j DROP +-A logdrop-414 -m limit --limit 1/second -j LOG +-A logdrop-414 -j DROP +-A logdrop-415 -m limit --limit 1/second -j LOG +-A logdrop-415 -j DROP +-A logdrop-416 -m limit --limit 1/second -j LOG +-A logdrop-416 -j DROP +-A logdrop-417 -m limit --limit 1/second -j LOG +-A logdrop-417 -j DROP +-A logdrop-418 -m limit --limit 1/second -j LOG +-A logdrop-418 -j DROP +-A logdrop-419 -m limit --limit 1/second -j LOG +-A logdrop-419 -j DROP +-A logdrop-42 -m limit --limit 1/second -j LOG +-A logdrop-42 -j DROP +-A logdrop-420 -m limit --limit 1/second -j LOG +-A logdrop-420 -j DROP +-A logdrop-421 -m limit --limit 1/second -j LOG +-A logdrop-421 -j DROP +-A logdrop-422 -m limit --limit 1/second -j LOG +-A logdrop-422 -j DROP +-A logdrop-423 -m limit --limit 1/second -j LOG +-A logdrop-423 -j DROP +-A logdrop-424 -m limit --limit 1/second -j LOG +-A logdrop-424 -j DROP +-A logdrop-425 -m limit --limit 1/second -j LOG +-A logdrop-425 -j DROP +-A logdrop-426 -m limit --limit 1/second -j LOG +-A logdrop-426 -j DROP +-A logdrop-427 -m limit --limit 1/second -j LOG +-A logdrop-427 -j DROP +-A logdrop-428 -m limit --limit 1/second -j LOG +-A logdrop-428 -j DROP +-A logdrop-429 -m limit --limit 1/second -j LOG +-A logdrop-429 -j DROP +-A logdrop-43 -m limit --limit 1/second -j LOG +-A logdrop-43 -j DROP +-A logdrop-430 -m limit --limit 1/second -j LOG +-A logdrop-430 -j DROP +-A logdrop-431 -m limit --limit 1/second -j LOG +-A logdrop-431 -j DROP +-A logdrop-432 -m limit --limit 1/second -j LOG +-A logdrop-432 -j DROP +-A logdrop-433 -m limit --limit 1/second -j LOG +-A logdrop-433 -j DROP +-A logdrop-434 -m limit --limit 1/second -j LOG +-A logdrop-434 -j DROP +-A logdrop-435 -m limit --limit 1/second -j LOG +-A logdrop-435 -j DROP +-A logdrop-436 -m limit --limit 1/second -j LOG +-A logdrop-436 -j DROP +-A logdrop-437 -m limit --limit 1/second -j LOG +-A logdrop-437 -j DROP +-A logdrop-438 -m limit --limit 1/second -j LOG +-A logdrop-438 -j DROP +-A logdrop-439 -m limit --limit 1/second -j LOG +-A logdrop-439 -j DROP +-A logdrop-44 -m limit --limit 1/second -j LOG +-A logdrop-44 -j DROP +-A logdrop-440 -m limit --limit 1/second -j LOG +-A logdrop-440 -j DROP +-A logdrop-441 -m limit --limit 1/second -j LOG +-A logdrop-441 -j DROP +-A logdrop-442 -m limit --limit 1/second -j LOG +-A logdrop-442 -j DROP +-A logdrop-443 -m limit --limit 1/second -j LOG +-A logdrop-443 -j DROP +-A logdrop-444 -m limit --limit 1/second -j LOG +-A logdrop-444 -j DROP +-A logdrop-445 -m limit --limit 1/second -j LOG +-A logdrop-445 -j DROP +-A logdrop-446 -m limit --limit 1/second -j LOG +-A logdrop-446 -j DROP +-A logdrop-447 -m limit --limit 1/second -j LOG +-A logdrop-447 -j DROP +-A logdrop-448 -m limit --limit 1/second -j LOG +-A logdrop-448 -j DROP +-A logdrop-449 -m limit --limit 1/second -j LOG +-A logdrop-449 -j DROP +-A logdrop-45 -m limit --limit 1/second -j LOG +-A logdrop-45 -j DROP +-A logdrop-450 -m limit --limit 1/second -j LOG +-A logdrop-450 -j DROP +-A logdrop-451 -m limit --limit 1/second -j LOG +-A logdrop-451 -j DROP +-A logdrop-452 -m limit --limit 1/second -j LOG +-A logdrop-452 -j DROP +-A logdrop-453 -m limit --limit 1/second -j LOG +-A logdrop-453 -j DROP +-A logdrop-454 -m limit --limit 1/second -j LOG +-A logdrop-454 -j DROP +-A logdrop-455 -m limit --limit 1/second -j LOG +-A logdrop-455 -j DROP +-A logdrop-456 -m limit --limit 1/second -j LOG +-A logdrop-456 -j DROP +-A logdrop-457 -m limit --limit 1/second -j LOG +-A logdrop-457 -j DROP +-A logdrop-46 -m limit --limit 1/second -j LOG +-A logdrop-46 -j DROP +-A logdrop-47 -m limit --limit 1/second -j LOG +-A logdrop-47 -j DROP +-A logdrop-48 -m limit --limit 1/second -j LOG +-A logdrop-48 -j DROP +-A logdrop-49 -m limit --limit 1/second -j LOG +-A logdrop-49 -j DROP +-A logdrop-5 -m limit --limit 1/second -j LOG +-A logdrop-5 -j DROP +-A logdrop-50 -m limit --limit 1/second -j LOG +-A logdrop-50 -j DROP +-A logdrop-51 -m limit --limit 1/second -j LOG +-A logdrop-51 -j DROP +-A logdrop-52 -m limit --limit 1/second -j LOG +-A logdrop-52 -j DROP +-A logdrop-53 -m limit --limit 1/second -j LOG +-A logdrop-53 -j DROP +-A logdrop-54 -m limit --limit 1/second -j LOG +-A logdrop-54 -j DROP +-A logdrop-55 -m limit --limit 1/second -j LOG +-A logdrop-55 -j DROP +-A logdrop-56 -m limit --limit 1/second -j LOG +-A logdrop-56 -j DROP +-A logdrop-57 -m limit --limit 1/second -j LOG +-A logdrop-57 -j DROP +-A logdrop-58 -m limit --limit 1/second -j LOG +-A logdrop-58 -j DROP +-A logdrop-59 -m limit --limit 1/second -j LOG +-A logdrop-59 -j DROP +-A logdrop-6 -m limit --limit 1/second -j LOG +-A logdrop-6 -j DROP +-A logdrop-60 -m limit --limit 1/second -j LOG +-A logdrop-60 -j DROP +-A logdrop-61 -m limit --limit 1/second -j LOG +-A logdrop-61 -j DROP +-A logdrop-62 -m limit --limit 1/second -j LOG +-A logdrop-62 -j DROP +-A logdrop-63 -m limit --limit 1/second -j LOG +-A logdrop-63 -j DROP +-A logdrop-64 -m limit --limit 1/second -j LOG +-A logdrop-64 -j DROP +-A logdrop-65 -m limit --limit 1/second -j LOG +-A logdrop-65 -j DROP +-A logdrop-66 -m limit --limit 1/second -j LOG +-A logdrop-66 -j DROP +-A logdrop-67 -m limit --limit 1/second -j LOG +-A logdrop-67 -j DROP +-A logdrop-68 -m limit --limit 1/second -j LOG +-A logdrop-68 -j DROP +-A logdrop-69 -m limit --limit 1/second -j LOG +-A logdrop-69 -j DROP +-A logdrop-7 -m limit --limit 1/second -j LOG +-A logdrop-7 -j DROP +-A logdrop-70 -m limit --limit 1/second -j LOG +-A logdrop-70 -j DROP +-A logdrop-71 -m limit --limit 1/second -j LOG +-A logdrop-71 -j DROP +-A logdrop-72 -m limit --limit 1/second -j LOG +-A logdrop-72 -j DROP +-A logdrop-73 -m limit --limit 1/second -j LOG +-A logdrop-73 -j DROP +-A logdrop-74 -m limit --limit 1/second -j LOG +-A logdrop-74 -j DROP +-A logdrop-75 -m limit --limit 1/second -j LOG +-A logdrop-75 -j DROP +-A logdrop-76 -m limit --limit 1/second -j LOG +-A logdrop-76 -j DROP +-A logdrop-77 -m limit --limit 1/second -j LOG +-A logdrop-77 -j DROP +-A logdrop-78 -m limit --limit 1/second -j LOG +-A logdrop-78 -j DROP +-A logdrop-79 -m limit --limit 1/second -j LOG +-A logdrop-79 -j DROP +-A logdrop-8 -m limit --limit 1/second -j LOG +-A logdrop-8 -j DROP +-A logdrop-80 -m limit --limit 1/second -j LOG +-A logdrop-80 -j DROP +-A logdrop-81 -m limit --limit 1/second -j LOG +-A logdrop-81 -j DROP +-A logdrop-82 -m limit --limit 1/second -j LOG +-A logdrop-82 -j DROP +-A logdrop-83 -m limit --limit 1/second -j LOG +-A logdrop-83 -j DROP +-A logdrop-84 -m limit --limit 1/second -j LOG +-A logdrop-84 -j DROP +-A logdrop-85 -m limit --limit 1/second -j LOG +-A logdrop-85 -j DROP +-A logdrop-86 -m limit --limit 1/second -j LOG +-A logdrop-86 -j DROP +-A logdrop-87 -m limit --limit 1/second -j LOG +-A logdrop-87 -j DROP +-A logdrop-88 -m limit --limit 1/second -j LOG +-A logdrop-88 -j DROP +-A logdrop-89 -m limit --limit 1/second -j LOG +-A logdrop-89 -j DROP +-A logdrop-9 -m limit --limit 1/second -j LOG +-A logdrop-9 -j DROP +-A logdrop-90 -m limit --limit 1/second -j LOG +-A logdrop-90 -j DROP +-A logdrop-91 -m limit --limit 1/second -j LOG +-A logdrop-91 -j DROP +-A logdrop-92 -m limit --limit 1/second -j LOG +-A logdrop-92 -j DROP +-A logdrop-93 -m limit --limit 1/second -j LOG +-A logdrop-93 -j DROP +-A logdrop-94 -m limit --limit 1/second -j LOG +-A logdrop-94 -j DROP +-A logdrop-95 -m limit --limit 1/second -j LOG +-A logdrop-95 -j DROP +-A logdrop-96 -m limit --limit 1/second -j LOG +-A logdrop-96 -j DROP +-A logdrop-97 -m limit --limit 1/second -j LOG +-A logdrop-97 -j DROP +-A logdrop-98 -m limit --limit 1/second -j LOG +-A logdrop-98 -j DROP +-A logdrop-99 -m limit --limit 1/second -j LOG +-A logdrop-99 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT diff --git a/test/output/filter/dump b/test/output/filter/dump new file mode 100644 index 0000000..b05066f --- /dev/null +++ b/test/output/filter/dump @@ -0,0 +1,896 @@ +Dnat 1 {"in":["_fw","A"]} +(zone) + inet/nat/OUTPUT -j REDIRECT + inet/nat/PREROUTING -i eth0 -j REDIRECT + +Dnat 2 {"in":"B"} +(zone) + inet/nat/PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT + + +Filter 1 {} +(filter) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 2 {"action":"accept"} +(filter) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 3 {"action":"drop"} +(filter) + inet/filter/FORWARD -j logdrop-0 + inet6/filter/FORWARD -j logdrop-0 + inet/filter/INPUT -j logdrop-0 + inet6/filter/INPUT -j logdrop-0 + inet/filter/OUTPUT -j logdrop-0 + inet6/filter/OUTPUT -j logdrop-0 + inet/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet/filter/logdrop-0 -j DROP + inet6/filter/logdrop-0 -j DROP + +Filter 4 {"action":"pass"} +(filter) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 5 {"action":"reject"} +(filter) + inet/filter/FORWARD -j logreject-0 + inet6/filter/FORWARD -j logreject-0 + inet/filter/INPUT -j logreject-0 + inet6/filter/INPUT -j logreject-0 + inet/filter/OUTPUT -j logreject-0 + inet6/filter/OUTPUT -j logreject-0 + inet/filter/logreject-0 -m limit --limit 1/second -j LOG + inet6/filter/logreject-0 -m limit --limit 1/second -j LOG + inet/filter/logreject-0 -j REJECT + inet6/filter/logreject-0 -j REJECT + +Filter 6 {"action":"tarpit"} +(filter) + inet/filter/FORWARD -j logtarpit-0 + inet6/filter/FORWARD -j logtarpit-0 + inet/filter/INPUT -j logtarpit-0 + inet6/filter/INPUT -j logtarpit-0 + inet/filter/OUTPUT -j logtarpit-0 + inet6/filter/OUTPUT -j logtarpit-0 + inet/filter/logtarpit-0 -m limit --limit 1/second -j LOG + inet6/filter/logtarpit-0 -m limit --limit 1/second -j LOG + inet/filter/logtarpit-0 -j tarpit + inet6/filter/logtarpit-0 -j tarpit + inet/raw/PREROUTING -j CT --notrack + inet6/raw/PREROUTING -j CT --notrack + inet/raw/OUTPUT -j CT --notrack + inet6/raw/OUTPUT -j CT --notrack + +Filter 7 {} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 8 {"action":"drop"} +(log) + inet/filter/FORWARD -j logdrop-1 + inet6/filter/FORWARD -j logdrop-1 + inet/filter/INPUT -j logdrop-1 + inet6/filter/INPUT -j logdrop-1 + inet/filter/OUTPUT -j logdrop-1 + inet6/filter/OUTPUT -j logdrop-1 + inet/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1 -j DROP + inet6/filter/logdrop-1 -j DROP + +Filter 9 {"action":"pass"} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 10 {"log":false} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 11 {"action":"drop","log":false} +(log) + inet/filter/FORWARD -j DROP + inet6/filter/FORWARD -j DROP + inet/filter/INPUT -j DROP + inet6/filter/INPUT -j DROP + inet/filter/OUTPUT -j DROP + inet6/filter/OUTPUT -j DROP + +Filter 12 {"action":"pass","log":false} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 13 {"log":true} +(log) + inet/filter/FORWARD -j logaccept-0 + inet6/filter/FORWARD -j logaccept-0 + inet/filter/INPUT -j logaccept-0 + inet6/filter/INPUT -j logaccept-0 + inet/filter/OUTPUT -j logaccept-0 + inet6/filter/OUTPUT -j logaccept-0 + inet/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-0 -j ACCEPT + inet6/filter/logaccept-0 -j ACCEPT + +Filter 14 {"action":"drop","log":true} +(log) + inet/filter/FORWARD -j logdrop-2 + inet6/filter/FORWARD -j logdrop-2 + inet/filter/INPUT -j logdrop-2 + inet6/filter/INPUT -j logdrop-2 + inet/filter/OUTPUT -j logdrop-2 + inet6/filter/OUTPUT -j logdrop-2 + inet/filter/logdrop-2 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2 -j DROP + inet6/filter/logdrop-2 -j DROP + +Filter 15 {"action":"pass","log":true} +(log) + inet/filter/FORWARD -j logpass-0 + inet6/filter/FORWARD -j logpass-0 + inet/filter/INPUT -j logpass-0 + inet6/filter/INPUT -j logpass-0 + inet/filter/OUTPUT -j logpass-0 + inet6/filter/OUTPUT -j logpass-0 + inet/filter/logpass-0 -m limit --limit 1/second -j LOG + inet6/filter/logpass-0 -m limit --limit 1/second -j LOG + +Filter 16 {"log":"none"} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 17 {"action":"drop","log":"none"} +(log) + inet/filter/FORWARD -j DROP + inet6/filter/FORWARD -j DROP + inet/filter/INPUT -j DROP + inet6/filter/INPUT -j DROP + inet/filter/OUTPUT -j DROP + inet6/filter/OUTPUT -j DROP + +Filter 18 {"action":"pass","log":"none"} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 19 {"in":["_fw","A"]} +(zone) + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + inet/filter/FORWARD -i eth0 -j ACCEPT + inet6/filter/FORWARD -i eth0 -j ACCEPT + inet/filter/INPUT -i eth0 -j ACCEPT + inet6/filter/INPUT -i eth0 -j ACCEPT + +Filter 20 {"in":"B","out":"C"} +(zone) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + +Filter 21 {"out":["_fw","B"]} +(zone) + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT + +Filter 22 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +(zone) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT + + +Ipset awall-masquerade {"family":"inet","type":"hash:net"} +(masquerade) + + +Limit B true +(limit) + +Limit C 7 +(limit) + +Limit D {"inet":22,"inet6":58} +(limit) + + +Log _default {"limit":1} +(defaults) + +Log none {"mode":"none"} +(log) + + +Mark 1 {"in":["_fw","A"],"mark":0} +(zone) + inet/mangle/OUTPUT -j MARK --set-mark 0 + inet6/mangle/OUTPUT -j MARK --set-mark 0 + inet/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 + inet6/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 + +Mark 2 {"in":"B","mark":1,"out":"C"} +(zone) + inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 + inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 + +Mark 3 {"mark":2,"out":["_fw","B"]} +(zone) + inet/mangle/INPUT -j MARK --set-mark 2 + inet6/mangle/INPUT -j MARK --set-mark 2 + inet/mangle/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 + inet6/mangle/POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 + + +No-track 1 {"in":["_fw","A"]} +(zone) + inet/raw/OUTPUT -j CT --notrack + inet6/raw/OUTPUT -j CT --notrack + inet/raw/PREROUTING -i eth0 -j CT --notrack + inet6/raw/PREROUTING -i eth0 -j CT --notrack + +No-track 2 {"in":"B"} +(zone) + inet/raw/PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack + inet6/raw/PREROUTING -i eth1 -s fc00::/7 -j CT --notrack + +No-track 3 {"out":"_fw"} +(zone) + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack + + +Service babel {"port":6697,"proto":"tcp"} +(services) + +Service bacula-dir {"port":9101,"proto":"tcp"} +(services) + +Service bacula-fd {"port":9102,"proto":"tcp"} +(services) + +Service bacula-sd {"port":9103,"proto":"tcp"} +(services) + +Service bgp {"port":179,"proto":"tcp"} +(services) + +Service dhcp {"family":"inet","port":[67,68],"proto":"udp"} +(services) + +Service discard [{"port":9,"proto":"udp"},{"port":9,"proto":"tcp"}] +(services) + +Service dns [{"port":53,"proto":"udp"},{"port":53,"proto":"tcp"}] +(services) + +Service epmap [{"port":135,"proto":"tcp"},{"port":135,"proto":"udp"}] +(services) + +Service ftp {"ct-helper":"ftp","port":21,"proto":"tcp"} +(services) + +Service gre {"proto":"gre"} +(services) + +Service hp-pdl {"port":9100,"proto":"tcp"} +(services) + +Service http {"port":80,"proto":"tcp"} +(services) + +Service http-alt {"port":8080,"proto":"tcp"} +(services) + +Service https {"port":443,"proto":"tcp"} +(services) + +Service icmp {"proto":"icmp"} +(services) + +Service igmp {"proto":"igmp"} +(services) + +Service imap {"port":143,"proto":"tcp"} +(services) + +Service imaps {"port":993,"proto":"tcp"} +(services) + +Service ipsec [{"proto":"esp"},{"port":[500,4500],"proto":"udp"}] +(services) + +Service irc {"ct-helper":"irc","port":6667,"proto":"tcp"} +(services) + +Service kerberos [{"port":88,"proto":"tcp"},{"port":88,"proto":"udp"}] +(services) + +Service kpasswd [{"port":464,"proto":"tcp"},{"port":464,"proto":"udp"}] +(services) + +Service l2tp {"port":1701,"proto":"udp"} +(services) + +Service ldap [{"port":389,"proto":"tcp"},{"port":389,"proto":"udp"}] +(services) + +Service ldaps [{"port":636,"proto":"tcp"},{"port":636,"proto":"udp"}] +(services) + +Service microsoft-ds [{"port":445,"proto":"tcp"},{"port":445,"proto":"udp"}] +(services) + +Service ms-sql-m {"port":1434,"proto":"tcp"} +(services) + +Service ms-sql-s {"port":1433,"proto":"tcp"} +(services) + +Service msft-gc [{"port":3268,"proto":"tcp"},{"port":3268,"proto":"udp"}] +(services) + +Service msft-gc-ssl [{"port":3269,"proto":"tcp"},{"port":3269,"proto":"udp"}] +(services) + +Service netbios-ds [{"port":138,"proto":"tcp"},{"port":138,"proto":"udp"}] +(services) + +Service netbios-ns [{"family":"inet","port":137,"proto":"tcp"},{"ct-helper":"netbios-ns","family":"inet","port":137,"proto":"udp"}] +(services) + +Service netbios-ssn [{"port":139,"proto":"tcp"},{"port":139,"proto":"udp"}] +(services) + +Service ntp {"port":123,"proto":"udp"} +(services) + +Service ospf {"proto":"ospf"} +(services) + +Service pgsql {"port":5432,"proto":"tcp"} +(services) + +Service ping [{"proto":"icmp","reply-type":0,"type":8},{"proto":"icmpv6","reply-type":129,"type":128}] +(services) + +Service pop3 {"port":110,"proto":"tcp"} +(services) + +Service pop3s {"port":995,"proto":"tcp"} +(services) + +Service radius [{"port":1812,"proto":"udp"},{"port":1812,"proto":"tcp"}] +(services) + +Service radius-acct [{"port":1813,"proto":"udp"},{"port":1813,"proto":"tcp"}] +(services) + +Service rdp {"port":3389,"proto":"tcp"} +(services) + +Service rsync {"port":873,"proto":"tcp"} +(services) + +Service rtmp {"port":1935,"proto":"tcp"} +(services) + +Service rtsp {"port":554,"proto":"tcp"} +(services) + +Service sieve {"port":4190,"proto":"tcp"} +(services) + +Service sip [{"ct-helper":"sip","port":5060,"proto":"udp"},{"ct-helper":"sip","port":5060,"proto":"tcp"}] +(services) + +Service sip-tls [{"port":5061,"proto":"udp"},{"port":5061,"proto":"tcp"}] +(services) + +Service smtp {"port":25,"proto":"tcp"} +(services) + +Service snmp {"port":161,"proto":"udp"} +(services) + +Service snmp-trap {"port":162,"proto":"udp"} +(services) + +Service ssh {"port":22,"proto":"tcp"} +(services) + +Service submission {"port":587,"proto":"tcp"} +(services) + +Service syslog {"port":514,"proto":"udp"} +(services) + +Service telnet {"port":23,"proto":"tcp"} +(services) + +Service teredo {"port":3544,"proto":"udp"} +(services) + +Service tftp {"port":69,"proto":"udp"} +(services) + +Service vnc {"port":5900,"proto":"tcp"} +(services) + + +Snat 1 {"out":["_fw","B"]} +(zone) + inet/nat/INPUT -j MASQUERADE + inet/nat/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE + + +Variable awall_tproxy_mark 1 +(defaults) + + +Zone A {"iface":"eth0"} +(zone) + +Zone B {"addr":["10.0.0.0\/12","fc00::\/7"],"iface":"eth1"} +(zone) + +Zone C {"addr":"10.1.0.0\/12","iface":["eth2","eth3"]} +(zone) + +Zone D {"iface":["eth4","eth5"],"route-back":true} +(zone) + +Zone E {"ipsec":true} +(zone) + + +# ipset awall-masquerade +hash:net family inet + + +# rules-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logdrop-2 - [0:0] +:logpass-0 - [0:0] +:logreject-0 - [0:0] +:logtarpit-0 - [0:0] +:tarpit - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j logreject-0 +-A FORWARD -j logtarpit-0 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-1 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmp -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j logreject-0 +-A INPUT -j logtarpit-0 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-1 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j logreject-0 +-A OUTPUT -j logtarpit-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-1 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logdrop-2 -m limit --limit 1/second -j LOG +-A logdrop-2 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logreject-0 -m limit --limit 1/second -j LOG +-A logreject-0 -j REJECT +-A logtarpit-0 -m limit --limit 1/second -j LOG +-A logtarpit-0 -j tarpit +-A tarpit -p tcp -j TARPIT +-A tarpit -j DROP +COMMIT +*mangle +:FORWARD ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*nat +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +:awall-masquerade - [0:0] +-A INPUT -j MASQUERADE +-A OUTPUT -j REDIRECT +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE +-A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade +-A PREROUTING -i eth0 -j REDIRECT +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT +-A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT + +# rules6-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logdrop-2 - [0:0] +:logpass-0 - [0:0] +:logreject-0 - [0:0] +:logtarpit-0 - [0:0] +:tarpit - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j logreject-0 +-A FORWARD -j logtarpit-0 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-1 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j logreject-0 +-A INPUT -j logtarpit-0 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-1 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j logreject-0 +-A OUTPUT -j logtarpit-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-1 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logdrop-2 -m limit --limit 1/second -j LOG +-A logdrop-2 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logreject-0 -m limit --limit 1/second -j LOG +-A logreject-0 -j REJECT +-A logtarpit-0 -m limit --limit 1/second -j LOG +-A logtarpit-0 -j tarpit +-A tarpit -p tcp -j TARPIT +-A tarpit -j DROP +COMMIT +*mangle +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT + diff --git a/test/output/filter/ipset-awall-masquerade b/test/output/filter/ipset-awall-masquerade new file mode 100644 index 0000000..b3a47fd --- /dev/null +++ b/test/output/filter/ipset-awall-masquerade @@ -0,0 +1,2 @@ +# ipset awall-masquerade +hash:net family inet diff --git a/test/output/filter/rules-save b/test/output/filter/rules-save new file mode 100644 index 0000000..df9ab36 --- /dev/null +++ b/test/output/filter/rules-save @@ -0,0 +1,185 @@ +# rules-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logdrop-2 - [0:0] +:logpass-0 - [0:0] +:logreject-0 - [0:0] +:logtarpit-0 - [0:0] +:tarpit - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j logreject-0 +-A FORWARD -j logtarpit-0 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-1 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmp -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j logreject-0 +-A INPUT -j logtarpit-0 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-1 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j logreject-0 +-A OUTPUT -j logtarpit-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-1 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logdrop-2 -m limit --limit 1/second -j LOG +-A logdrop-2 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logreject-0 -m limit --limit 1/second -j LOG +-A logreject-0 -j REJECT +-A logtarpit-0 -m limit --limit 1/second -j LOG +-A logtarpit-0 -j tarpit +-A tarpit -p tcp -j TARPIT +-A tarpit -j DROP +COMMIT +*mangle +:FORWARD ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*nat +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +:awall-masquerade - [0:0] +-A INPUT -j MASQUERADE +-A OUTPUT -j REDIRECT +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE +-A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade +-A PREROUTING -i eth0 -j REDIRECT +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT +-A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT diff --git a/test/output/filter/rules6-save b/test/output/filter/rules6-save new file mode 100644 index 0000000..f2149d0 --- /dev/null +++ b/test/output/filter/rules6-save @@ -0,0 +1,145 @@ +# rules6-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logdrop-2 - [0:0] +:logpass-0 - [0:0] +:logreject-0 - [0:0] +:logtarpit-0 - [0:0] +:tarpit - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j logreject-0 +-A FORWARD -j logtarpit-0 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-1 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j logreject-0 +-A INPUT -j logtarpit-0 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-1 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j logreject-0 +-A OUTPUT -j logtarpit-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-1 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logdrop-2 -m limit --limit 1/second -j LOG +-A logdrop-2 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logreject-0 -m limit --limit 1/second -j LOG +-A logreject-0 -j REJECT +-A logtarpit-0 -m limit --limit 1/second -j LOG +-A logtarpit-0 -j tarpit +-A tarpit -p tcp -j TARPIT +-A tarpit -j DROP +COMMIT +*mangle +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT diff --git a/test/output/ipset-awall-masquerade b/test/output/ipset-awall-masquerade deleted file mode 100644 index b3a47fd..0000000 --- a/test/output/ipset-awall-masquerade +++ /dev/null @@ -1,2 +0,0 @@ -# ipset awall-masquerade -hash:net family inet diff --git a/test/output/no-track/dump b/test/output/no-track/dump new file mode 100644 index 0000000..9079c95 --- /dev/null +++ b/test/output/no-track/dump @@ -0,0 +1,882 @@ +Dnat 1 {"in":["_fw","A"]} +(zone) + inet/nat/OUTPUT -j REDIRECT + inet/nat/PREROUTING -i eth0 -j REDIRECT + +Dnat 2 {"in":"B"} +(zone) + inet/nat/PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT + + +Filter 1 {} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 2 {"action":"drop"} +(log) + inet/filter/FORWARD -j logdrop-0 + inet6/filter/FORWARD -j logdrop-0 + inet/filter/INPUT -j logdrop-0 + inet6/filter/INPUT -j logdrop-0 + inet/filter/OUTPUT -j logdrop-0 + inet6/filter/OUTPUT -j logdrop-0 + inet/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet/filter/logdrop-0 -j DROP + inet6/filter/logdrop-0 -j DROP + +Filter 3 {"action":"pass"} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 4 {"log":false} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 5 {"action":"drop","log":false} +(log) + inet/filter/FORWARD -j DROP + inet6/filter/FORWARD -j DROP + inet/filter/INPUT -j DROP + inet6/filter/INPUT -j DROP + inet/filter/OUTPUT -j DROP + inet6/filter/OUTPUT -j DROP + +Filter 6 {"action":"pass","log":false} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 7 {"log":true} +(log) + inet/filter/FORWARD -j logaccept-0 + inet6/filter/FORWARD -j logaccept-0 + inet/filter/INPUT -j logaccept-0 + inet6/filter/INPUT -j logaccept-0 + inet/filter/OUTPUT -j logaccept-0 + inet6/filter/OUTPUT -j logaccept-0 + inet/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-0 -j ACCEPT + inet6/filter/logaccept-0 -j ACCEPT + +Filter 8 {"action":"drop","log":true} +(log) + inet/filter/FORWARD -j logdrop-1 + inet6/filter/FORWARD -j logdrop-1 + inet/filter/INPUT -j logdrop-1 + inet6/filter/INPUT -j logdrop-1 + inet/filter/OUTPUT -j logdrop-1 + inet6/filter/OUTPUT -j logdrop-1 + inet/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1 -j DROP + inet6/filter/logdrop-1 -j DROP + +Filter 9 {"action":"pass","log":true} +(log) + inet/filter/FORWARD -j logpass-0 + inet6/filter/FORWARD -j logpass-0 + inet/filter/INPUT -j logpass-0 + inet6/filter/INPUT -j logpass-0 + inet/filter/OUTPUT -j logpass-0 + inet6/filter/OUTPUT -j logpass-0 + inet/filter/logpass-0 -m limit --limit 1/second -j LOG + inet6/filter/logpass-0 -m limit --limit 1/second -j LOG + +Filter 10 {"log":"none"} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 11 {"action":"drop","log":"none"} +(log) + inet/filter/FORWARD -j DROP + inet6/filter/FORWARD -j DROP + inet/filter/INPUT -j DROP + inet6/filter/INPUT -j DROP + inet/filter/OUTPUT -j DROP + inet6/filter/OUTPUT -j DROP + +Filter 12 {"action":"pass","log":"none"} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 13 {"in":"_fw","no-track":true,"service":"http"} +(no-track) + inet/filter/OUTPUT -p tcp --dport 80 -j ACCEPT + inet6/filter/OUTPUT -p tcp --dport 80 -j ACCEPT + inet/raw/OUTPUT -p tcp --dport 80 -j CT --notrack + inet6/raw/OUTPUT -p tcp --dport 80 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack + inet/filter/INPUT -p tcp --sport 80 -j ACCEPT + inet6/filter/INPUT -p tcp --sport 80 -j ACCEPT + +Filter 14 {"dest":"172.17.0.0\/16","no-track":true,"service":"radius","src":"172.16.0.0\/16"} +(no-track) + inet/filter/FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT + inet/filter/INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT + inet/filter/FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT + inet/filter/INPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT + inet/filter/OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT + inet/filter/OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT + inet/raw/PREROUTING -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack + inet/raw/PREROUTING -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack + inet/raw/OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack + inet/raw/OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack + inet/raw/PREROUTING -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack + inet/raw/PREROUTING -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack + inet/raw/OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack + inet/raw/OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack + inet/filter/FORWARD -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT + inet/filter/INPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT + inet/filter/FORWARD -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT + inet/filter/INPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT + inet/filter/OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT + inet/filter/OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT + +Filter 15 {"dest":"172.18.0.0\/16","no-track":true,"service":"ssh"} +(no-track) + inet/filter/FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT + inet/filter/INPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT + inet/filter/OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT + inet/raw/PREROUTING -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack + inet/raw/OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack + inet/raw/PREROUTING -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack + inet/raw/OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack + inet/filter/FORWARD -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT + inet/filter/INPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT + inet/filter/OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT + +Filter 16 {"no-track":true,"out":"_fw","service":"ipsec"} +(no-track) + inet/filter/INPUT -p esp -j ACCEPT + inet6/filter/INPUT -p esp -j ACCEPT + inet/filter/INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT + inet6/filter/INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack + inet/raw/OUTPUT -p esp -j CT --notrack + inet6/raw/OUTPUT -p esp -j CT --notrack + inet/raw/OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack + inet6/raw/OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack + inet/filter/OUTPUT -p esp -j ACCEPT + inet6/filter/OUTPUT -p esp -j ACCEPT + inet/filter/OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT + inet6/filter/OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT + +Filter 17 {"in":["_fw","A"]} +(zone) + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + inet/filter/FORWARD -i eth0 -j ACCEPT + inet6/filter/FORWARD -i eth0 -j ACCEPT + inet/filter/INPUT -i eth0 -j ACCEPT + inet6/filter/INPUT -i eth0 -j ACCEPT + +Filter 18 {"in":"B","out":"C"} +(zone) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + +Filter 19 {"out":["_fw","B"]} +(zone) + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT + +Filter 20 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +(zone) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT + + +Ipset awall-masquerade {"family":"inet","type":"hash:net"} +(masquerade) + + +Limit B true +(limit) + +Limit C 7 +(limit) + +Limit D {"inet":22,"inet6":58} +(limit) + + +Log _default {"limit":1} +(defaults) + +Log none {"mode":"none"} +(log) + + +Mark 1 {"in":["_fw","A"],"mark":0} +(zone) + inet/mangle/OUTPUT -j MARK --set-mark 0 + inet6/mangle/OUTPUT -j MARK --set-mark 0 + inet/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 + inet6/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 + +Mark 2 {"in":"B","mark":1,"out":"C"} +(zone) + inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 + inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 + +Mark 3 {"mark":2,"out":["_fw","B"]} +(zone) + inet/mangle/INPUT -j MARK --set-mark 2 + inet6/mangle/INPUT -j MARK --set-mark 2 + inet/mangle/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 + inet6/mangle/POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 + + +No-track 1 {"in":["_fw","A"]} +(zone) + inet/raw/OUTPUT -j CT --notrack + inet6/raw/OUTPUT -j CT --notrack + inet/raw/PREROUTING -i eth0 -j CT --notrack + inet6/raw/PREROUTING -i eth0 -j CT --notrack + +No-track 2 {"in":"B"} +(zone) + inet/raw/PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack + inet6/raw/PREROUTING -i eth1 -s fc00::/7 -j CT --notrack + +No-track 3 {"out":"_fw"} +(zone) + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack + + +Service babel {"port":6697,"proto":"tcp"} +(services) + +Service bacula-dir {"port":9101,"proto":"tcp"} +(services) + +Service bacula-fd {"port":9102,"proto":"tcp"} +(services) + +Service bacula-sd {"port":9103,"proto":"tcp"} +(services) + +Service bgp {"port":179,"proto":"tcp"} +(services) + +Service dhcp {"family":"inet","port":[67,68],"proto":"udp"} +(services) + +Service discard [{"port":9,"proto":"udp"},{"port":9,"proto":"tcp"}] +(services) + +Service dns [{"port":53,"proto":"udp"},{"port":53,"proto":"tcp"}] +(services) + +Service epmap [{"port":135,"proto":"tcp"},{"port":135,"proto":"udp"}] +(services) + +Service ftp {"ct-helper":"ftp","port":21,"proto":"tcp"} +(services) + +Service gre {"proto":"gre"} +(services) + +Service hp-pdl {"port":9100,"proto":"tcp"} +(services) + +Service http {"port":80,"proto":"tcp"} +(services) + +Service http-alt {"port":8080,"proto":"tcp"} +(services) + +Service https {"port":443,"proto":"tcp"} +(services) + +Service icmp {"proto":"icmp"} +(services) + +Service igmp {"proto":"igmp"} +(services) + +Service imap {"port":143,"proto":"tcp"} +(services) + +Service imaps {"port":993,"proto":"tcp"} +(services) + +Service ipsec [{"proto":"esp"},{"port":[500,4500],"proto":"udp"}] +(services) + +Service irc {"ct-helper":"irc","port":6667,"proto":"tcp"} +(services) + +Service kerberos [{"port":88,"proto":"tcp"},{"port":88,"proto":"udp"}] +(services) + +Service kpasswd [{"port":464,"proto":"tcp"},{"port":464,"proto":"udp"}] +(services) + +Service l2tp {"port":1701,"proto":"udp"} +(services) + +Service ldap [{"port":389,"proto":"tcp"},{"port":389,"proto":"udp"}] +(services) + +Service ldaps [{"port":636,"proto":"tcp"},{"port":636,"proto":"udp"}] +(services) + +Service microsoft-ds [{"port":445,"proto":"tcp"},{"port":445,"proto":"udp"}] +(services) + +Service ms-sql-m {"port":1434,"proto":"tcp"} +(services) + +Service ms-sql-s {"port":1433,"proto":"tcp"} +(services) + +Service msft-gc [{"port":3268,"proto":"tcp"},{"port":3268,"proto":"udp"}] +(services) + +Service msft-gc-ssl [{"port":3269,"proto":"tcp"},{"port":3269,"proto":"udp"}] +(services) + +Service netbios-ds [{"port":138,"proto":"tcp"},{"port":138,"proto":"udp"}] +(services) + +Service netbios-ns [{"family":"inet","port":137,"proto":"tcp"},{"ct-helper":"netbios-ns","family":"inet","port":137,"proto":"udp"}] +(services) + +Service netbios-ssn [{"port":139,"proto":"tcp"},{"port":139,"proto":"udp"}] +(services) + +Service ntp {"port":123,"proto":"udp"} +(services) + +Service ospf {"proto":"ospf"} +(services) + +Service pgsql {"port":5432,"proto":"tcp"} +(services) + +Service ping [{"proto":"icmp","reply-type":0,"type":8},{"proto":"icmpv6","reply-type":129,"type":128}] +(services) + +Service pop3 {"port":110,"proto":"tcp"} +(services) + +Service pop3s {"port":995,"proto":"tcp"} +(services) + +Service radius [{"port":1812,"proto":"udp"},{"port":1812,"proto":"tcp"}] +(services) + +Service radius-acct [{"port":1813,"proto":"udp"},{"port":1813,"proto":"tcp"}] +(services) + +Service rdp {"port":3389,"proto":"tcp"} +(services) + +Service rsync {"port":873,"proto":"tcp"} +(services) + +Service rtmp {"port":1935,"proto":"tcp"} +(services) + +Service rtsp {"port":554,"proto":"tcp"} +(services) + +Service sieve {"port":4190,"proto":"tcp"} +(services) + +Service sip [{"ct-helper":"sip","port":5060,"proto":"udp"},{"ct-helper":"sip","port":5060,"proto":"tcp"}] +(services) + +Service sip-tls [{"port":5061,"proto":"udp"},{"port":5061,"proto":"tcp"}] +(services) + +Service smtp {"port":25,"proto":"tcp"} +(services) + +Service snmp {"port":161,"proto":"udp"} +(services) + +Service snmp-trap {"port":162,"proto":"udp"} +(services) + +Service ssh {"port":22,"proto":"tcp"} +(services) + +Service submission {"port":587,"proto":"tcp"} +(services) + +Service syslog {"port":514,"proto":"udp"} +(services) + +Service telnet {"port":23,"proto":"tcp"} +(services) + +Service teredo {"port":3544,"proto":"udp"} +(services) + +Service tftp {"port":69,"proto":"udp"} +(services) + +Service vnc {"port":5900,"proto":"tcp"} +(services) + + +Snat 1 {"out":["_fw","B"]} +(zone) + inet/nat/INPUT -j MASQUERADE + inet/nat/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE + + +Variable awall_tproxy_mark 1 +(defaults) + + +Zone A {"iface":"eth0"} +(zone) + +Zone B {"addr":["10.0.0.0\/12","fc00::\/7"],"iface":"eth1"} +(zone) + +Zone C {"addr":"10.1.0.0\/12","iface":["eth2","eth3"]} +(zone) + +Zone D {"iface":["eth4","eth5"],"route-back":true} +(zone) + +Zone E {"ipsec":true} +(zone) + + +# ipset awall-masquerade +hash:net family inet + + +# rules-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A FORWARD -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A FORWARD -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT +-A FORWARD -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmp -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -p tcp --sport 80 -j ACCEPT +-A INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A INPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A INPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A INPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A INPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT +-A INPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT +-A INPUT -p esp -j ACCEPT +-A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -p tcp --dport 80 -j ACCEPT +-A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT +-A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT +-A OUTPUT -p esp -j ACCEPT +-A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:FORWARD ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*nat +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +:awall-masquerade - [0:0] +-A INPUT -j MASQUERADE +-A OUTPUT -j REDIRECT +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE +-A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade +-A PREROUTING -i eth0 -j REDIRECT +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT +-A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -p tcp --dport 80 -j CT --notrack +-A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack +-A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack +-A OUTPUT -p esp -j CT --notrack +-A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack +-A PREROUTING -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack +-A PREROUTING -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT + +# rules6-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -p tcp --sport 80 -j ACCEPT +-A INPUT -p esp -j ACCEPT +-A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -p tcp --dport 80 -j ACCEPT +-A OUTPUT -p esp -j ACCEPT +-A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -p tcp --dport 80 -j CT --notrack +-A OUTPUT -p esp -j CT --notrack +-A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT + diff --git a/test/output/no-track/ipset-awall-masquerade b/test/output/no-track/ipset-awall-masquerade new file mode 100644 index 0000000..b3a47fd --- /dev/null +++ b/test/output/no-track/ipset-awall-masquerade @@ -0,0 +1,2 @@ +# ipset awall-masquerade +hash:net family inet diff --git a/test/output/no-track/rules-save b/test/output/no-track/rules-save new file mode 100644 index 0000000..a818873 --- /dev/null +++ b/test/output/no-track/rules-save @@ -0,0 +1,195 @@ +# rules-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A FORWARD -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A FORWARD -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT +-A FORWARD -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmp -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -p tcp --sport 80 -j ACCEPT +-A INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A INPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A INPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A INPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A INPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT +-A INPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT +-A INPUT -p esp -j ACCEPT +-A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -p tcp --dport 80 -j ACCEPT +-A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT +-A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT +-A OUTPUT -p esp -j ACCEPT +-A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:FORWARD ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*nat +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +:awall-masquerade - [0:0] +-A INPUT -j MASQUERADE +-A OUTPUT -j REDIRECT +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE +-A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade +-A PREROUTING -i eth0 -j REDIRECT +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT +-A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -p tcp --dport 80 -j CT --notrack +-A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack +-A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack +-A OUTPUT -p esp -j CT --notrack +-A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack +-A PREROUTING -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack +-A PREROUTING -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT diff --git a/test/output/no-track/rules6-save b/test/output/no-track/rules6-save new file mode 100644 index 0000000..57e52ed --- /dev/null +++ b/test/output/no-track/rules6-save @@ -0,0 +1,125 @@ +# rules6-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -p tcp --sport 80 -j ACCEPT +-A INPUT -p esp -j ACCEPT +-A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -p tcp --dport 80 -j ACCEPT +-A OUTPUT -p esp -j ACCEPT +-A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -p tcp --dport 80 -j CT --notrack +-A OUTPUT -p esp -j CT --notrack +-A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT diff --git a/test/output/rules-save b/test/output/rules-save deleted file mode 100644 index 4f6d821..0000000 --- a/test/output/rules-save +++ /dev/null @@ -1,11216 +0,0 @@ -# rules-save generated by awall -*filter -:FORWARD DROP [0:0] -:INPUT DROP [0:0] -:OUTPUT DROP [0:0] -:address-0 - [0:0] -:address-1 - [0:0] -:address-10 - [0:0] -:address-100 - [0:0] -:address-101 - [0:0] -:address-102 - [0:0] -:address-103 - [0:0] -:address-104 - [0:0] -:address-105 - [0:0] -:address-106 - [0:0] -:address-107 - [0:0] -:address-108 - [0:0] -:address-109 - [0:0] -:address-11 - [0:0] -:address-110 - [0:0] -:address-111 - [0:0] -:address-112 - [0:0] -:address-113 - [0:0] -:address-114 - [0:0] -:address-115 - [0:0] -:address-116 - [0:0] -:address-117 - [0:0] -:address-118 - [0:0] -:address-119 - [0:0] -:address-12 - [0:0] -:address-120 - [0:0] -:address-121 - [0:0] -:address-122 - [0:0] -:address-123 - [0:0] -:address-124 - [0:0] -:address-125 - [0:0] -:address-126 - [0:0] -:address-127 - [0:0] -:address-13 - [0:0] -:address-14 - [0:0] -:address-15 - [0:0] -:address-16 - [0:0] -:address-17 - [0:0] -:address-18 - [0:0] -:address-19 - [0:0] -:address-2 - [0:0] -:address-20 - [0:0] -:address-21 - [0:0] -:address-22 - [0:0] -:address-23 - [0:0] -:address-24 - [0:0] -:address-25 - [0:0] -:address-26 - [0:0] -:address-27 - [0:0] -:address-28 - [0:0] -:address-29 - [0:0] -:address-3 - [0:0] -:address-30 - [0:0] -:address-31 - [0:0] -:address-32 - [0:0] -:address-33 - [0:0] -:address-34 - [0:0] -:address-35 - [0:0] -:address-36 - [0:0] -:address-37 - [0:0] -:address-38 - [0:0] -:address-39 - [0:0] -:address-4 - [0:0] -:address-40 - [0:0] -:address-41 - [0:0] -:address-42 - [0:0] -:address-43 - [0:0] -:address-44 - [0:0] -:address-45 - [0:0] -:address-46 - [0:0] -:address-47 - [0:0] -:address-48 - [0:0] -:address-49 - [0:0] -:address-5 - [0:0] -:address-50 - [0:0] -:address-51 - [0:0] -:address-52 - [0:0] -:address-53 - [0:0] -:address-54 - [0:0] -:address-55 - [0:0] -:address-56 - [0:0] -:address-57 - [0:0] -:address-58 - [0:0] -:address-59 - [0:0] -:address-6 - [0:0] -:address-60 - [0:0] -:address-61 - [0:0] -:address-62 - [0:0] -:address-63 - [0:0] -:address-64 - [0:0] -:address-65 - [0:0] -:address-66 - [0:0] -:address-67 - [0:0] -:address-68 - [0:0] -:address-69 - [0:0] -:address-7 - [0:0] -:address-70 - [0:0] -:address-71 - [0:0] -:address-72 - [0:0] -:address-73 - [0:0] -:address-74 - [0:0] -:address-75 - [0:0] -:address-76 - [0:0] -:address-77 - [0:0] -:address-78 - [0:0] -:address-79 - [0:0] -:address-8 - [0:0] -:address-80 - [0:0] -:address-81 - [0:0] -:address-82 - [0:0] -:address-83 - [0:0] -:address-84 - [0:0] -:address-85 - [0:0] -:address-86 - [0:0] -:address-87 - [0:0] -:address-88 - [0:0] -:address-89 - [0:0] -:address-9 - [0:0] -:address-90 - [0:0] -:address-91 - [0:0] -:address-92 - [0:0] -:address-93 - [0:0] -:address-94 - [0:0] -:address-95 - [0:0] -:address-96 - [0:0] -:address-97 - [0:0] -:address-98 - [0:0] -:address-99 - [0:0] -:icmp-routing - [0:0] -:limit-0 - [0:0] -:limit-1 - [0:0] -:limit-10 - [0:0] -:limit-100 - [0:0] -:limit-1000 - [0:0] -:limit-1001 - [0:0] -:limit-1002 - [0:0] -:limit-1003 - [0:0] -:limit-1004 - [0:0] -:limit-1005 - [0:0] -:limit-1006 - [0:0] -:limit-1007 - [0:0] -:limit-1008 - [0:0] -:limit-1009 - [0:0] -:limit-101 - [0:0] -:limit-1010 - [0:0] -:limit-1011 - [0:0] -:limit-1012 - [0:0] -:limit-1013 - [0:0] -:limit-1014 - [0:0] -:limit-1015 - [0:0] -:limit-1016 - [0:0] -:limit-1017 - [0:0] -:limit-1018 - [0:0] -:limit-1019 - [0:0] -:limit-102 - [0:0] -:limit-1020 - [0:0] -:limit-1021 - [0:0] -:limit-1022 - [0:0] -:limit-1023 - [0:0] -:limit-1024 - [0:0] -:limit-1025 - [0:0] -:limit-1026 - [0:0] -:limit-1027 - [0:0] -:limit-1028 - [0:0] -:limit-1029 - [0:0] -:limit-103 - [0:0] -:limit-1030 - [0:0] -:limit-1031 - [0:0] -:limit-1032 - [0:0] -:limit-1033 - [0:0] -:limit-1034 - [0:0] -:limit-1035 - [0:0] -:limit-1036 - [0:0] -:limit-1037 - [0:0] -:limit-1038 - [0:0] -:limit-1039 - [0:0] -:limit-104 - [0:0] -:limit-1040 - [0:0] -:limit-1041 - [0:0] -:limit-1042 - [0:0] -:limit-1043 - [0:0] -:limit-1044 - [0:0] -:limit-1045 - [0:0] -:limit-1046 - [0:0] -:limit-1047 - [0:0] -:limit-1048 - [0:0] -:limit-1049 - [0:0] -:limit-105 - [0:0] -:limit-1050 - [0:0] -:limit-1051 - [0:0] -:limit-1052 - [0:0] -:limit-1053 - [0:0] -:limit-1054 - [0:0] -:limit-1055 - [0:0] -:limit-1056 - [0:0] -:limit-1057 - [0:0] -:limit-1058 - [0:0] -:limit-1059 - [0:0] -:limit-106 - [0:0] -:limit-1060 - [0:0] -:limit-1061 - [0:0] -:limit-1062 - [0:0] -:limit-1063 - [0:0] -:limit-1064 - [0:0] -:limit-1065 - [0:0] -:limit-1066 - [0:0] -:limit-1067 - [0:0] -:limit-1068 - [0:0] -:limit-1069 - [0:0] -:limit-107 - [0:0] -:limit-1070 - [0:0] -:limit-1071 - [0:0] -:limit-1072 - [0:0] -:limit-1073 - [0:0] -:limit-1074 - [0:0] -:limit-1075 - [0:0] -:limit-1076 - [0:0] -:limit-1077 - [0:0] -:limit-1078 - [0:0] -:limit-1079 - [0:0] -:limit-108 - [0:0] -:limit-1080 - [0:0] -:limit-1081 - [0:0] -:limit-1082 - [0:0] -:limit-1083 - [0:0] -:limit-1084 - [0:0] -:limit-1085 - [0:0] -:limit-1086 - [0:0] -:limit-1087 - [0:0] -:limit-1088 - [0:0] -:limit-1089 - [0:0] -:limit-109 - [0:0] -:limit-1090 - [0:0] -:limit-1091 - [0:0] -:limit-1092 - [0:0] -:limit-1094 - [0:0] -:limit-1095 - [0:0] -:limit-1096 - [0:0] -:limit-1098 - [0:0] -:limit-1099 - [0:0] -:limit-11 - [0:0] -:limit-110 - [0:0] -:limit-1100 - [0:0] -:limit-1101 - [0:0] -:limit-1102 - [0:0] -:limit-1103 - [0:0] -:limit-1104 - [0:0] -:limit-1106 - [0:0] -:limit-1107 - [0:0] -:limit-1108 - [0:0] -:limit-111 - [0:0] -:limit-1110 - [0:0] -:limit-1111 - [0:0] -:limit-1112 - [0:0] -:limit-1113 - [0:0] -:limit-1114 - [0:0] -:limit-1115 - [0:0] -:limit-1116 - [0:0] -:limit-1118 - [0:0] -:limit-1119 - [0:0] -:limit-112 - [0:0] -:limit-1120 - [0:0] -:limit-1122 - [0:0] -:limit-1123 - [0:0] -:limit-1124 - [0:0] -:limit-1125 - [0:0] -:limit-1126 - [0:0] -:limit-1127 - [0:0] -:limit-1128 - [0:0] -:limit-113 - [0:0] -:limit-1130 - [0:0] -:limit-1131 - [0:0] -:limit-1132 - [0:0] -:limit-1134 - [0:0] -:limit-1135 - [0:0] -:limit-1136 - [0:0] -:limit-1137 - [0:0] -:limit-1138 - [0:0] -:limit-1139 - [0:0] -:limit-114 - [0:0] -:limit-1140 - [0:0] -:limit-1141 - [0:0] -:limit-1142 - [0:0] -:limit-1143 - [0:0] -:limit-1144 - [0:0] -:limit-1145 - [0:0] -:limit-1146 - [0:0] -:limit-1148 - [0:0] -:limit-1149 - [0:0] -:limit-115 - [0:0] -:limit-1150 - [0:0] -:limit-1152 - [0:0] -:limit-1153 - [0:0] -:limit-1154 - [0:0] -:limit-1155 - [0:0] -:limit-1156 - [0:0] -:limit-1157 - [0:0] -:limit-1158 - [0:0] -:limit-116 - [0:0] -:limit-1160 - [0:0] -:limit-1161 - [0:0] -:limit-1162 - [0:0] -:limit-1164 - [0:0] -:limit-1165 - [0:0] -:limit-1166 - [0:0] -:limit-1167 - [0:0] -:limit-1168 - [0:0] -:limit-1169 - [0:0] -:limit-117 - [0:0] -:limit-1170 - [0:0] -:limit-1172 - [0:0] -:limit-1173 - [0:0] -:limit-1174 - [0:0] -:limit-1176 - [0:0] -:limit-1177 - [0:0] -:limit-1178 - [0:0] -:limit-1179 - [0:0] -:limit-118 - [0:0] -:limit-1180 - [0:0] -:limit-1181 - [0:0] -:limit-1182 - [0:0] -:limit-1184 - [0:0] -:limit-1185 - [0:0] -:limit-1186 - [0:0] -:limit-1188 - [0:0] -:limit-1189 - [0:0] -:limit-119 - [0:0] -:limit-1190 - [0:0] -:limit-1191 - [0:0] -:limit-1192 - [0:0] -:limit-1193 - [0:0] -:limit-1194 - [0:0] -:limit-1195 - [0:0] -:limit-1196 - [0:0] -:limit-1197 - [0:0] -:limit-1198 - [0:0] -:limit-1199 - [0:0] -:limit-12 - [0:0] -:limit-120 - [0:0] -:limit-1200 - [0:0] -:limit-1202 - [0:0] -:limit-1203 - [0:0] -:limit-1204 - [0:0] -:limit-1206 - [0:0] -:limit-1207 - [0:0] -:limit-1208 - [0:0] -:limit-1209 - [0:0] -:limit-121 - [0:0] -:limit-1210 - [0:0] -:limit-1211 - [0:0] -:limit-1212 - [0:0] -:limit-1214 - [0:0] -:limit-1215 - [0:0] -:limit-1216 - [0:0] -:limit-1218 - [0:0] -:limit-1219 - [0:0] -:limit-122 - [0:0] -:limit-1220 - [0:0] -:limit-1221 - [0:0] -:limit-1222 - [0:0] -:limit-1223 - [0:0] -:limit-1224 - [0:0] -:limit-1226 - [0:0] -:limit-1227 - [0:0] -:limit-1228 - [0:0] -:limit-123 - [0:0] -:limit-1230 - [0:0] -:limit-1231 - [0:0] -:limit-1232 - [0:0] -:limit-1233 - [0:0] -:limit-1234 - [0:0] -:limit-1235 - [0:0] -:limit-1236 - [0:0] -:limit-1238 - [0:0] -:limit-1239 - [0:0] -:limit-124 - [0:0] -:limit-1240 - [0:0] -:limit-1242 - [0:0] -:limit-1243 - [0:0] -:limit-1244 - [0:0] -:limit-1245 - [0:0] -:limit-1246 - [0:0] -:limit-1247 - [0:0] -:limit-1248 - [0:0] -:limit-1249 - [0:0] -:limit-125 - [0:0] -:limit-1250 - [0:0] -:limit-1251 - [0:0] -:limit-1252 - [0:0] -:limit-1253 - [0:0] -:limit-1254 - [0:0] -:limit-1256 - [0:0] -:limit-1257 - [0:0] -:limit-1258 - [0:0] -:limit-126 - [0:0] -:limit-1260 - [0:0] -:limit-1261 - [0:0] -:limit-1262 - [0:0] -:limit-1263 - [0:0] -:limit-1264 - [0:0] -:limit-1265 - [0:0] -:limit-1266 - [0:0] -:limit-1268 - [0:0] -:limit-1269 - [0:0] -:limit-127 - [0:0] -:limit-1270 - [0:0] -:limit-1272 - [0:0] -:limit-1273 - [0:0] -:limit-1274 - [0:0] -:limit-1275 - [0:0] -:limit-1276 - [0:0] -:limit-1277 - [0:0] -:limit-1278 - [0:0] -:limit-128 - [0:0] -:limit-1280 - [0:0] -:limit-1281 - [0:0] -:limit-1282 - [0:0] -:limit-1284 - [0:0] -:limit-1285 - [0:0] -:limit-1286 - [0:0] -:limit-1287 - [0:0] -:limit-1288 - [0:0] -:limit-1289 - [0:0] -:limit-129 - [0:0] -:limit-1290 - [0:0] -:limit-1292 - [0:0] -:limit-1293 - [0:0] -:limit-1294 - [0:0] -:limit-1296 - [0:0] -:limit-1297 - [0:0] -:limit-1298 - [0:0] -:limit-1299 - [0:0] -:limit-13 - [0:0] -:limit-130 - [0:0] -:limit-1300 - [0:0] -:limit-1301 - [0:0] -:limit-1302 - [0:0] -:limit-1303 - [0:0] -:limit-1304 - [0:0] -:limit-1305 - [0:0] -:limit-1306 - [0:0] -:limit-1307 - [0:0] -:limit-1308 - [0:0] -:limit-131 - [0:0] -:limit-1310 - [0:0] -:limit-1311 - [0:0] -:limit-1312 - [0:0] -:limit-1314 - [0:0] -:limit-1315 - [0:0] -:limit-1316 - [0:0] -:limit-1317 - [0:0] -:limit-1318 - [0:0] -:limit-1319 - [0:0] -:limit-132 - [0:0] -:limit-1320 - [0:0] -:limit-1322 - [0:0] -:limit-1323 - [0:0] -:limit-1324 - [0:0] -:limit-1326 - [0:0] -:limit-1327 - [0:0] -:limit-1328 - [0:0] -:limit-1329 - [0:0] -:limit-133 - [0:0] -:limit-1330 - [0:0] -:limit-1331 - [0:0] -:limit-1332 - [0:0] -:limit-1334 - [0:0] -:limit-1335 - [0:0] -:limit-1336 - [0:0] -:limit-1338 - [0:0] -:limit-1339 - [0:0] -:limit-134 - [0:0] -:limit-1340 - [0:0] -:limit-1341 - [0:0] -:limit-1342 - [0:0] -:limit-1343 - [0:0] -:limit-1344 - [0:0] -:limit-1346 - [0:0] -:limit-1347 - [0:0] -:limit-1348 - [0:0] -:limit-135 - [0:0] -:limit-1350 - [0:0] -:limit-1351 - [0:0] -:limit-1352 - [0:0] -:limit-1353 - [0:0] -:limit-1354 - [0:0] -:limit-1355 - [0:0] -:limit-1356 - [0:0] -:limit-1357 - [0:0] -:limit-1358 - [0:0] -:limit-1359 - [0:0] -:limit-136 - [0:0] -:limit-1360 - [0:0] -:limit-1361 - [0:0] -:limit-1362 - [0:0] -:limit-1364 - [0:0] -:limit-1365 - [0:0] -:limit-1366 - [0:0] -:limit-1368 - [0:0] -:limit-1369 - [0:0] -:limit-137 - [0:0] -:limit-1370 - [0:0] -:limit-1371 - [0:0] -:limit-1372 - [0:0] -:limit-1373 - [0:0] -:limit-1374 - [0:0] -:limit-1376 - [0:0] -:limit-1377 - [0:0] -:limit-1378 - [0:0] -:limit-138 - [0:0] -:limit-1380 - [0:0] -:limit-1381 - [0:0] -:limit-1382 - [0:0] -:limit-1383 - [0:0] -:limit-1384 - [0:0] -:limit-1385 - [0:0] -:limit-1386 - [0:0] -:limit-1388 - [0:0] -:limit-1389 - [0:0] -:limit-139 - [0:0] -:limit-1390 - [0:0] -:limit-1392 - [0:0] -:limit-1393 - [0:0] -:limit-1394 - [0:0] -:limit-1395 - [0:0] -:limit-1396 - [0:0] -:limit-1397 - [0:0] -:limit-1398 - [0:0] -:limit-14 - [0:0] -:limit-140 - [0:0] -:limit-1400 - [0:0] -:limit-1401 - [0:0] -:limit-1402 - [0:0] -:limit-1404 - [0:0] -:limit-1405 - [0:0] -:limit-1406 - [0:0] -:limit-1407 - [0:0] -:limit-1408 - [0:0] -:limit-1409 - [0:0] -:limit-141 - [0:0] -:limit-1410 - [0:0] -:limit-1411 - [0:0] -:limit-1412 - [0:0] -:limit-1413 - [0:0] -:limit-1414 - [0:0] -:limit-1415 - [0:0] -:limit-1416 - [0:0] -:limit-1417 - [0:0] -:limit-1418 - [0:0] -:limit-1419 - [0:0] -:limit-142 - [0:0] -:limit-1420 - [0:0] -:limit-1421 - [0:0] -:limit-1422 - [0:0] -:limit-1423 - [0:0] -:limit-1424 - [0:0] -:limit-1425 - [0:0] -:limit-1426 - [0:0] -:limit-1427 - [0:0] -:limit-1428 - [0:0] -:limit-1429 - [0:0] -:limit-143 - [0:0] -:limit-1430 - [0:0] -:limit-1431 - [0:0] -:limit-144 - [0:0] -:limit-145 - [0:0] -:limit-146 - [0:0] -:limit-147 - [0:0] -:limit-148 - [0:0] -:limit-149 - [0:0] -:limit-15 - [0:0] -:limit-150 - [0:0] -:limit-151 - [0:0] -:limit-152 - [0:0] -:limit-153 - [0:0] -:limit-154 - [0:0] -:limit-155 - [0:0] -:limit-156 - [0:0] -:limit-157 - [0:0] -:limit-158 - [0:0] -:limit-159 - [0:0] -:limit-16 - [0:0] -:limit-160 - [0:0] -:limit-161 - [0:0] -:limit-162 - [0:0] -:limit-163 - [0:0] -:limit-164 - [0:0] -:limit-165 - [0:0] -:limit-166 - [0:0] -:limit-167 - [0:0] -:limit-168 - [0:0] -:limit-169 - [0:0] -:limit-17 - [0:0] -:limit-170 - [0:0] -:limit-171 - [0:0] -:limit-172 - [0:0] -:limit-173 - [0:0] -:limit-174 - [0:0] -:limit-175 - [0:0] -:limit-176 - [0:0] -:limit-177 - [0:0] -:limit-178 - [0:0] -:limit-179 - [0:0] -:limit-18 - [0:0] -:limit-180 - [0:0] -:limit-181 - [0:0] -:limit-182 - [0:0] -:limit-183 - [0:0] -:limit-184 - [0:0] -:limit-185 - [0:0] -:limit-186 - [0:0] -:limit-187 - [0:0] -:limit-188 - [0:0] -:limit-189 - [0:0] -:limit-19 - [0:0] -:limit-190 - [0:0] -:limit-191 - [0:0] -:limit-192 - [0:0] -:limit-193 - [0:0] -:limit-194 - [0:0] -:limit-195 - [0:0] -:limit-196 - [0:0] -:limit-197 - [0:0] -:limit-198 - [0:0] -:limit-199 - [0:0] -:limit-2 - [0:0] -:limit-20 - [0:0] -:limit-200 - [0:0] -:limit-201 - [0:0] -:limit-202 - [0:0] -:limit-203 - [0:0] -:limit-204 - [0:0] -:limit-205 - [0:0] -:limit-206 - [0:0] -:limit-207 - [0:0] -:limit-208 - [0:0] -:limit-209 - [0:0] -:limit-21 - [0:0] -:limit-210 - [0:0] -:limit-211 - [0:0] -:limit-212 - [0:0] -:limit-213 - [0:0] -:limit-214 - [0:0] -:limit-215 - [0:0] -:limit-216 - [0:0] -:limit-217 - [0:0] -:limit-218 - [0:0] -:limit-219 - [0:0] -:limit-22 - [0:0] -:limit-220 - [0:0] -:limit-221 - [0:0] -:limit-222 - [0:0] -:limit-223 - [0:0] -:limit-224 - [0:0] -:limit-225 - [0:0] -:limit-226 - [0:0] -:limit-227 - [0:0] -:limit-228 - [0:0] -:limit-229 - [0:0] -:limit-23 - [0:0] -:limit-230 - [0:0] -:limit-231 - [0:0] -:limit-232 - [0:0] -:limit-233 - [0:0] -:limit-234 - [0:0] -:limit-235 - [0:0] -:limit-236 - [0:0] -:limit-237 - [0:0] -:limit-238 - [0:0] -:limit-239 - [0:0] -:limit-24 - [0:0] -:limit-240 - [0:0] -:limit-241 - [0:0] -:limit-242 - [0:0] -:limit-243 - [0:0] -:limit-244 - [0:0] -:limit-245 - [0:0] -:limit-246 - [0:0] -:limit-247 - [0:0] -:limit-248 - [0:0] -:limit-249 - [0:0] -:limit-25 - [0:0] -:limit-250 - [0:0] -:limit-251 - [0:0] -:limit-252 - [0:0] -:limit-253 - [0:0] -:limit-254 - [0:0] -:limit-255 - [0:0] -:limit-256 - [0:0] -:limit-257 - [0:0] -:limit-258 - [0:0] -:limit-259 - [0:0] -:limit-26 - [0:0] -:limit-260 - [0:0] -:limit-261 - [0:0] -:limit-262 - [0:0] -:limit-263 - [0:0] -:limit-264 - [0:0] -:limit-265 - [0:0] -:limit-266 - [0:0] -:limit-267 - [0:0] -:limit-268 - [0:0] -:limit-269 - [0:0] -:limit-27 - [0:0] -:limit-270 - [0:0] -:limit-271 - [0:0] -:limit-272 - [0:0] -:limit-273 - [0:0] -:limit-274 - [0:0] -:limit-275 - [0:0] -:limit-276 - [0:0] -:limit-277 - [0:0] -:limit-278 - [0:0] -:limit-279 - [0:0] -:limit-28 - [0:0] -:limit-280 - [0:0] -:limit-281 - [0:0] -:limit-282 - [0:0] -:limit-283 - [0:0] -:limit-284 - [0:0] -:limit-285 - [0:0] -:limit-286 - [0:0] -:limit-287 - [0:0] -:limit-288 - [0:0] -:limit-289 - [0:0] -:limit-29 - [0:0] -:limit-290 - [0:0] -:limit-291 - [0:0] -:limit-292 - [0:0] -:limit-293 - [0:0] -:limit-294 - [0:0] -:limit-295 - [0:0] -:limit-296 - [0:0] -:limit-297 - [0:0] -:limit-298 - [0:0] -:limit-299 - [0:0] -:limit-3 - [0:0] -:limit-30 - [0:0] -:limit-300 - [0:0] -:limit-301 - [0:0] -:limit-302 - [0:0] -:limit-303 - [0:0] -:limit-304 - [0:0] -:limit-305 - [0:0] -:limit-306 - [0:0] -:limit-307 - [0:0] -:limit-308 - [0:0] -:limit-309 - [0:0] -:limit-31 - [0:0] -:limit-310 - [0:0] -:limit-311 - [0:0] -:limit-312 - [0:0] -:limit-313 - [0:0] -:limit-314 - [0:0] -:limit-315 - [0:0] -:limit-316 - [0:0] -:limit-317 - [0:0] -:limit-318 - [0:0] -:limit-319 - [0:0] -:limit-32 - [0:0] -:limit-320 - [0:0] -:limit-321 - [0:0] -:limit-322 - [0:0] -:limit-323 - [0:0] -:limit-324 - [0:0] -:limit-325 - [0:0] -:limit-326 - [0:0] -:limit-327 - [0:0] -:limit-328 - [0:0] -:limit-329 - [0:0] -:limit-33 - [0:0] -:limit-330 - [0:0] -:limit-331 - [0:0] -:limit-332 - [0:0] -:limit-333 - [0:0] -:limit-334 - [0:0] -:limit-335 - [0:0] -:limit-336 - [0:0] -:limit-337 - [0:0] -:limit-338 - [0:0] -:limit-339 - [0:0] -:limit-34 - [0:0] -:limit-340 - [0:0] -:limit-341 - [0:0] -:limit-342 - [0:0] -:limit-343 - [0:0] -:limit-344 - [0:0] -:limit-345 - [0:0] -:limit-346 - [0:0] -:limit-347 - [0:0] -:limit-348 - [0:0] -:limit-349 - [0:0] -:limit-35 - [0:0] -:limit-350 - [0:0] -:limit-351 - [0:0] -:limit-352 - [0:0] -:limit-353 - [0:0] -:limit-354 - [0:0] -:limit-355 - [0:0] -:limit-356 - [0:0] -:limit-357 - [0:0] -:limit-358 - [0:0] -:limit-359 - [0:0] -:limit-36 - [0:0] -:limit-360 - [0:0] -:limit-361 - [0:0] -:limit-362 - [0:0] -:limit-363 - [0:0] -:limit-364 - [0:0] -:limit-365 - [0:0] -:limit-366 - [0:0] -:limit-367 - [0:0] -:limit-368 - [0:0] -:limit-369 - [0:0] -:limit-37 - [0:0] -:limit-370 - [0:0] -:limit-371 - [0:0] -:limit-372 - [0:0] -:limit-373 - [0:0] -:limit-374 - [0:0] -:limit-375 - [0:0] -:limit-376 - [0:0] -:limit-378 - [0:0] -:limit-379 - [0:0] -:limit-38 - [0:0] -:limit-380 - [0:0] -:limit-382 - [0:0] -:limit-383 - [0:0] -:limit-384 - [0:0] -:limit-385 - [0:0] -:limit-386 - [0:0] -:limit-387 - [0:0] -:limit-388 - [0:0] -:limit-39 - [0:0] -:limit-390 - [0:0] -:limit-391 - [0:0] -:limit-392 - [0:0] -:limit-394 - [0:0] -:limit-395 - [0:0] -:limit-396 - [0:0] -:limit-397 - [0:0] -:limit-398 - [0:0] -:limit-399 - [0:0] -:limit-4 - [0:0] -:limit-40 - [0:0] -:limit-400 - [0:0] -:limit-402 - [0:0] -:limit-403 - [0:0] -:limit-404 - [0:0] -:limit-406 - [0:0] -:limit-407 - [0:0] -:limit-408 - [0:0] -:limit-409 - [0:0] -:limit-41 - [0:0] -:limit-410 - [0:0] -:limit-411 - [0:0] -:limit-412 - [0:0] -:limit-414 - [0:0] -:limit-415 - [0:0] -:limit-416 - [0:0] -:limit-418 - [0:0] -:limit-419 - [0:0] -:limit-42 - [0:0] -:limit-420 - [0:0] -:limit-421 - [0:0] -:limit-422 - [0:0] -:limit-423 - [0:0] -:limit-424 - [0:0] -:limit-425 - [0:0] -:limit-426 - [0:0] -:limit-427 - [0:0] -:limit-428 - [0:0] -:limit-429 - [0:0] -:limit-43 - [0:0] -:limit-430 - [0:0] -:limit-432 - [0:0] -:limit-433 - [0:0] -:limit-434 - [0:0] -:limit-436 - [0:0] -:limit-437 - [0:0] -:limit-438 - [0:0] -:limit-439 - [0:0] -:limit-44 - [0:0] -:limit-440 - [0:0] -:limit-441 - [0:0] -:limit-442 - [0:0] -:limit-444 - [0:0] -:limit-445 - [0:0] -:limit-446 - [0:0] -:limit-448 - [0:0] -:limit-449 - [0:0] -:limit-45 - [0:0] -:limit-450 - [0:0] -:limit-451 - [0:0] -:limit-452 - [0:0] -:limit-453 - [0:0] -:limit-454 - [0:0] -:limit-456 - [0:0] -:limit-457 - [0:0] -:limit-458 - [0:0] -:limit-46 - [0:0] -:limit-460 - [0:0] -:limit-461 - [0:0] -:limit-462 - [0:0] -:limit-463 - [0:0] -:limit-464 - [0:0] -:limit-465 - [0:0] -:limit-466 - [0:0] -:limit-468 - [0:0] -:limit-469 - [0:0] -:limit-47 - [0:0] -:limit-470 - [0:0] -:limit-472 - [0:0] -:limit-473 - [0:0] -:limit-474 - [0:0] -:limit-475 - [0:0] -:limit-476 - [0:0] -:limit-477 - [0:0] -:limit-478 - [0:0] -:limit-479 - [0:0] -:limit-48 - [0:0] -:limit-480 - [0:0] -:limit-481 - [0:0] -:limit-482 - [0:0] -:limit-483 - [0:0] -:limit-484 - [0:0] -:limit-486 - [0:0] -:limit-487 - [0:0] -:limit-488 - [0:0] -:limit-49 - [0:0] -:limit-490 - [0:0] -:limit-491 - [0:0] -:limit-492 - [0:0] -:limit-493 - [0:0] -:limit-494 - [0:0] -:limit-495 - [0:0] -:limit-496 - [0:0] -:limit-498 - [0:0] -:limit-499 - [0:0] -:limit-5 - [0:0] -:limit-50 - [0:0] -:limit-500 - [0:0] -:limit-502 - [0:0] -:limit-503 - [0:0] -:limit-504 - [0:0] -:limit-505 - [0:0] -:limit-506 - [0:0] -:limit-507 - [0:0] -:limit-508 - [0:0] -:limit-51 - [0:0] -:limit-510 - [0:0] -:limit-511 - [0:0] -:limit-512 - [0:0] -:limit-514 - [0:0] -:limit-515 - [0:0] -:limit-516 - [0:0] -:limit-517 - [0:0] -:limit-518 - [0:0] -:limit-519 - [0:0] -:limit-52 - [0:0] -:limit-520 - [0:0] -:limit-522 - [0:0] -:limit-523 - [0:0] -:limit-524 - [0:0] -:limit-526 - [0:0] -:limit-527 - [0:0] -:limit-528 - [0:0] -:limit-529 - [0:0] -:limit-53 - [0:0] -:limit-530 - [0:0] -:limit-531 - [0:0] -:limit-532 - [0:0] -:limit-533 - [0:0] -:limit-534 - [0:0] -:limit-535 - [0:0] -:limit-536 - [0:0] -:limit-537 - [0:0] -:limit-538 - [0:0] -:limit-54 - [0:0] -:limit-540 - [0:0] -:limit-541 - [0:0] -:limit-542 - [0:0] -:limit-544 - [0:0] -:limit-545 - [0:0] -:limit-546 - [0:0] -:limit-547 - [0:0] -:limit-548 - [0:0] -:limit-549 - [0:0] -:limit-55 - [0:0] -:limit-550 - [0:0] -:limit-552 - [0:0] -:limit-553 - [0:0] -:limit-554 - [0:0] -:limit-556 - [0:0] -:limit-557 - [0:0] -:limit-558 - [0:0] -:limit-559 - [0:0] -:limit-56 - [0:0] -:limit-560 - [0:0] -:limit-561 - [0:0] -:limit-562 - [0:0] -:limit-564 - [0:0] -:limit-565 - [0:0] -:limit-566 - [0:0] -:limit-568 - [0:0] -:limit-569 - [0:0] -:limit-57 - [0:0] -:limit-570 - [0:0] -:limit-571 - [0:0] -:limit-572 - [0:0] -:limit-573 - [0:0] -:limit-574 - [0:0] -:limit-576 - [0:0] -:limit-577 - [0:0] -:limit-578 - [0:0] -:limit-58 - [0:0] -:limit-580 - [0:0] -:limit-581 - [0:0] -:limit-582 - [0:0] -:limit-583 - [0:0] -:limit-584 - [0:0] -:limit-585 - [0:0] -:limit-586 - [0:0] -:limit-587 - [0:0] -:limit-588 - [0:0] -:limit-589 - [0:0] -:limit-59 - [0:0] -:limit-590 - [0:0] -:limit-591 - [0:0] -:limit-592 - [0:0] -:limit-594 - [0:0] -:limit-595 - [0:0] -:limit-596 - [0:0] -:limit-598 - [0:0] -:limit-599 - [0:0] -:limit-6 - [0:0] -:limit-60 - [0:0] -:limit-600 - [0:0] -:limit-601 - [0:0] -:limit-602 - [0:0] -:limit-603 - [0:0] -:limit-604 - [0:0] -:limit-606 - [0:0] -:limit-607 - [0:0] -:limit-608 - [0:0] -:limit-61 - [0:0] -:limit-610 - [0:0] -:limit-611 - [0:0] -:limit-612 - [0:0] -:limit-613 - [0:0] -:limit-614 - [0:0] -:limit-615 - [0:0] -:limit-616 - [0:0] -:limit-618 - [0:0] -:limit-619 - [0:0] -:limit-62 - [0:0] -:limit-620 - [0:0] -:limit-622 - [0:0] -:limit-623 - [0:0] -:limit-624 - [0:0] -:limit-625 - [0:0] -:limit-626 - [0:0] -:limit-627 - [0:0] -:limit-628 - [0:0] -:limit-63 - [0:0] -:limit-630 - [0:0] -:limit-631 - [0:0] -:limit-632 - [0:0] -:limit-634 - [0:0] -:limit-635 - [0:0] -:limit-636 - [0:0] -:limit-637 - [0:0] -:limit-638 - [0:0] -:limit-639 - [0:0] -:limit-64 - [0:0] -:limit-640 - [0:0] -:limit-641 - [0:0] -:limit-642 - [0:0] -:limit-643 - [0:0] -:limit-644 - [0:0] -:limit-645 - [0:0] -:limit-646 - [0:0] -:limit-648 - [0:0] -:limit-649 - [0:0] -:limit-65 - [0:0] -:limit-650 - [0:0] -:limit-652 - [0:0] -:limit-653 - [0:0] -:limit-654 - [0:0] -:limit-655 - [0:0] -:limit-656 - [0:0] -:limit-657 - [0:0] -:limit-658 - [0:0] -:limit-66 - [0:0] -:limit-660 - [0:0] -:limit-661 - [0:0] -:limit-662 - [0:0] -:limit-664 - [0:0] -:limit-665 - [0:0] -:limit-666 - [0:0] -:limit-667 - [0:0] -:limit-668 - [0:0] -:limit-669 - [0:0] -:limit-67 - [0:0] -:limit-670 - [0:0] -:limit-672 - [0:0] -:limit-673 - [0:0] -:limit-674 - [0:0] -:limit-676 - [0:0] -:limit-677 - [0:0] -:limit-678 - [0:0] -:limit-679 - [0:0] -:limit-68 - [0:0] -:limit-680 - [0:0] -:limit-681 - [0:0] -:limit-682 - [0:0] -:limit-684 - [0:0] -:limit-685 - [0:0] -:limit-686 - [0:0] -:limit-688 - [0:0] -:limit-689 - [0:0] -:limit-69 - [0:0] -:limit-690 - [0:0] -:limit-691 - [0:0] -:limit-692 - [0:0] -:limit-693 - [0:0] -:limit-694 - [0:0] -:limit-695 - [0:0] -:limit-696 - [0:0] -:limit-697 - [0:0] -:limit-698 - [0:0] -:limit-699 - [0:0] -:limit-7 - [0:0] -:limit-70 - [0:0] -:limit-700 - [0:0] -:limit-701 - [0:0] -:limit-702 - [0:0] -:limit-703 - [0:0] -:limit-704 - [0:0] -:limit-705 - [0:0] -:limit-706 - [0:0] -:limit-707 - [0:0] -:limit-708 - [0:0] -:limit-709 - [0:0] -:limit-71 - [0:0] -:limit-710 - [0:0] -:limit-711 - [0:0] -:limit-712 - [0:0] -:limit-713 - [0:0] -:limit-714 - [0:0] -:limit-715 - [0:0] -:limit-716 - [0:0] -:limit-717 - [0:0] -:limit-718 - [0:0] -:limit-719 - [0:0] -:limit-72 - [0:0] -:limit-720 - [0:0] -:limit-721 - [0:0] -:limit-722 - [0:0] -:limit-723 - [0:0] -:limit-724 - [0:0] -:limit-725 - [0:0] -:limit-726 - [0:0] -:limit-727 - [0:0] -:limit-728 - [0:0] -:limit-729 - [0:0] -:limit-73 - [0:0] -:limit-730 - [0:0] -:limit-731 - [0:0] -:limit-732 - [0:0] -:limit-733 - [0:0] -:limit-734 - [0:0] -:limit-735 - [0:0] -:limit-736 - [0:0] -:limit-737 - [0:0] -:limit-738 - [0:0] -:limit-739 - [0:0] -:limit-74 - [0:0] -:limit-740 - [0:0] -:limit-741 - [0:0] -:limit-742 - [0:0] -:limit-743 - [0:0] -:limit-744 - [0:0] -:limit-745 - [0:0] -:limit-746 - [0:0] -:limit-747 - [0:0] -:limit-748 - [0:0] -:limit-749 - [0:0] -:limit-75 - [0:0] -:limit-750 - [0:0] -:limit-751 - [0:0] -:limit-752 - [0:0] -:limit-753 - [0:0] -:limit-754 - [0:0] -:limit-755 - [0:0] -:limit-756 - [0:0] -:limit-757 - [0:0] -:limit-758 - [0:0] -:limit-759 - [0:0] -:limit-76 - [0:0] -:limit-760 - [0:0] -:limit-761 - [0:0] -:limit-762 - [0:0] -:limit-763 - [0:0] -:limit-764 - [0:0] -:limit-765 - [0:0] -:limit-766 - [0:0] -:limit-767 - [0:0] -:limit-768 - [0:0] -:limit-769 - [0:0] -:limit-77 - [0:0] -:limit-770 - [0:0] -:limit-771 - [0:0] -:limit-772 - [0:0] -:limit-773 - [0:0] -:limit-774 - [0:0] -:limit-775 - [0:0] -:limit-776 - [0:0] -:limit-777 - [0:0] -:limit-778 - [0:0] -:limit-779 - [0:0] -:limit-78 - [0:0] -:limit-780 - [0:0] -:limit-781 - [0:0] -:limit-782 - [0:0] -:limit-783 - [0:0] -:limit-784 - [0:0] -:limit-785 - [0:0] -:limit-786 - [0:0] -:limit-787 - [0:0] -:limit-788 - [0:0] -:limit-789 - [0:0] -:limit-79 - [0:0] -:limit-790 - [0:0] -:limit-791 - [0:0] -:limit-792 - [0:0] -:limit-793 - [0:0] -:limit-794 - [0:0] -:limit-795 - [0:0] -:limit-796 - [0:0] -:limit-797 - [0:0] -:limit-798 - [0:0] -:limit-799 - [0:0] -:limit-8 - [0:0] -:limit-80 - [0:0] -:limit-800 - [0:0] -:limit-801 - [0:0] -:limit-802 - [0:0] -:limit-803 - [0:0] -:limit-804 - [0:0] -:limit-805 - [0:0] -:limit-806 - [0:0] -:limit-807 - [0:0] -:limit-808 - [0:0] -:limit-809 - [0:0] -:limit-81 - [0:0] -:limit-810 - [0:0] -:limit-811 - [0:0] -:limit-812 - [0:0] -:limit-813 - [0:0] -:limit-814 - [0:0] -:limit-815 - [0:0] -:limit-816 - [0:0] -:limit-817 - [0:0] -:limit-818 - [0:0] -:limit-819 - [0:0] -:limit-82 - [0:0] -:limit-820 - [0:0] -:limit-821 - [0:0] -:limit-822 - [0:0] -:limit-823 - [0:0] -:limit-824 - [0:0] -:limit-825 - [0:0] -:limit-826 - [0:0] -:limit-827 - [0:0] -:limit-828 - [0:0] -:limit-829 - [0:0] -:limit-83 - [0:0] -:limit-830 - [0:0] -:limit-831 - [0:0] -:limit-832 - [0:0] -:limit-833 - [0:0] -:limit-834 - [0:0] -:limit-835 - [0:0] -:limit-836 - [0:0] -:limit-837 - [0:0] -:limit-838 - [0:0] -:limit-839 - [0:0] -:limit-84 - [0:0] -:limit-840 - [0:0] -:limit-841 - [0:0] -:limit-842 - [0:0] -:limit-843 - [0:0] -:limit-844 - [0:0] -:limit-845 - [0:0] -:limit-846 - [0:0] -:limit-847 - [0:0] -:limit-848 - [0:0] -:limit-849 - [0:0] -:limit-85 - [0:0] -:limit-850 - [0:0] -:limit-851 - [0:0] -:limit-852 - [0:0] -:limit-853 - [0:0] -:limit-854 - [0:0] -:limit-855 - [0:0] -:limit-856 - [0:0] -:limit-857 - [0:0] -:limit-858 - [0:0] -:limit-859 - [0:0] -:limit-86 - [0:0] -:limit-860 - [0:0] -:limit-861 - [0:0] -:limit-862 - [0:0] -:limit-863 - [0:0] -:limit-864 - [0:0] -:limit-865 - [0:0] -:limit-866 - [0:0] -:limit-867 - [0:0] -:limit-868 - [0:0] -:limit-869 - [0:0] -:limit-87 - [0:0] -:limit-870 - [0:0] -:limit-871 - [0:0] -:limit-872 - [0:0] -:limit-873 - [0:0] -:limit-874 - [0:0] -:limit-875 - [0:0] -:limit-876 - [0:0] -:limit-877 - [0:0] -:limit-878 - [0:0] -:limit-879 - [0:0] -:limit-88 - [0:0] -:limit-880 - [0:0] -:limit-881 - [0:0] -:limit-882 - [0:0] -:limit-883 - [0:0] -:limit-884 - [0:0] -:limit-885 - [0:0] -:limit-886 - [0:0] -:limit-887 - [0:0] -:limit-888 - [0:0] -:limit-889 - [0:0] -:limit-89 - [0:0] -:limit-890 - [0:0] -:limit-891 - [0:0] -:limit-892 - [0:0] -:limit-893 - [0:0] -:limit-894 - [0:0] -:limit-895 - [0:0] -:limit-896 - [0:0] -:limit-897 - [0:0] -:limit-898 - [0:0] -:limit-899 - [0:0] -:limit-9 - [0:0] -:limit-90 - [0:0] -:limit-900 - [0:0] -:limit-901 - [0:0] -:limit-902 - [0:0] -:limit-903 - [0:0] -:limit-904 - [0:0] -:limit-905 - [0:0] -:limit-906 - [0:0] -:limit-907 - [0:0] -:limit-908 - [0:0] -:limit-909 - [0:0] -:limit-91 - [0:0] -:limit-910 - [0:0] -:limit-911 - [0:0] -:limit-912 - [0:0] -:limit-913 - [0:0] -:limit-914 - [0:0] -:limit-915 - [0:0] -:limit-916 - [0:0] -:limit-917 - [0:0] -:limit-918 - [0:0] -:limit-919 - [0:0] -:limit-92 - [0:0] -:limit-920 - [0:0] -:limit-921 - [0:0] -:limit-922 - [0:0] -:limit-923 - [0:0] -:limit-924 - [0:0] -:limit-925 - [0:0] -:limit-926 - [0:0] -:limit-927 - [0:0] -:limit-928 - [0:0] -:limit-929 - [0:0] -:limit-93 - [0:0] -:limit-930 - [0:0] -:limit-931 - [0:0] -:limit-932 - [0:0] -:limit-933 - [0:0] -:limit-934 - [0:0] -:limit-935 - [0:0] -:limit-936 - [0:0] -:limit-937 - [0:0] -:limit-938 - [0:0] -:limit-939 - [0:0] -:limit-94 - [0:0] -:limit-940 - [0:0] -:limit-941 - [0:0] -:limit-942 - [0:0] -:limit-943 - [0:0] -:limit-944 - [0:0] -:limit-945 - [0:0] -:limit-946 - [0:0] -:limit-947 - [0:0] -:limit-948 - [0:0] -:limit-949 - [0:0] -:limit-95 - [0:0] -:limit-950 - [0:0] -:limit-951 - [0:0] -:limit-952 - [0:0] -:limit-953 - [0:0] -:limit-954 - [0:0] -:limit-955 - [0:0] -:limit-956 - [0:0] -:limit-957 - [0:0] -:limit-958 - [0:0] -:limit-959 - [0:0] -:limit-96 - [0:0] -:limit-960 - [0:0] -:limit-961 - [0:0] -:limit-962 - [0:0] -:limit-963 - [0:0] -:limit-964 - [0:0] -:limit-965 - [0:0] -:limit-966 - [0:0] -:limit-967 - [0:0] -:limit-968 - [0:0] -:limit-969 - [0:0] -:limit-97 - [0:0] -:limit-970 - [0:0] -:limit-971 - [0:0] -:limit-972 - [0:0] -:limit-973 - [0:0] -:limit-974 - [0:0] -:limit-975 - [0:0] -:limit-976 - [0:0] -:limit-977 - [0:0] -:limit-978 - [0:0] -:limit-979 - [0:0] -:limit-98 - [0:0] -:limit-980 - [0:0] -:limit-981 - [0:0] -:limit-982 - [0:0] -:limit-983 - [0:0] -:limit-984 - [0:0] -:limit-985 - [0:0] -:limit-986 - [0:0] -:limit-987 - [0:0] -:limit-988 - [0:0] -:limit-989 - [0:0] -:limit-99 - [0:0] -:limit-990 - [0:0] -:limit-991 - [0:0] -:limit-992 - [0:0] -:limit-993 - [0:0] -:limit-994 - [0:0] -:limit-995 - [0:0] -:limit-996 - [0:0] -:limit-997 - [0:0] -:limit-998 - [0:0] -:limit-999 - [0:0] -:logaccept-0 - [0:0] -:logaccept-1 - [0:0] -:logaccept-10 - [0:0] -:logaccept-11 - [0:0] -:logaccept-12 - [0:0] -:logaccept-13 - [0:0] -:logaccept-14 - [0:0] -:logaccept-15 - [0:0] -:logaccept-16 - [0:0] -:logaccept-17 - [0:0] -:logaccept-18 - [0:0] -:logaccept-19 - [0:0] -:logaccept-2 - [0:0] -:logaccept-20 - [0:0] -:logaccept-21 - [0:0] -:logaccept-22 - [0:0] -:logaccept-23 - [0:0] -:logaccept-24 - [0:0] -:logaccept-25 - [0:0] -:logaccept-26 - [0:0] -:logaccept-27 - [0:0] -:logaccept-28 - [0:0] -:logaccept-29 - [0:0] -:logaccept-3 - [0:0] -:logaccept-30 - [0:0] -:logaccept-31 - [0:0] -:logaccept-32 - [0:0] -:logaccept-33 - [0:0] -:logaccept-34 - [0:0] -:logaccept-35 - [0:0] -:logaccept-36 - [0:0] -:logaccept-37 - [0:0] -:logaccept-38 - [0:0] -:logaccept-39 - [0:0] -:logaccept-4 - [0:0] -:logaccept-40 - [0:0] -:logaccept-41 - [0:0] -:logaccept-42 - [0:0] -:logaccept-43 - [0:0] -:logaccept-44 - [0:0] -:logaccept-45 - [0:0] -:logaccept-46 - [0:0] -:logaccept-47 - [0:0] -:logaccept-48 - [0:0] -:logaccept-49 - [0:0] -:logaccept-5 - [0:0] -:logaccept-50 - [0:0] -:logaccept-51 - [0:0] -:logaccept-52 - [0:0] -:logaccept-53 - [0:0] -:logaccept-54 - [0:0] -:logaccept-55 - [0:0] -:logaccept-56 - [0:0] -:logaccept-57 - [0:0] -:logaccept-58 - [0:0] -:logaccept-59 - [0:0] -:logaccept-6 - [0:0] -:logaccept-60 - [0:0] -:logaccept-61 - [0:0] -:logaccept-62 - [0:0] -:logaccept-63 - [0:0] -:logaccept-64 - [0:0] -:logaccept-65 - [0:0] -:logaccept-66 - [0:0] -:logaccept-67 - [0:0] -:logaccept-68 - [0:0] -:logaccept-69 - [0:0] -:logaccept-7 - [0:0] -:logaccept-70 - [0:0] -:logaccept-71 - [0:0] -:logaccept-72 - [0:0] -:logaccept-73 - [0:0] -:logaccept-74 - [0:0] -:logaccept-75 - [0:0] -:logaccept-76 - [0:0] -:logaccept-77 - [0:0] -:logaccept-78 - [0:0] -:logaccept-79 - [0:0] -:logaccept-8 - [0:0] -:logaccept-80 - [0:0] -:logaccept-81 - [0:0] -:logaccept-82 - [0:0] -:logaccept-83 - [0:0] -:logaccept-84 - [0:0] -:logaccept-9 - [0:0] -:logaccept-final-0 - [0:0] -:logaccept-final-1 - [0:0] -:logaccept-final-10 - [0:0] -:logaccept-final-11 - [0:0] -:logaccept-final-12 - [0:0] -:logaccept-final-13 - [0:0] -:logaccept-final-14 - [0:0] -:logaccept-final-15 - [0:0] -:logaccept-final-16 - [0:0] -:logaccept-final-17 - [0:0] -:logaccept-final-18 - [0:0] -:logaccept-final-19 - [0:0] -:logaccept-final-2 - [0:0] -:logaccept-final-20 - [0:0] -:logaccept-final-21 - [0:0] -:logaccept-final-22 - [0:0] -:logaccept-final-23 - [0:0] -:logaccept-final-24 - [0:0] -:logaccept-final-25 - [0:0] -:logaccept-final-26 - [0:0] -:logaccept-final-27 - [0:0] -:logaccept-final-28 - [0:0] -:logaccept-final-29 - [0:0] -:logaccept-final-3 - [0:0] -:logaccept-final-30 - [0:0] -:logaccept-final-31 - [0:0] -:logaccept-final-32 - [0:0] -:logaccept-final-33 - [0:0] -:logaccept-final-34 - [0:0] -:logaccept-final-35 - [0:0] -:logaccept-final-36 - [0:0] -:logaccept-final-37 - [0:0] -:logaccept-final-38 - [0:0] -:logaccept-final-39 - [0:0] -:logaccept-final-4 - [0:0] -:logaccept-final-40 - [0:0] -:logaccept-final-41 - [0:0] -:logaccept-final-42 - [0:0] -:logaccept-final-43 - [0:0] -:logaccept-final-44 - [0:0] -:logaccept-final-45 - [0:0] -:logaccept-final-46 - [0:0] -:logaccept-final-47 - [0:0] -:logaccept-final-48 - [0:0] -:logaccept-final-49 - [0:0] -:logaccept-final-5 - [0:0] -:logaccept-final-50 - [0:0] -:logaccept-final-51 - [0:0] -:logaccept-final-52 - [0:0] -:logaccept-final-53 - [0:0] -:logaccept-final-54 - [0:0] -:logaccept-final-55 - [0:0] -:logaccept-final-56 - [0:0] -:logaccept-final-57 - [0:0] -:logaccept-final-58 - [0:0] -:logaccept-final-59 - [0:0] -:logaccept-final-6 - [0:0] -:logaccept-final-60 - [0:0] -:logaccept-final-61 - [0:0] -:logaccept-final-7 - [0:0] -:logaccept-final-8 - [0:0] -:logaccept-final-9 - [0:0] -:logdrop-0 - [0:0] -:logdrop-1 - [0:0] -:logdrop-10 - [0:0] -:logdrop-100 - [0:0] -:logdrop-101 - [0:0] -:logdrop-102 - [0:0] -:logdrop-103 - [0:0] -:logdrop-104 - [0:0] -:logdrop-105 - [0:0] -:logdrop-106 - [0:0] -:logdrop-107 - [0:0] -:logdrop-108 - [0:0] -:logdrop-109 - [0:0] -:logdrop-11 - [0:0] -:logdrop-110 - [0:0] -:logdrop-111 - [0:0] -:logdrop-112 - [0:0] -:logdrop-113 - [0:0] -:logdrop-114 - [0:0] -:logdrop-115 - [0:0] -:logdrop-116 - [0:0] -:logdrop-117 - [0:0] -:logdrop-118 - [0:0] -:logdrop-119 - [0:0] -:logdrop-12 - [0:0] -:logdrop-120 - [0:0] -:logdrop-121 - [0:0] -:logdrop-122 - [0:0] -:logdrop-123 - [0:0] -:logdrop-124 - [0:0] -:logdrop-125 - [0:0] -:logdrop-126 - [0:0] -:logdrop-127 - [0:0] -:logdrop-128 - [0:0] -:logdrop-129 - [0:0] -:logdrop-13 - [0:0] -:logdrop-130 - [0:0] -:logdrop-131 - [0:0] -:logdrop-132 - [0:0] -:logdrop-133 - [0:0] -:logdrop-134 - [0:0] -:logdrop-135 - [0:0] -:logdrop-136 - [0:0] -:logdrop-137 - [0:0] -:logdrop-138 - [0:0] -:logdrop-139 - [0:0] -:logdrop-14 - [0:0] -:logdrop-140 - [0:0] -:logdrop-141 - [0:0] -:logdrop-142 - [0:0] -:logdrop-143 - [0:0] -:logdrop-144 - [0:0] -:logdrop-145 - [0:0] -:logdrop-146 - [0:0] -:logdrop-147 - [0:0] -:logdrop-148 - [0:0] -:logdrop-149 - [0:0] -:logdrop-15 - [0:0] -:logdrop-150 - [0:0] -:logdrop-151 - [0:0] -:logdrop-152 - [0:0] -:logdrop-153 - [0:0] -:logdrop-154 - [0:0] -:logdrop-155 - [0:0] -:logdrop-156 - [0:0] -:logdrop-157 - [0:0] -:logdrop-158 - [0:0] -:logdrop-159 - [0:0] -:logdrop-16 - [0:0] -:logdrop-160 - [0:0] -:logdrop-161 - [0:0] -:logdrop-162 - [0:0] -:logdrop-163 - [0:0] -:logdrop-164 - [0:0] -:logdrop-165 - [0:0] -:logdrop-166 - [0:0] -:logdrop-167 - [0:0] -:logdrop-168 - [0:0] -:logdrop-169 - [0:0] -:logdrop-17 - [0:0] -:logdrop-170 - [0:0] -:logdrop-171 - [0:0] -:logdrop-172 - [0:0] -:logdrop-173 - [0:0] -:logdrop-174 - [0:0] -:logdrop-175 - [0:0] -:logdrop-176 - [0:0] -:logdrop-177 - [0:0] -:logdrop-178 - [0:0] -:logdrop-179 - [0:0] -:logdrop-18 - [0:0] -:logdrop-180 - [0:0] -:logdrop-181 - [0:0] -:logdrop-182 - [0:0] -:logdrop-183 - [0:0] -:logdrop-184 - [0:0] -:logdrop-185 - [0:0] -:logdrop-186 - [0:0] -:logdrop-187 - [0:0] -:logdrop-188 - [0:0] -:logdrop-189 - [0:0] -:logdrop-19 - [0:0] -:logdrop-190 - [0:0] -:logdrop-191 - [0:0] -:logdrop-192 - [0:0] -:logdrop-193 - [0:0] -:logdrop-194 - [0:0] -:logdrop-195 - [0:0] -:logdrop-196 - [0:0] -:logdrop-197 - [0:0] -:logdrop-198 - [0:0] -:logdrop-199 - [0:0] -:logdrop-2 - [0:0] -:logdrop-20 - [0:0] -:logdrop-200 - [0:0] -:logdrop-201 - [0:0] -:logdrop-202 - [0:0] -:logdrop-203 - [0:0] -:logdrop-204 - [0:0] -:logdrop-205 - [0:0] -:logdrop-206 - [0:0] -:logdrop-207 - [0:0] -:logdrop-208 - [0:0] -:logdrop-209 - [0:0] -:logdrop-21 - [0:0] -:logdrop-210 - [0:0] -:logdrop-211 - [0:0] -:logdrop-212 - [0:0] -:logdrop-213 - [0:0] -:logdrop-214 - [0:0] -:logdrop-215 - [0:0] -:logdrop-216 - [0:0] -:logdrop-217 - [0:0] -:logdrop-218 - [0:0] -:logdrop-219 - [0:0] -:logdrop-22 - [0:0] -:logdrop-220 - [0:0] -:logdrop-221 - [0:0] -:logdrop-222 - [0:0] -:logdrop-223 - [0:0] -:logdrop-224 - [0:0] -:logdrop-225 - [0:0] -:logdrop-226 - [0:0] -:logdrop-227 - [0:0] -:logdrop-228 - [0:0] -:logdrop-229 - [0:0] -:logdrop-23 - [0:0] -:logdrop-230 - [0:0] -:logdrop-231 - [0:0] -:logdrop-232 - [0:0] -:logdrop-233 - [0:0] -:logdrop-234 - [0:0] -:logdrop-235 - [0:0] -:logdrop-236 - [0:0] -:logdrop-237 - [0:0] -:logdrop-238 - [0:0] -:logdrop-239 - [0:0] -:logdrop-24 - [0:0] -:logdrop-240 - [0:0] -:logdrop-241 - [0:0] -:logdrop-242 - [0:0] -:logdrop-243 - [0:0] -:logdrop-244 - [0:0] -:logdrop-245 - [0:0] -:logdrop-246 - [0:0] -:logdrop-247 - [0:0] -:logdrop-248 - [0:0] -:logdrop-249 - [0:0] -:logdrop-25 - [0:0] -:logdrop-250 - [0:0] -:logdrop-251 - [0:0] -:logdrop-252 - [0:0] -:logdrop-253 - [0:0] -:logdrop-254 - [0:0] -:logdrop-255 - [0:0] -:logdrop-256 - [0:0] -:logdrop-257 - [0:0] -:logdrop-258 - [0:0] -:logdrop-259 - [0:0] -:logdrop-26 - [0:0] -:logdrop-260 - [0:0] -:logdrop-261 - [0:0] -:logdrop-262 - [0:0] -:logdrop-263 - [0:0] -:logdrop-264 - [0:0] -:logdrop-265 - [0:0] -:logdrop-266 - [0:0] -:logdrop-267 - [0:0] -:logdrop-268 - [0:0] -:logdrop-269 - [0:0] -:logdrop-27 - [0:0] -:logdrop-270 - [0:0] -:logdrop-271 - [0:0] -:logdrop-272 - [0:0] -:logdrop-273 - [0:0] -:logdrop-274 - [0:0] -:logdrop-275 - [0:0] -:logdrop-276 - [0:0] -:logdrop-277 - [0:0] -:logdrop-278 - [0:0] -:logdrop-279 - [0:0] -:logdrop-28 - [0:0] -:logdrop-280 - [0:0] -:logdrop-281 - [0:0] -:logdrop-282 - [0:0] -:logdrop-283 - [0:0] -:logdrop-284 - [0:0] -:logdrop-285 - [0:0] -:logdrop-286 - [0:0] -:logdrop-287 - [0:0] -:logdrop-288 - [0:0] -:logdrop-289 - [0:0] -:logdrop-29 - [0:0] -:logdrop-290 - [0:0] -:logdrop-291 - [0:0] -:logdrop-292 - [0:0] -:logdrop-293 - [0:0] -:logdrop-294 - [0:0] -:logdrop-295 - [0:0] -:logdrop-296 - [0:0] -:logdrop-297 - [0:0] -:logdrop-298 - [0:0] -:logdrop-299 - [0:0] -:logdrop-3 - [0:0] -:logdrop-30 - [0:0] -:logdrop-300 - [0:0] -:logdrop-301 - [0:0] -:logdrop-302 - [0:0] -:logdrop-303 - [0:0] -:logdrop-304 - [0:0] -:logdrop-305 - [0:0] -:logdrop-306 - [0:0] -:logdrop-307 - [0:0] -:logdrop-308 - [0:0] -:logdrop-309 - [0:0] -:logdrop-31 - [0:0] -:logdrop-310 - [0:0] -:logdrop-311 - [0:0] -:logdrop-312 - [0:0] -:logdrop-313 - [0:0] -:logdrop-314 - [0:0] -:logdrop-315 - [0:0] -:logdrop-316 - [0:0] -:logdrop-317 - [0:0] -:logdrop-318 - [0:0] -:logdrop-319 - [0:0] -:logdrop-32 - [0:0] -:logdrop-320 - [0:0] -:logdrop-321 - [0:0] -:logdrop-322 - [0:0] -:logdrop-323 - [0:0] -:logdrop-324 - [0:0] -:logdrop-325 - [0:0] -:logdrop-326 - [0:0] -:logdrop-327 - [0:0] -:logdrop-328 - [0:0] -:logdrop-329 - [0:0] -:logdrop-33 - [0:0] -:logdrop-330 - [0:0] -:logdrop-331 - [0:0] -:logdrop-332 - [0:0] -:logdrop-333 - [0:0] -:logdrop-334 - [0:0] -:logdrop-335 - [0:0] -:logdrop-336 - [0:0] -:logdrop-337 - [0:0] -:logdrop-338 - [0:0] -:logdrop-339 - [0:0] -:logdrop-34 - [0:0] -:logdrop-340 - [0:0] -:logdrop-341 - [0:0] -:logdrop-342 - [0:0] -:logdrop-343 - [0:0] -:logdrop-344 - [0:0] -:logdrop-345 - [0:0] -:logdrop-346 - [0:0] -:logdrop-347 - [0:0] -:logdrop-348 - [0:0] -:logdrop-349 - [0:0] -:logdrop-35 - [0:0] -:logdrop-350 - [0:0] -:logdrop-351 - [0:0] -:logdrop-352 - [0:0] -:logdrop-353 - [0:0] -:logdrop-354 - [0:0] -:logdrop-355 - [0:0] -:logdrop-356 - [0:0] -:logdrop-357 - [0:0] -:logdrop-358 - [0:0] -:logdrop-359 - [0:0] -:logdrop-36 - [0:0] -:logdrop-360 - [0:0] -:logdrop-361 - [0:0] -:logdrop-362 - [0:0] -:logdrop-363 - [0:0] -:logdrop-364 - [0:0] -:logdrop-365 - [0:0] -:logdrop-366 - [0:0] -:logdrop-367 - [0:0] -:logdrop-368 - [0:0] -:logdrop-369 - [0:0] -:logdrop-37 - [0:0] -:logdrop-370 - [0:0] -:logdrop-371 - [0:0] -:logdrop-372 - [0:0] -:logdrop-373 - [0:0] -:logdrop-374 - [0:0] -:logdrop-375 - [0:0] -:logdrop-376 - [0:0] -:logdrop-377 - [0:0] -:logdrop-378 - [0:0] -:logdrop-379 - [0:0] -:logdrop-38 - [0:0] -:logdrop-380 - [0:0] -:logdrop-381 - [0:0] -:logdrop-382 - [0:0] -:logdrop-383 - [0:0] -:logdrop-384 - [0:0] -:logdrop-385 - [0:0] -:logdrop-386 - [0:0] -:logdrop-387 - [0:0] -:logdrop-388 - [0:0] -:logdrop-389 - [0:0] -:logdrop-39 - [0:0] -:logdrop-390 - [0:0] -:logdrop-391 - [0:0] -:logdrop-392 - [0:0] -:logdrop-393 - [0:0] -:logdrop-394 - [0:0] -:logdrop-395 - [0:0] -:logdrop-396 - [0:0] -:logdrop-397 - [0:0] -:logdrop-398 - [0:0] -:logdrop-399 - [0:0] -:logdrop-4 - [0:0] -:logdrop-40 - [0:0] -:logdrop-400 - [0:0] -:logdrop-401 - [0:0] -:logdrop-402 - [0:0] -:logdrop-403 - [0:0] -:logdrop-404 - [0:0] -:logdrop-405 - [0:0] -:logdrop-406 - [0:0] -:logdrop-407 - [0:0] -:logdrop-408 - [0:0] -:logdrop-409 - [0:0] -:logdrop-41 - [0:0] -:logdrop-410 - [0:0] -:logdrop-411 - [0:0] -:logdrop-412 - [0:0] -:logdrop-413 - [0:0] -:logdrop-414 - [0:0] -:logdrop-415 - [0:0] -:logdrop-416 - [0:0] -:logdrop-417 - [0:0] -:logdrop-418 - [0:0] -:logdrop-419 - [0:0] -:logdrop-42 - [0:0] -:logdrop-420 - [0:0] -:logdrop-421 - [0:0] -:logdrop-422 - [0:0] -:logdrop-423 - [0:0] -:logdrop-424 - [0:0] -:logdrop-425 - [0:0] -:logdrop-426 - [0:0] -:logdrop-427 - [0:0] -:logdrop-428 - [0:0] -:logdrop-429 - [0:0] -:logdrop-43 - [0:0] -:logdrop-430 - [0:0] -:logdrop-431 - [0:0] -:logdrop-432 - [0:0] -:logdrop-433 - [0:0] -:logdrop-434 - [0:0] -:logdrop-435 - [0:0] -:logdrop-436 - [0:0] -:logdrop-437 - [0:0] -:logdrop-438 - [0:0] -:logdrop-439 - [0:0] -:logdrop-44 - [0:0] -:logdrop-440 - [0:0] -:logdrop-441 - [0:0] -:logdrop-442 - [0:0] -:logdrop-443 - [0:0] -:logdrop-444 - [0:0] -:logdrop-445 - [0:0] -:logdrop-446 - [0:0] -:logdrop-447 - [0:0] -:logdrop-448 - [0:0] -:logdrop-449 - [0:0] -:logdrop-45 - [0:0] -:logdrop-450 - [0:0] -:logdrop-451 - [0:0] -:logdrop-452 - [0:0] -:logdrop-453 - [0:0] -:logdrop-454 - [0:0] -:logdrop-455 - [0:0] -:logdrop-456 - [0:0] -:logdrop-457 - [0:0] -:logdrop-458 - [0:0] -:logdrop-46 - [0:0] -:logdrop-47 - [0:0] -:logdrop-48 - [0:0] -:logdrop-49 - [0:0] -:logdrop-5 - [0:0] -:logdrop-50 - [0:0] -:logdrop-51 - [0:0] -:logdrop-52 - [0:0] -:logdrop-53 - [0:0] -:logdrop-54 - [0:0] -:logdrop-55 - [0:0] -:logdrop-56 - [0:0] -:logdrop-57 - [0:0] -:logdrop-58 - [0:0] -:logdrop-59 - [0:0] -:logdrop-6 - [0:0] -:logdrop-60 - [0:0] -:logdrop-61 - [0:0] -:logdrop-62 - [0:0] -:logdrop-63 - [0:0] -:logdrop-64 - [0:0] -:logdrop-65 - [0:0] -:logdrop-66 - [0:0] -:logdrop-67 - [0:0] -:logdrop-68 - [0:0] -:logdrop-69 - [0:0] -:logdrop-7 - [0:0] -:logdrop-70 - [0:0] -:logdrop-71 - [0:0] -:logdrop-72 - [0:0] -:logdrop-73 - [0:0] -:logdrop-74 - [0:0] -:logdrop-75 - [0:0] -:logdrop-76 - [0:0] -:logdrop-77 - [0:0] -:logdrop-78 - [0:0] -:logdrop-79 - [0:0] -:logdrop-8 - [0:0] -:logdrop-80 - [0:0] -:logdrop-81 - [0:0] -:logdrop-82 - [0:0] -:logdrop-83 - [0:0] -:logdrop-84 - [0:0] -:logdrop-85 - [0:0] -:logdrop-86 - [0:0] -:logdrop-87 - [0:0] -:logdrop-88 - [0:0] -:logdrop-89 - [0:0] -:logdrop-9 - [0:0] -:logdrop-90 - [0:0] -:logdrop-91 - [0:0] -:logdrop-92 - [0:0] -:logdrop-93 - [0:0] -:logdrop-94 - [0:0] -:logdrop-95 - [0:0] -:logdrop-96 - [0:0] -:logdrop-97 - [0:0] -:logdrop-98 - [0:0] -:logdrop-99 - [0:0] -:logpass-0 - [0:0] -:logpass-1 - [0:0] -:logpass-10 - [0:0] -:logpass-11 - [0:0] -:logpass-12 - [0:0] -:logpass-13 - [0:0] -:logpass-14 - [0:0] -:logpass-15 - [0:0] -:logpass-16 - [0:0] -:logpass-17 - [0:0] -:logpass-18 - [0:0] -:logpass-19 - [0:0] -:logpass-2 - [0:0] -:logpass-20 - [0:0] -:logpass-21 - [0:0] -:logpass-22 - [0:0] -:logpass-23 - [0:0] -:logpass-24 - [0:0] -:logpass-25 - [0:0] -:logpass-26 - [0:0] -:logpass-27 - [0:0] -:logpass-28 - [0:0] -:logpass-29 - [0:0] -:logpass-3 - [0:0] -:logpass-30 - [0:0] -:logpass-31 - [0:0] -:logpass-32 - [0:0] -:logpass-33 - [0:0] -:logpass-34 - [0:0] -:logpass-35 - [0:0] -:logpass-36 - [0:0] -:logpass-37 - [0:0] -:logpass-38 - [0:0] -:logpass-39 - [0:0] -:logpass-4 - [0:0] -:logpass-40 - [0:0] -:logpass-41 - [0:0] -:logpass-42 - [0:0] -:logpass-43 - [0:0] -:logpass-44 - [0:0] -:logpass-45 - [0:0] -:logpass-46 - [0:0] -:logpass-47 - [0:0] -:logpass-48 - [0:0] -:logpass-49 - [0:0] -:logpass-5 - [0:0] -:logpass-50 - [0:0] -:logpass-6 - [0:0] -:logpass-7 - [0:0] -:logpass-8 - [0:0] -:logpass-9 - [0:0] -:logreject-0 - [0:0] -:logtarpit-0 - [0:0] -:tarpit - [0:0] --A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set --A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set --A FORWARD -j limit-1073 --A FORWARD -j limit-1072 --A FORWARD -j limit-1071 --A FORWARD -j limit-1070 --A FORWARD -j limit-1069 --A FORWARD -j limit-1068 --A FORWARD -j limit-1067 --A FORWARD -j limit-1066 --A FORWARD -j limit-1065 --A FORWARD -j limit-1064 --A FORWARD -j limit-1063 --A FORWARD -j limit-1062 --A FORWARD -j limit-1061 --A FORWARD -j limit-1060 --A FORWARD -j limit-1059 --A FORWARD -j limit-1058 --A FORWARD -j limit-1057 --A FORWARD -j limit-1056 --A FORWARD -j limit-1055 --A FORWARD -j limit-1054 --A FORWARD -j limit-1053 --A FORWARD -j limit-1052 --A FORWARD -j limit-1051 --A FORWARD -j limit-1050 --A FORWARD -j limit-1049 --A FORWARD -j limit-1048 --A FORWARD -j limit-1047 --A FORWARD -j limit-1046 --A FORWARD -j limit-1045 --A FORWARD -j limit-1044 --A FORWARD -j limit-1043 --A FORWARD -j limit-1042 --A FORWARD -j limit-1041 --A FORWARD -j limit-1040 --A FORWARD -j limit-1039 --A FORWARD -j limit-1038 --A FORWARD -j limit-1037 --A FORWARD -j limit-1036 --A FORWARD -j limit-1035 --A FORWARD -j limit-1034 --A FORWARD -j limit-1033 --A FORWARD -j limit-1032 --A FORWARD -j limit-1031 --A FORWARD -j limit-1030 --A FORWARD -j limit-1029 --A FORWARD -j limit-1028 --A FORWARD -j limit-1027 --A FORWARD -j limit-1026 --A FORWARD -j limit-1025 --A FORWARD -j limit-1024 --A FORWARD -j limit-1023 --A FORWARD -j limit-1022 --A FORWARD -j limit-1021 --A FORWARD -j limit-1020 --A FORWARD -j limit-1019 --A FORWARD -j limit-1018 --A FORWARD -j limit-1017 --A FORWARD -j limit-1016 --A FORWARD -j limit-1015 --A FORWARD -j limit-1014 --A FORWARD -j limit-1013 --A FORWARD -j limit-1012 --A FORWARD -j limit-1011 --A FORWARD -j limit-1010 --A FORWARD -j limit-1009 --A FORWARD -j limit-1008 --A FORWARD -j limit-1007 --A FORWARD -j limit-1006 --A FORWARD -j limit-1005 --A FORWARD -j limit-1004 --A FORWARD -j limit-1003 --A FORWARD -j limit-1002 --A FORWARD -j limit-1001 --A FORWARD -j limit-1000 --A FORWARD -j limit-999 --A FORWARD -j limit-998 --A FORWARD -j limit-997 --A FORWARD -j limit-996 --A FORWARD -j limit-995 --A FORWARD -j limit-994 --A FORWARD -j limit-993 --A FORWARD -j limit-992 --A FORWARD -j limit-991 --A FORWARD -j limit-990 --A FORWARD -j limit-989 --A FORWARD -j limit-988 --A FORWARD -j limit-987 --A FORWARD -j limit-986 --A FORWARD -j limit-985 --A FORWARD -j limit-984 --A FORWARD -j limit-983 --A FORWARD -j limit-982 --A FORWARD -j limit-981 --A FORWARD -j limit-980 --A FORWARD -j limit-979 --A FORWARD -j limit-978 --A FORWARD -j limit-977 --A FORWARD -j limit-976 --A FORWARD -j limit-975 --A FORWARD -j limit-974 --A FORWARD -j limit-973 --A FORWARD -j limit-972 --A FORWARD -j limit-971 --A FORWARD -j limit-970 --A FORWARD -j limit-969 --A FORWARD -j limit-968 --A FORWARD -j limit-967 --A FORWARD -j limit-966 --A FORWARD -j limit-965 --A FORWARD -j limit-964 --A FORWARD -j limit-963 --A FORWARD -j limit-962 --A FORWARD -j limit-961 --A FORWARD -j limit-960 --A FORWARD -j limit-959 --A FORWARD -j limit-958 --A FORWARD -j limit-957 --A FORWARD -j limit-956 --A FORWARD -j limit-955 --A FORWARD -j limit-954 --A FORWARD -j limit-953 --A FORWARD -j limit-952 --A FORWARD -j limit-951 --A FORWARD -j limit-950 --A FORWARD -j limit-949 --A FORWARD -j limit-948 --A FORWARD -j limit-947 --A FORWARD -j limit-946 --A FORWARD -j limit-945 --A FORWARD -j limit-944 --A FORWARD -j limit-943 --A FORWARD -j limit-942 --A FORWARD -j limit-941 --A FORWARD -j limit-940 --A FORWARD -j limit-939 --A FORWARD -j limit-938 --A FORWARD -j limit-937 --A FORWARD -j limit-936 --A FORWARD -j limit-935 --A FORWARD -j limit-934 --A FORWARD -j limit-933 --A FORWARD -j limit-932 --A FORWARD -j limit-931 --A FORWARD -j limit-930 --A FORWARD -j limit-929 --A FORWARD -j limit-928 --A FORWARD -j limit-927 --A FORWARD -j limit-926 --A FORWARD -j limit-925 --A FORWARD -j limit-924 --A FORWARD -j limit-923 --A FORWARD -j limit-922 --A FORWARD -j limit-921 --A FORWARD -j limit-920 --A FORWARD -j limit-919 --A FORWARD -j limit-918 --A FORWARD -j limit-917 --A FORWARD -j limit-916 --A FORWARD -j limit-915 --A FORWARD -j limit-914 --A FORWARD -j limit-913 --A FORWARD -j limit-912 --A FORWARD -j limit-911 --A FORWARD -j limit-910 --A FORWARD -j limit-909 --A FORWARD -j limit-908 --A FORWARD -j limit-907 --A FORWARD -j limit-906 --A FORWARD -j limit-905 --A FORWARD -j limit-904 --A FORWARD -j limit-903 --A FORWARD -j limit-902 --A FORWARD -j limit-901 --A FORWARD -j limit-900 --A FORWARD -j limit-899 --A FORWARD -j limit-898 --A FORWARD -j limit-897 --A FORWARD -j limit-896 --A FORWARD -j limit-895 --A FORWARD -j limit-894 --A FORWARD -j limit-893 --A FORWARD -j limit-892 --A FORWARD -j limit-891 --A FORWARD -j limit-890 --A FORWARD -j limit-889 --A FORWARD -j limit-888 --A FORWARD -j limit-887 --A FORWARD -j limit-886 --A FORWARD -j limit-885 --A FORWARD -j limit-884 --A FORWARD -j limit-883 --A FORWARD -j limit-882 --A FORWARD -j limit-881 --A FORWARD -j limit-880 --A FORWARD -j limit-879 --A FORWARD -j limit-878 --A FORWARD -j limit-877 --A FORWARD -j limit-876 --A FORWARD -j limit-875 --A FORWARD -j limit-874 --A FORWARD -j limit-873 --A FORWARD -j limit-872 --A FORWARD -j limit-871 --A FORWARD -j limit-870 --A FORWARD -j limit-869 --A FORWARD -j limit-868 --A FORWARD -j limit-867 --A FORWARD -j limit-866 --A FORWARD -j limit-865 --A FORWARD -j limit-864 --A FORWARD -j limit-863 --A FORWARD -j limit-862 --A FORWARD -j limit-861 --A FORWARD -j limit-860 --A FORWARD -j limit-859 --A FORWARD -j limit-858 --A FORWARD -j limit-857 --A FORWARD -j limit-856 --A FORWARD -j limit-855 --A FORWARD -j limit-854 --A FORWARD -j limit-853 --A FORWARD -j limit-852 --A FORWARD -j limit-851 --A FORWARD -j limit-850 --A FORWARD -j limit-849 --A FORWARD -j limit-848 --A FORWARD -j limit-847 --A FORWARD -j limit-846 --A FORWARD -j limit-845 --A FORWARD -j limit-844 --A FORWARD -j limit-843 --A FORWARD -j limit-842 --A FORWARD -j limit-841 --A FORWARD -j limit-840 --A FORWARD -j limit-839 --A FORWARD -j limit-838 --A FORWARD -j limit-837 --A FORWARD -j limit-836 --A FORWARD -j limit-835 --A FORWARD -j limit-834 --A FORWARD -j limit-833 --A FORWARD -j limit-832 --A FORWARD -j limit-831 --A FORWARD -j limit-830 --A FORWARD -j limit-829 --A FORWARD -j limit-828 --A FORWARD -j limit-827 --A FORWARD -j limit-826 --A FORWARD -j limit-825 --A FORWARD -j limit-824 --A FORWARD -j limit-823 --A FORWARD -j limit-822 --A FORWARD -j limit-821 --A FORWARD -j limit-820 --A FORWARD -j limit-819 --A FORWARD -j limit-818 --A FORWARD -j limit-817 --A FORWARD -j limit-816 --A FORWARD -j limit-815 --A FORWARD -j limit-814 --A FORWARD -j limit-813 --A FORWARD -j limit-812 --A FORWARD -j limit-811 --A FORWARD -j limit-810 --A FORWARD -j limit-809 --A FORWARD -j limit-808 --A FORWARD -j limit-807 --A FORWARD -j limit-806 --A FORWARD -j limit-805 --A FORWARD -j limit-804 --A FORWARD -j limit-803 --A FORWARD -j limit-802 --A FORWARD -j limit-801 --A FORWARD -j limit-800 --A FORWARD -j limit-799 --A FORWARD -j limit-798 --A FORWARD -j limit-797 --A FORWARD -j limit-796 --A FORWARD -j limit-795 --A FORWARD -j limit-794 --A FORWARD -j limit-793 --A FORWARD -j limit-792 --A FORWARD -j limit-791 --A FORWARD -j limit-790 --A FORWARD -j limit-789 --A FORWARD -j limit-788 --A FORWARD -j limit-787 --A FORWARD -j limit-786 --A FORWARD -j limit-785 --A FORWARD -j limit-784 --A FORWARD -j limit-783 --A FORWARD -j limit-782 --A FORWARD -j limit-781 --A FORWARD -j limit-780 --A FORWARD -j limit-779 --A FORWARD -j limit-778 --A FORWARD -j limit-777 --A FORWARD -j limit-776 --A FORWARD -j limit-775 --A FORWARD -j limit-774 --A FORWARD -j limit-773 --A FORWARD -j limit-772 --A FORWARD -j limit-771 --A FORWARD -j limit-770 --A FORWARD -j limit-769 --A FORWARD -j limit-768 --A FORWARD -j limit-767 --A FORWARD -j limit-766 --A FORWARD -j limit-765 --A FORWARD -j limit-764 --A FORWARD -j limit-763 --A FORWARD -j limit-762 --A FORWARD -j limit-761 --A FORWARD -j limit-760 --A FORWARD -j limit-759 --A FORWARD -j limit-758 --A FORWARD -j limit-757 --A FORWARD -j limit-756 --A FORWARD -j limit-755 --A FORWARD -j limit-754 --A FORWARD -j limit-753 --A FORWARD -j limit-752 --A FORWARD -j limit-751 --A FORWARD -j limit-750 --A FORWARD -j limit-749 --A FORWARD -j limit-748 --A FORWARD -j limit-747 --A FORWARD -j limit-746 --A FORWARD -j limit-745 --A FORWARD -j limit-744 --A FORWARD -j limit-743 --A FORWARD -j limit-742 --A FORWARD -j limit-741 --A FORWARD -j limit-740 --A FORWARD -j limit-739 --A FORWARD -j limit-738 --A FORWARD -j limit-737 --A FORWARD -j limit-736 --A FORWARD -j limit-735 --A FORWARD -j limit-734 --A FORWARD -j limit-733 --A FORWARD -j limit-732 --A FORWARD -j limit-731 --A FORWARD -j limit-730 --A FORWARD -j limit-729 --A FORWARD -j limit-728 --A FORWARD -j limit-727 --A FORWARD -j limit-726 --A FORWARD -j limit-725 --A FORWARD -j limit-724 --A FORWARD -j limit-723 --A FORWARD -j limit-722 --A FORWARD -j limit-721 --A FORWARD -j limit-720 --A FORWARD -j limit-719 --A FORWARD -j limit-718 --A FORWARD -j limit-717 --A FORWARD -j limit-716 --A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD --A FORWARD -j logaccept-0 --A FORWARD -j logpass-0 --A FORWARD -d 172.16.0.0/16 -j ACCEPT --A FORWARD -d 172.16.0.0/16 --A FORWARD -d 172.16.0.0/16 -j logaccept-1 --A FORWARD -d 172.16.0.0/16 -j logpass-1 --A FORWARD -d 172.16.0.0/16 -j ACCEPT --A FORWARD -d 172.16.2.0/16 -j ACCEPT --A FORWARD -d 172.16.0.0/16 --A FORWARD -d 172.16.2.0/16 --A FORWARD -d 172.16.0.0/16 -j logaccept-2 --A FORWARD -d 172.16.2.0/16 -j logaccept-2 --A FORWARD -d 172.16.0.0/16 -j logpass-2 --A FORWARD -d 172.16.2.0/16 -j logpass-2 --A FORWARD -s 10.0.0.1 -j ACCEPT --A FORWARD -s 10.0.0.1 --A FORWARD -s 10.0.0.1 -j logaccept-3 --A FORWARD -s 10.0.0.1 -j logpass-3 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 --A FORWARD -s 10.0.0.1 -j ACCEPT --A FORWARD -s 10.0.0.2 -j ACCEPT --A FORWARD -s 10.0.0.1 --A FORWARD -s 10.0.0.2 --A FORWARD -s 10.0.0.1 -j logaccept-6 --A FORWARD -s 10.0.0.2 -j logaccept-6 --A FORWARD -s 10.0.0.1 -j logpass-6 --A FORWARD -s 10.0.0.2 -j logpass-6 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 --A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 --A FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 --A FORWARD -o eth1 -d 10.0.0.0/12 -j logpass-9 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 --A FORWARD -i eth0 -j ACCEPT --A FORWARD -i eth0 --A FORWARD -i eth0 -j logaccept-18 --A FORWARD -i eth0 -j logpass-16 --A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -d 172.16.0.0/16 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-17 --A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -d 172.16.0.0/16 --A FORWARD -i eth0 -d 172.16.2.0/16 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 --A FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-18 --A FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-18 --A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 --A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 --A FORWARD -i eth0 -s 10.0.0.1 -j logpass-19 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 --A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 --A FORWARD -i eth0 -s 10.0.0.2 --A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 --A FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 --A FORWARD -i eth0 -s 10.0.0.1 -j logpass-22 --A FORWARD -i eth0 -s 10.0.0.2 -j logpass-22 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 --A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-30 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 --A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 --A FORWARD -i eth2 -s 10.1.0.0/12 --A FORWARD -i eth3 -s 10.1.0.0/12 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 --A FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 --A FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-37 --A FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-37 --A FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-37 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logdrop-0 --A FORWARD --A FORWARD -j logreject-0 --A FORWARD -j logtarpit-0 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-0 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-1 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-2 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-3 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-4 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-5 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-6 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-7 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-8 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-9 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-10 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-11 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-12 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-13 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-14 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-15 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-16 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-17 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-18 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-19 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-20 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-21 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-22 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-23 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-24 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-25 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-26 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-27 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-28 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-29 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-30 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-31 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-32 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-33 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-34 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-35 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-36 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-37 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-38 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-39 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-43 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-47 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-55 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-59 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-69 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-73 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-77 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-85 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-89 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-97 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-101 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-105 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-109 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-113 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-117 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-127 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-131 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-135 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-139 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-143 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-147 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-151 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-155 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-159 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-163 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-167 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-177 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-181 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-185 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-189 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-193 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-197 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-201 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-205 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-209 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-217 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-221 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-235 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-239 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-247 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-251 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-259 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-263 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-271 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-275 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-289 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-293 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-301 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-305 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-313 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-317 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-325 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-329 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-0 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-1 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-2 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-3 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-4 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-5 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-6 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-7 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-8 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-9 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-10 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-11 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-12 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-13 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-14 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-15 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-16 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-17 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-18 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-19 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-20 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-21 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-22 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-23 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-24 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-25 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-26 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-27 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-28 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-29 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-30 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-31 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-32 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-33 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-34 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-35 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-36 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-37 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-38 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-39 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-40 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-41 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-42 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-43 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-44 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-45 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-46 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-47 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-48 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-49 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-50 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-51 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-52 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-53 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-54 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-55 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-56 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-57 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-58 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-59 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-60 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-61 --A FORWARD -j ACCEPT --A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set --A FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set --A FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set --A FORWARD -m recent --name user:D --rsource --mask 255.255.252.0 --set --A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set --A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set --A FORWARD -j ACCEPT --A FORWARD -j logdrop-457 --A FORWARD --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD --A FORWARD -j logaccept-84 --A FORWARD -j logdrop-458 --A FORWARD -j logpass-50 --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD --A FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A FORWARD -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A FORWARD -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT --A FORWARD -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT --A FORWARD -i eth0 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth0 -o eth4 -j ACCEPT --A FORWARD -i eth0 -o eth5 -j ACCEPT --A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth4 -o eth0 -j ACCEPT --A FORWARD -i eth5 -o eth0 -j ACCEPT --A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth4 -o eth4 -j ACCEPT --A FORWARD -i eth4 -o eth5 -j ACCEPT --A FORWARD -i eth5 -o eth4 -j ACCEPT --A FORWARD -i eth5 -o eth5 -j ACCEPT --A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -p icmp -j icmp-routing --A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set --A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A INPUT -j limit-1073 --A INPUT -j limit-1072 --A INPUT -j limit-1071 --A INPUT -j limit-1070 --A INPUT -j limit-1069 --A INPUT -j limit-1068 --A INPUT -j limit-1067 --A INPUT -j limit-1066 --A INPUT -j limit-1065 --A INPUT -j limit-1064 --A INPUT -j limit-1063 --A INPUT -j limit-1062 --A INPUT -j limit-1061 --A INPUT -j limit-1060 --A INPUT -j limit-1059 --A INPUT -j limit-1058 --A INPUT -j limit-1057 --A INPUT -j limit-1056 --A INPUT -j limit-1055 --A INPUT -j limit-1054 --A INPUT -j limit-1053 --A INPUT -j limit-1052 --A INPUT -j limit-1051 --A INPUT -j limit-1050 --A INPUT -j limit-1049 --A INPUT -j limit-1048 --A INPUT -j limit-1047 --A INPUT -j limit-1046 --A INPUT -j limit-1045 --A INPUT -j limit-1044 --A INPUT -j limit-1043 --A INPUT -j limit-1042 --A INPUT -j limit-1041 --A INPUT -j limit-1040 --A INPUT -j limit-1039 --A INPUT -j limit-1038 --A INPUT -j limit-1037 --A INPUT -j limit-1036 --A INPUT -j limit-1035 --A INPUT -j limit-1034 --A INPUT -j limit-1033 --A INPUT -j limit-1032 --A INPUT -j limit-1031 --A INPUT -j limit-1030 --A INPUT -j limit-1029 --A INPUT -j limit-1028 --A INPUT -j limit-1027 --A INPUT -j limit-1026 --A INPUT -j limit-1025 --A INPUT -j limit-1024 --A INPUT -j limit-1023 --A INPUT -j limit-1022 --A INPUT -j limit-1021 --A INPUT -j limit-1020 --A INPUT -j limit-1019 --A INPUT -j limit-1018 --A INPUT -j limit-1017 --A INPUT -j limit-1016 --A INPUT -j limit-1015 --A INPUT -j limit-1014 --A INPUT -j limit-1013 --A INPUT -j limit-1012 --A INPUT -j limit-1011 --A INPUT -j limit-1010 --A INPUT -j limit-1009 --A INPUT -j limit-1008 --A INPUT -j limit-1007 --A INPUT -j limit-1006 --A INPUT -j limit-1005 --A INPUT -j limit-1004 --A INPUT -j limit-1003 --A INPUT -j limit-1002 --A INPUT -j limit-1001 --A INPUT -j limit-1000 --A INPUT -j limit-999 --A INPUT -j limit-998 --A INPUT -j limit-997 --A INPUT -j limit-996 --A INPUT -j limit-995 --A INPUT -j limit-994 --A INPUT -j limit-993 --A INPUT -j limit-992 --A INPUT -j limit-991 --A INPUT -j limit-990 --A INPUT -j limit-989 --A INPUT -j limit-988 --A INPUT -j limit-987 --A INPUT -j limit-986 --A INPUT -j limit-985 --A INPUT -j limit-984 --A INPUT -j limit-983 --A INPUT -j limit-982 --A INPUT -j limit-981 --A INPUT -j limit-980 --A INPUT -j limit-979 --A INPUT -j limit-978 --A INPUT -j limit-977 --A INPUT -j limit-976 --A INPUT -j limit-975 --A INPUT -j limit-974 --A INPUT -j limit-973 --A INPUT -j limit-972 --A INPUT -j limit-971 --A INPUT -j limit-970 --A INPUT -j limit-969 --A INPUT -j limit-968 --A INPUT -j limit-967 --A INPUT -j limit-966 --A INPUT -j limit-965 --A INPUT -j limit-964 --A INPUT -j limit-963 --A INPUT -j limit-962 --A INPUT -j limit-961 --A INPUT -j limit-960 --A INPUT -j limit-959 --A INPUT -j limit-958 --A INPUT -j limit-957 --A INPUT -j limit-956 --A INPUT -j limit-955 --A INPUT -j limit-954 --A INPUT -j limit-953 --A INPUT -j limit-952 --A INPUT -j limit-951 --A INPUT -j limit-950 --A INPUT -j limit-949 --A INPUT -j limit-948 --A INPUT -j limit-947 --A INPUT -j limit-946 --A INPUT -j limit-945 --A INPUT -j limit-944 --A INPUT -j limit-943 --A INPUT -j limit-942 --A INPUT -j limit-941 --A INPUT -j limit-940 --A INPUT -j limit-939 --A INPUT -j limit-938 --A INPUT -j limit-937 --A INPUT -j limit-936 --A INPUT -j limit-935 --A INPUT -j limit-934 --A INPUT -j limit-933 --A INPUT -j limit-932 --A INPUT -j limit-931 --A INPUT -j limit-930 --A INPUT -j limit-929 --A INPUT -j limit-928 --A INPUT -j limit-927 --A INPUT -j limit-926 --A INPUT -j limit-925 --A INPUT -j limit-924 --A INPUT -j limit-923 --A INPUT -j limit-922 --A INPUT -j limit-921 --A INPUT -j limit-920 --A INPUT -j limit-919 --A INPUT -j limit-918 --A INPUT -j limit-917 --A INPUT -j limit-916 --A INPUT -j limit-915 --A INPUT -j limit-914 --A INPUT -j limit-913 --A INPUT -j limit-912 --A INPUT -j limit-911 --A INPUT -j limit-910 --A INPUT -j limit-909 --A INPUT -j limit-908 --A INPUT -j limit-907 --A INPUT -j limit-906 --A INPUT -j limit-905 --A INPUT -j limit-904 --A INPUT -j limit-903 --A INPUT -j limit-902 --A INPUT -j limit-901 --A INPUT -j limit-900 --A INPUT -j limit-899 --A INPUT -j limit-898 --A INPUT -j limit-897 --A INPUT -j limit-896 --A INPUT -j limit-895 --A INPUT -j limit-894 --A INPUT -j limit-893 --A INPUT -j limit-892 --A INPUT -j limit-891 --A INPUT -j limit-890 --A INPUT -j limit-889 --A INPUT -j limit-888 --A INPUT -j limit-887 --A INPUT -j limit-886 --A INPUT -j limit-885 --A INPUT -j limit-884 --A INPUT -j limit-883 --A INPUT -j limit-882 --A INPUT -j limit-881 --A INPUT -j limit-880 --A INPUT -j limit-879 --A INPUT -j limit-878 --A INPUT -j limit-877 --A INPUT -j limit-876 --A INPUT -j limit-875 --A INPUT -j limit-874 --A INPUT -j limit-873 --A INPUT -j limit-872 --A INPUT -j limit-871 --A INPUT -j limit-870 --A INPUT -j limit-869 --A INPUT -j limit-868 --A INPUT -j limit-867 --A INPUT -j limit-866 --A INPUT -j limit-865 --A INPUT -j limit-864 --A INPUT -j limit-863 --A INPUT -j limit-862 --A INPUT -j limit-861 --A INPUT -j limit-860 --A INPUT -j limit-859 --A INPUT -j limit-858 --A INPUT -j limit-857 --A INPUT -j limit-856 --A INPUT -j limit-855 --A INPUT -j limit-854 --A INPUT -j limit-853 --A INPUT -j limit-852 --A INPUT -j limit-851 --A INPUT -j limit-850 --A INPUT -j limit-849 --A INPUT -j limit-848 --A INPUT -j limit-847 --A INPUT -j limit-846 --A INPUT -j limit-845 --A INPUT -j limit-844 --A INPUT -j limit-843 --A INPUT -j limit-842 --A INPUT -j limit-841 --A INPUT -j limit-840 --A INPUT -j limit-839 --A INPUT -j limit-838 --A INPUT -j limit-837 --A INPUT -j limit-836 --A INPUT -j limit-835 --A INPUT -j limit-834 --A INPUT -j limit-833 --A INPUT -j limit-832 --A INPUT -j limit-831 --A INPUT -j limit-830 --A INPUT -j limit-829 --A INPUT -j limit-828 --A INPUT -j limit-827 --A INPUT -j limit-826 --A INPUT -j limit-825 --A INPUT -j limit-824 --A INPUT -j limit-823 --A INPUT -j limit-822 --A INPUT -j limit-821 --A INPUT -j limit-820 --A INPUT -j limit-819 --A INPUT -j limit-818 --A INPUT -j limit-817 --A INPUT -j limit-816 --A INPUT -j limit-815 --A INPUT -j limit-814 --A INPUT -j limit-813 --A INPUT -j limit-812 --A INPUT -j limit-811 --A INPUT -j limit-810 --A INPUT -j limit-809 --A INPUT -j limit-808 --A INPUT -j limit-807 --A INPUT -j limit-806 --A INPUT -j limit-805 --A INPUT -j limit-804 --A INPUT -j limit-803 --A INPUT -j limit-802 --A INPUT -j limit-801 --A INPUT -j limit-800 --A INPUT -j limit-799 --A INPUT -j limit-798 --A INPUT -j limit-797 --A INPUT -j limit-796 --A INPUT -j limit-795 --A INPUT -j limit-794 --A INPUT -j limit-793 --A INPUT -j limit-792 --A INPUT -j limit-791 --A INPUT -j limit-790 --A INPUT -j limit-789 --A INPUT -j limit-788 --A INPUT -j limit-787 --A INPUT -j limit-786 --A INPUT -j limit-785 --A INPUT -j limit-784 --A INPUT -j limit-783 --A INPUT -j limit-782 --A INPUT -j limit-781 --A INPUT -j limit-780 --A INPUT -j limit-779 --A INPUT -j limit-778 --A INPUT -j limit-777 --A INPUT -j limit-776 --A INPUT -j limit-775 --A INPUT -j limit-774 --A INPUT -j limit-773 --A INPUT -j limit-772 --A INPUT -j limit-771 --A INPUT -j limit-770 --A INPUT -j limit-769 --A INPUT -j limit-768 --A INPUT -j limit-767 --A INPUT -j limit-766 --A INPUT -j limit-765 --A INPUT -j limit-764 --A INPUT -j limit-763 --A INPUT -j limit-762 --A INPUT -j limit-761 --A INPUT -j limit-760 --A INPUT -j limit-759 --A INPUT -j limit-758 --A INPUT -j limit-757 --A INPUT -j limit-756 --A INPUT -j limit-755 --A INPUT -j limit-754 --A INPUT -j limit-753 --A INPUT -j limit-752 --A INPUT -j limit-751 --A INPUT -j limit-750 --A INPUT -j limit-749 --A INPUT -j limit-748 --A INPUT -j limit-747 --A INPUT -j limit-746 --A INPUT -j limit-745 --A INPUT -j limit-744 --A INPUT -j limit-743 --A INPUT -j limit-742 --A INPUT -j limit-741 --A INPUT -j limit-740 --A INPUT -j limit-739 --A INPUT -j limit-738 --A INPUT -j limit-737 --A INPUT -j limit-736 --A INPUT -j limit-735 --A INPUT -j limit-734 --A INPUT -j limit-733 --A INPUT -j limit-732 --A INPUT -j limit-731 --A INPUT -j limit-730 --A INPUT -j limit-729 --A INPUT -j limit-728 --A INPUT -j limit-727 --A INPUT -j limit-726 --A INPUT -j limit-725 --A INPUT -j limit-724 --A INPUT -j limit-723 --A INPUT -j limit-722 --A INPUT -j limit-721 --A INPUT -j limit-720 --A INPUT -j limit-719 --A INPUT -j limit-718 --A INPUT -j limit-717 --A INPUT -j limit-716 --A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT --A INPUT -i lo -j ACCEPT --A INPUT -j ACCEPT --A INPUT --A INPUT -j logaccept-0 --A INPUT -j logpass-0 --A INPUT -d 172.16.0.0/16 -j ACCEPT --A INPUT -d 172.16.0.0/16 --A INPUT -d 172.16.0.0/16 -j logaccept-1 --A INPUT -d 172.16.0.0/16 -j logpass-1 --A INPUT -d 172.16.0.0/16 -j ACCEPT --A INPUT -d 172.16.2.0/16 -j ACCEPT --A INPUT -d 172.16.0.0/16 --A INPUT -d 172.16.2.0/16 --A INPUT -d 172.16.0.0/16 -j logaccept-2 --A INPUT -d 172.16.2.0/16 -j logaccept-2 --A INPUT -d 172.16.0.0/16 -j logpass-2 --A INPUT -d 172.16.2.0/16 -j logpass-2 --A INPUT -s 10.0.0.1 -j ACCEPT --A INPUT -s 10.0.0.1 --A INPUT -s 10.0.0.1 -j logaccept-3 --A INPUT -s 10.0.0.1 -j logpass-3 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 --A INPUT -s 10.0.0.1 -j ACCEPT --A INPUT -s 10.0.0.2 -j ACCEPT --A INPUT -s 10.0.0.1 --A INPUT -s 10.0.0.2 --A INPUT -s 10.0.0.1 -j logaccept-6 --A INPUT -s 10.0.0.2 -j logaccept-6 --A INPUT -s 10.0.0.1 -j logpass-6 --A INPUT -s 10.0.0.2 -j logpass-6 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 --A INPUT -i eth0 -j ACCEPT --A INPUT -i eth0 --A INPUT -i eth0 -j logaccept-18 --A INPUT -i eth0 -j logpass-16 --A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -d 172.16.0.0/16 --A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 --A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-17 --A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -d 172.16.0.0/16 --A INPUT -i eth0 -d 172.16.2.0/16 --A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 --A INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 --A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-18 --A INPUT -i eth0 -d 172.16.2.0/16 -j logpass-18 --A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 --A INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 --A INPUT -i eth0 -s 10.0.0.1 -j logpass-19 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 --A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 --A INPUT -i eth0 -s 10.0.0.2 --A INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 --A INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 --A INPUT -i eth0 -s 10.0.0.1 -j logpass-22 --A INPUT -i eth0 -s 10.0.0.2 -j logpass-22 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 --A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 --A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 --A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-30 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-48 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-49 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-50 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-51 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-52 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-53 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-54 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-55 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-56 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-57 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-58 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-59 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-60 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-61 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-62 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-63 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-64 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-65 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-66 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-67 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-68 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-69 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-70 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-71 --A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 --A INPUT -i eth2 -s 10.1.0.0/12 --A INPUT -i eth3 -s 10.1.0.0/12 --A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 --A INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 --A INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 --A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-37 --A INPUT -i eth2 -s 10.1.0.0/12 -j logpass-37 --A INPUT -i eth3 -s 10.1.0.0/12 -j logpass-37 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-72 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-72 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-72 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-73 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-73 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-73 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-74 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-74 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-74 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-75 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-75 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-75 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-76 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-76 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-76 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-77 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-77 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-77 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-78 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-78 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-78 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-79 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-79 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-79 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-80 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-80 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-80 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-81 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-81 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-81 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-82 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-82 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-82 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-83 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-83 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-83 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-84 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-84 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-84 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-85 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-85 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-85 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-86 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-86 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-86 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-87 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-87 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-87 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-88 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-88 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-88 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-89 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-89 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-89 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-90 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-90 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-90 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-91 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-91 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-91 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-92 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-92 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-92 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-93 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-93 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-93 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-94 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-94 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-94 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-95 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-95 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-95 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logdrop-0 --A INPUT --A INPUT -j logreject-0 --A INPUT -j logtarpit-0 --A INPUT -j ACCEPT --A INPUT -j logaccept-final-0 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-1 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-2 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-3 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-4 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-5 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-6 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-7 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-8 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-9 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-10 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-11 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-12 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-13 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-14 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-15 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-16 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-17 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-18 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-19 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-20 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-21 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-22 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-23 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-24 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-25 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-26 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-27 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-28 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-29 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-30 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-31 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-32 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-33 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-34 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-35 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-36 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-37 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-38 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-39 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-40 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-41 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-42 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-43 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-44 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-45 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-46 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-47 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-48 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-49 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-50 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-51 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-52 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-53 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-54 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-55 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-56 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-57 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-58 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-59 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-60 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-61 --A INPUT -j ACCEPT --A INPUT -i eth0 -j limit-1074 --A INPUT -i eth0 -j limit-1075 --A INPUT -i eth0 -j limit-1076 --A INPUT -i eth0 -j limit-1077 --A INPUT -i eth0 -j limit-1078 --A INPUT -i eth0 -j limit-1079 --A INPUT -i eth0 -j limit-1080 --A INPUT -i eth0 -j limit-1081 --A INPUT -i eth0 -j limit-1082 --A INPUT -i eth0 -j limit-1083 --A INPUT -i eth0 -j limit-1084 --A INPUT -i eth0 -j limit-1085 --A INPUT -i eth0 -j limit-1086 --A INPUT -i eth0 -j limit-1087 --A INPUT -i eth0 -j limit-1088 --A INPUT -i eth0 -j limit-1089 --A INPUT -i eth0 -j limit-1090 --A INPUT -i eth0 -j limit-1091 --A INPUT -i eth0 -j limit-1092 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-362 --A INPUT -i eth0 -j limit-1094 --A INPUT -i eth0 -j limit-1095 --A INPUT -i eth0 -j limit-1096 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-366 --A INPUT -i eth0 -j limit-1098 --A INPUT -i eth0 -j limit-1099 --A INPUT -i eth0 -j limit-1100 --A INPUT -i eth0 -j limit-1101 --A INPUT -i eth0 -j limit-1102 --A INPUT -i eth0 -j limit-1103 --A INPUT -i eth0 -j limit-1104 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 --A INPUT -i eth0 -j limit-1106 --A INPUT -i eth0 -j limit-1107 --A INPUT -i eth0 -j limit-1108 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-378 --A INPUT -i eth0 -j limit-1110 --A INPUT -i eth0 -j limit-1111 --A INPUT -i eth0 -j limit-1112 --A INPUT -i eth0 -j limit-1113 --A INPUT -i eth0 -j limit-1114 --A INPUT -i eth0 -j limit-1115 --A INPUT -i eth0 -j limit-1116 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-386 --A INPUT -i eth0 -j limit-1118 --A INPUT -i eth0 -j limit-1119 --A INPUT -i eth0 -j limit-1120 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-390 --A INPUT -i eth0 -j limit-1122 --A INPUT -i eth0 -j limit-1123 --A INPUT -i eth0 -j limit-1124 --A INPUT -i eth0 -j limit-1125 --A INPUT -i eth0 -j limit-1126 --A INPUT -i eth0 -j limit-1127 --A INPUT -i eth0 -j limit-1128 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 --A INPUT -i eth0 -j limit-1130 --A INPUT -i eth0 -j limit-1131 --A INPUT -i eth0 -j limit-1132 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-402 --A INPUT -i eth0 -j limit-1134 --A INPUT -i eth0 -j limit-1135 --A INPUT -i eth0 -j limit-1136 --A INPUT -i eth0 -j limit-1137 --A INPUT -i eth0 -j limit-1138 --A INPUT -i eth0 -j limit-1139 --A INPUT -i eth0 -j limit-1140 --A INPUT -i eth0 -j limit-1141 --A INPUT -i eth0 -j limit-1142 --A INPUT -i eth0 -j limit-1143 --A INPUT -i eth0 -j limit-1144 --A INPUT -i eth0 -j limit-1145 --A INPUT -i eth0 -j limit-1146 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1148 --A INPUT -i eth0 -j limit-1149 --A INPUT -i eth0 -j limit-1150 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1152 --A INPUT -i eth0 -j limit-1153 --A INPUT -i eth0 -j limit-1154 --A INPUT -i eth0 -j limit-1155 --A INPUT -i eth0 -j limit-1156 --A INPUT -i eth0 -j limit-1157 --A INPUT -i eth0 -j limit-1158 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1160 --A INPUT -i eth0 -j limit-1161 --A INPUT -i eth0 -j limit-1162 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1164 --A INPUT -i eth0 -j limit-1165 --A INPUT -i eth0 -j limit-1166 --A INPUT -i eth0 -j limit-1167 --A INPUT -i eth0 -j limit-1168 --A INPUT -i eth0 -j limit-1169 --A INPUT -i eth0 -j limit-1170 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1172 --A INPUT -i eth0 -j limit-1173 --A INPUT -i eth0 -j limit-1174 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1176 --A INPUT -i eth0 -j limit-1177 --A INPUT -i eth0 -j limit-1178 --A INPUT -i eth0 -j limit-1179 --A INPUT -i eth0 -j limit-1180 --A INPUT -i eth0 -j limit-1181 --A INPUT -i eth0 -j limit-1182 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1184 --A INPUT -i eth0 -j limit-1185 --A INPUT -i eth0 -j limit-1186 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1188 --A INPUT -i eth0 -j limit-1189 --A INPUT -i eth0 -j limit-1190 --A INPUT -i eth0 -j limit-1191 --A INPUT -i eth0 -j limit-1192 --A INPUT -i eth0 -j limit-1193 --A INPUT -i eth0 -j limit-1194 --A INPUT -i eth0 -j limit-1195 --A INPUT -i eth0 -j limit-1196 --A INPUT -i eth0 -j limit-1197 --A INPUT -i eth0 -j limit-1198 --A INPUT -i eth0 -j limit-1199 --A INPUT -i eth0 -j limit-1200 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1202 --A INPUT -i eth0 -j limit-1203 --A INPUT -i eth0 -j limit-1204 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1206 --A INPUT -i eth0 -j limit-1207 --A INPUT -i eth0 -j limit-1208 --A INPUT -i eth0 -j limit-1209 --A INPUT -i eth0 -j limit-1210 --A INPUT -i eth0 -j limit-1211 --A INPUT -i eth0 -j limit-1212 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1214 --A INPUT -i eth0 -j limit-1215 --A INPUT -i eth0 -j limit-1216 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1218 --A INPUT -i eth0 -j limit-1219 --A INPUT -i eth0 -j limit-1220 --A INPUT -i eth0 -j limit-1221 --A INPUT -i eth0 -j limit-1222 --A INPUT -i eth0 -j limit-1223 --A INPUT -i eth0 -j limit-1224 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1226 --A INPUT -i eth0 -j limit-1227 --A INPUT -i eth0 -j limit-1228 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1230 --A INPUT -i eth0 -j limit-1231 --A INPUT -i eth0 -j limit-1232 --A INPUT -i eth0 -j limit-1233 --A INPUT -i eth0 -j limit-1234 --A INPUT -i eth0 -j limit-1235 --A INPUT -i eth0 -j limit-1236 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1238 --A INPUT -i eth0 -j limit-1239 --A INPUT -i eth0 -j limit-1240 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1242 --A INPUT -i eth0 -j limit-1243 --A INPUT -i eth0 -j limit-1244 --A INPUT -i eth0 -j limit-1245 --A INPUT -i eth0 -j limit-1246 --A INPUT -i eth0 -j limit-1247 --A INPUT -i eth0 -j limit-1248 --A INPUT -i eth0 -j limit-1249 --A INPUT -i eth0 -j limit-1250 --A INPUT -i eth0 -j limit-1251 --A INPUT -i eth0 -j limit-1252 --A INPUT -i eth0 -j limit-1253 --A INPUT -i eth0 -j limit-1254 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 --A INPUT -i eth0 -j limit-1256 --A INPUT -i eth0 -j limit-1257 --A INPUT -i eth0 -j limit-1258 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-420 --A INPUT -i eth0 -j limit-1260 --A INPUT -i eth0 -j limit-1261 --A INPUT -i eth0 -j limit-1262 --A INPUT -i eth0 -j limit-1263 --A INPUT -i eth0 -j limit-1264 --A INPUT -i eth0 -j limit-1265 --A INPUT -i eth0 -j limit-1266 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-428 --A INPUT -i eth0 -j limit-1268 --A INPUT -i eth0 -j limit-1269 --A INPUT -i eth0 -j limit-1270 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-432 --A INPUT -i eth0 -j limit-1272 --A INPUT -i eth0 -j limit-1273 --A INPUT -i eth0 -j limit-1274 --A INPUT -i eth0 -j limit-1275 --A INPUT -i eth0 -j limit-1276 --A INPUT -i eth0 -j limit-1277 --A INPUT -i eth0 -j limit-1278 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-440 --A INPUT -i eth0 -j limit-1280 --A INPUT -i eth0 -j limit-1281 --A INPUT -i eth0 -j limit-1282 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-444 --A INPUT -i eth0 -j limit-1284 --A INPUT -i eth0 -j limit-1285 --A INPUT -i eth0 -j limit-1286 --A INPUT -i eth0 -j limit-1287 --A INPUT -i eth0 -j limit-1288 --A INPUT -i eth0 -j limit-1289 --A INPUT -i eth0 -j limit-1290 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 --A INPUT -i eth0 -j limit-1292 --A INPUT -i eth0 -j limit-1293 --A INPUT -i eth0 -j limit-1294 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-456 --A INPUT -i eth0 -j limit-1296 --A INPUT -i eth0 -j limit-1297 --A INPUT -i eth0 -j limit-1298 --A INPUT -i eth0 -j limit-1299 --A INPUT -i eth0 -j limit-1300 --A INPUT -i eth0 -j limit-1301 --A INPUT -i eth0 -j limit-1302 --A INPUT -i eth0 -j limit-1303 --A INPUT -i eth0 -j limit-1304 --A INPUT -i eth0 -j limit-1305 --A INPUT -i eth0 -j limit-1306 --A INPUT -i eth0 -j limit-1307 --A INPUT -i eth0 -j limit-1308 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1310 --A INPUT -i eth0 -j limit-1311 --A INPUT -i eth0 -j limit-1312 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1314 --A INPUT -i eth0 -j limit-1315 --A INPUT -i eth0 -j limit-1316 --A INPUT -i eth0 -j limit-1317 --A INPUT -i eth0 -j limit-1318 --A INPUT -i eth0 -j limit-1319 --A INPUT -i eth0 -j limit-1320 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1322 --A INPUT -i eth0 -j limit-1323 --A INPUT -i eth0 -j limit-1324 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1326 --A INPUT -i eth0 -j limit-1327 --A INPUT -i eth0 -j limit-1328 --A INPUT -i eth0 -j limit-1329 --A INPUT -i eth0 -j limit-1330 --A INPUT -i eth0 -j limit-1331 --A INPUT -i eth0 -j limit-1332 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1334 --A INPUT -i eth0 -j limit-1335 --A INPUT -i eth0 -j limit-1336 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1338 --A INPUT -i eth0 -j limit-1339 --A INPUT -i eth0 -j limit-1340 --A INPUT -i eth0 -j limit-1341 --A INPUT -i eth0 -j limit-1342 --A INPUT -i eth0 -j limit-1343 --A INPUT -i eth0 -j limit-1344 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1346 --A INPUT -i eth0 -j limit-1347 --A INPUT -i eth0 -j limit-1348 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1350 --A INPUT -i eth0 -j limit-1351 --A INPUT -i eth0 -j limit-1352 --A INPUT -i eth0 -j limit-1353 --A INPUT -i eth0 -j limit-1354 --A INPUT -i eth0 -j limit-1355 --A INPUT -i eth0 -j limit-1356 --A INPUT -i eth0 -j limit-1357 --A INPUT -i eth0 -j limit-1358 --A INPUT -i eth0 -j limit-1359 --A INPUT -i eth0 -j limit-1360 --A INPUT -i eth0 -j limit-1361 --A INPUT -i eth0 -j limit-1362 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1364 --A INPUT -i eth0 -j limit-1365 --A INPUT -i eth0 -j limit-1366 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1368 --A INPUT -i eth0 -j limit-1369 --A INPUT -i eth0 -j limit-1370 --A INPUT -i eth0 -j limit-1371 --A INPUT -i eth0 -j limit-1372 --A INPUT -i eth0 -j limit-1373 --A INPUT -i eth0 -j limit-1374 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1376 --A INPUT -i eth0 -j limit-1377 --A INPUT -i eth0 -j limit-1378 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1380 --A INPUT -i eth0 -j limit-1381 --A INPUT -i eth0 -j limit-1382 --A INPUT -i eth0 -j limit-1383 --A INPUT -i eth0 -j limit-1384 --A INPUT -i eth0 -j limit-1385 --A INPUT -i eth0 -j limit-1386 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1388 --A INPUT -i eth0 -j limit-1389 --A INPUT -i eth0 -j limit-1390 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1392 --A INPUT -i eth0 -j limit-1393 --A INPUT -i eth0 -j limit-1394 --A INPUT -i eth0 -j limit-1395 --A INPUT -i eth0 -j limit-1396 --A INPUT -i eth0 -j limit-1397 --A INPUT -i eth0 -j limit-1398 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1400 --A INPUT -i eth0 -j limit-1401 --A INPUT -i eth0 -j limit-1402 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1404 --A INPUT -i eth0 -j limit-1405 --A INPUT -i eth0 -j limit-1406 --A INPUT -i eth0 -j limit-1407 --A INPUT -i eth0 -j limit-1408 --A INPUT -i eth0 -j limit-1409 --A INPUT -i eth0 -j limit-1410 --A INPUT -i eth0 -j limit-1411 --A INPUT -i eth0 -j limit-1412 --A INPUT -i eth0 -j limit-1413 --A INPUT -i eth0 -j limit-1414 --A INPUT -i eth0 -j limit-1415 --A INPUT -i eth0 -j limit-1416 --A INPUT -i eth0 -j limit-1417 --A INPUT -i eth0 -j limit-1418 --A INPUT -i eth0 -j limit-1419 --A INPUT -i eth0 -j limit-1420 --A INPUT -i eth0 -j limit-1421 --A INPUT -i eth0 -j limit-1422 --A INPUT -i eth0 -j limit-1423 --A INPUT -i eth0 -j limit-1424 --A INPUT -i eth0 -j limit-1425 --A INPUT -i eth0 -j limit-1426 --A INPUT -i eth0 -j limit-1427 --A INPUT -i eth0 -j limit-1428 --A INPUT -i eth0 -j limit-1429 --A INPUT -i eth0 -j limit-1430 --A INPUT -i eth0 -j limit-1431 --A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set --A INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set --A INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set --A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set --A INPUT -j ACCEPT --A INPUT -j logdrop-457 --A INPUT --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT --A INPUT -j logaccept-84 --A INPUT -j logdrop-458 --A INPUT -j logpass-50 --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT --A INPUT -p tcp --sport 80 -j ACCEPT --A INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A INPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A INPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A INPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A INPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT --A INPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT --A INPUT -p esp -j ACCEPT --A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT --A INPUT -i eth0 -j ACCEPT --A INPUT -j ACCEPT --A INPUT -p icmp -j icmp-routing --A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set --A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A OUTPUT -j limit-1073 --A OUTPUT -j limit-1072 --A OUTPUT -j limit-1071 --A OUTPUT -j limit-1070 --A OUTPUT -j limit-1069 --A OUTPUT -j limit-1068 --A OUTPUT -j limit-1067 --A OUTPUT -j limit-1066 --A OUTPUT -j limit-1065 --A OUTPUT -j limit-1064 --A OUTPUT -j limit-1063 --A OUTPUT -j limit-1062 --A OUTPUT -j limit-1061 --A OUTPUT -j limit-1060 --A OUTPUT -j limit-1059 --A OUTPUT -j limit-1058 --A OUTPUT -j limit-1057 --A OUTPUT -j limit-1056 --A OUTPUT -j limit-1055 --A OUTPUT -j limit-1054 --A OUTPUT -j limit-1053 --A OUTPUT -j limit-1052 --A OUTPUT -j limit-1051 --A OUTPUT -j limit-1050 --A OUTPUT -j limit-1049 --A OUTPUT -j limit-1048 --A OUTPUT -j limit-1047 --A OUTPUT -j limit-1046 --A OUTPUT -j limit-1045 --A OUTPUT -j limit-1044 --A OUTPUT -j limit-1043 --A OUTPUT -j limit-1042 --A OUTPUT -j limit-1041 --A OUTPUT -j limit-1040 --A OUTPUT -j limit-1039 --A OUTPUT -j limit-1038 --A OUTPUT -j limit-1037 --A OUTPUT -j limit-1036 --A OUTPUT -j limit-1035 --A OUTPUT -j limit-1034 --A OUTPUT -j limit-1033 --A OUTPUT -j limit-1032 --A OUTPUT -j limit-1031 --A OUTPUT -j limit-1030 --A OUTPUT -j limit-1029 --A OUTPUT -j limit-1028 --A OUTPUT -j limit-1027 --A OUTPUT -j limit-1026 --A OUTPUT -j limit-1025 --A OUTPUT -j limit-1024 --A OUTPUT -j limit-1023 --A OUTPUT -j limit-1022 --A OUTPUT -j limit-1021 --A OUTPUT -j limit-1020 --A OUTPUT -j limit-1019 --A OUTPUT -j limit-1018 --A OUTPUT -j limit-1017 --A OUTPUT -j limit-1016 --A OUTPUT -j limit-1015 --A OUTPUT -j limit-1014 --A OUTPUT -j limit-1013 --A OUTPUT -j limit-1012 --A OUTPUT -j limit-1011 --A OUTPUT -j limit-1010 --A OUTPUT -j limit-1009 --A OUTPUT -j limit-1008 --A OUTPUT -j limit-1007 --A OUTPUT -j limit-1006 --A OUTPUT -j limit-1005 --A OUTPUT -j limit-1004 --A OUTPUT -j limit-1003 --A OUTPUT -j limit-1002 --A OUTPUT -j limit-1001 --A OUTPUT -j limit-1000 --A OUTPUT -j limit-999 --A OUTPUT -j limit-998 --A OUTPUT -j limit-997 --A OUTPUT -j limit-996 --A OUTPUT -j limit-995 --A OUTPUT -j limit-994 --A OUTPUT -j limit-993 --A OUTPUT -j limit-992 --A OUTPUT -j limit-991 --A OUTPUT -j limit-990 --A OUTPUT -j limit-989 --A OUTPUT -j limit-988 --A OUTPUT -j limit-987 --A OUTPUT -j limit-986 --A OUTPUT -j limit-985 --A OUTPUT -j limit-984 --A OUTPUT -j limit-983 --A OUTPUT -j limit-982 --A OUTPUT -j limit-981 --A OUTPUT -j limit-980 --A OUTPUT -j limit-979 --A OUTPUT -j limit-978 --A OUTPUT -j limit-977 --A OUTPUT -j limit-976 --A OUTPUT -j limit-975 --A OUTPUT -j limit-974 --A OUTPUT -j limit-973 --A OUTPUT -j limit-972 --A OUTPUT -j limit-971 --A OUTPUT -j limit-970 --A OUTPUT -j limit-969 --A OUTPUT -j limit-968 --A OUTPUT -j limit-967 --A OUTPUT -j limit-966 --A OUTPUT -j limit-965 --A OUTPUT -j limit-964 --A OUTPUT -j limit-963 --A OUTPUT -j limit-962 --A OUTPUT -j limit-961 --A OUTPUT -j limit-960 --A OUTPUT -j limit-959 --A OUTPUT -j limit-958 --A OUTPUT -j limit-957 --A OUTPUT -j limit-956 --A OUTPUT -j limit-955 --A OUTPUT -j limit-954 --A OUTPUT -j limit-953 --A OUTPUT -j limit-952 --A OUTPUT -j limit-951 --A OUTPUT -j limit-950 --A OUTPUT -j limit-949 --A OUTPUT -j limit-948 --A OUTPUT -j limit-947 --A OUTPUT -j limit-946 --A OUTPUT -j limit-945 --A OUTPUT -j limit-944 --A OUTPUT -j limit-943 --A OUTPUT -j limit-942 --A OUTPUT -j limit-941 --A OUTPUT -j limit-940 --A OUTPUT -j limit-939 --A OUTPUT -j limit-938 --A OUTPUT -j limit-937 --A OUTPUT -j limit-936 --A OUTPUT -j limit-935 --A OUTPUT -j limit-934 --A OUTPUT -j limit-933 --A OUTPUT -j limit-932 --A OUTPUT -j limit-931 --A OUTPUT -j limit-930 --A OUTPUT -j limit-929 --A OUTPUT -j limit-928 --A OUTPUT -j limit-927 --A OUTPUT -j limit-926 --A OUTPUT -j limit-925 --A OUTPUT -j limit-924 --A OUTPUT -j limit-923 --A OUTPUT -j limit-922 --A OUTPUT -j limit-921 --A OUTPUT -j limit-920 --A OUTPUT -j limit-919 --A OUTPUT -j limit-918 --A OUTPUT -j limit-917 --A OUTPUT -j limit-916 --A OUTPUT -j limit-915 --A OUTPUT -j limit-914 --A OUTPUT -j limit-913 --A OUTPUT -j limit-912 --A OUTPUT -j limit-911 --A OUTPUT -j limit-910 --A OUTPUT -j limit-909 --A OUTPUT -j limit-908 --A OUTPUT -j limit-907 --A OUTPUT -j limit-906 --A OUTPUT -j limit-905 --A OUTPUT -j limit-904 --A OUTPUT -j limit-903 --A OUTPUT -j limit-902 --A OUTPUT -j limit-901 --A OUTPUT -j limit-900 --A OUTPUT -j limit-899 --A OUTPUT -j limit-898 --A OUTPUT -j limit-897 --A OUTPUT -j limit-896 --A OUTPUT -j limit-895 --A OUTPUT -j limit-894 --A OUTPUT -j limit-893 --A OUTPUT -j limit-892 --A OUTPUT -j limit-891 --A OUTPUT -j limit-890 --A OUTPUT -j limit-889 --A OUTPUT -j limit-888 --A OUTPUT -j limit-887 --A OUTPUT -j limit-886 --A OUTPUT -j limit-885 --A OUTPUT -j limit-884 --A OUTPUT -j limit-883 --A OUTPUT -j limit-882 --A OUTPUT -j limit-881 --A OUTPUT -j limit-880 --A OUTPUT -j limit-879 --A OUTPUT -j limit-878 --A OUTPUT -j limit-877 --A OUTPUT -j limit-876 --A OUTPUT -j limit-875 --A OUTPUT -j limit-874 --A OUTPUT -j limit-873 --A OUTPUT -j limit-872 --A OUTPUT -j limit-871 --A OUTPUT -j limit-870 --A OUTPUT -j limit-869 --A OUTPUT -j limit-868 --A OUTPUT -j limit-867 --A OUTPUT -j limit-866 --A OUTPUT -j limit-865 --A OUTPUT -j limit-864 --A OUTPUT -j limit-863 --A OUTPUT -j limit-862 --A OUTPUT -j limit-861 --A OUTPUT -j limit-860 --A OUTPUT -j limit-859 --A OUTPUT -j limit-858 --A OUTPUT -j limit-857 --A OUTPUT -j limit-856 --A OUTPUT -j limit-855 --A OUTPUT -j limit-854 --A OUTPUT -j limit-853 --A OUTPUT -j limit-852 --A OUTPUT -j limit-851 --A OUTPUT -j limit-850 --A OUTPUT -j limit-849 --A OUTPUT -j limit-848 --A OUTPUT -j limit-847 --A OUTPUT -j limit-846 --A OUTPUT -j limit-845 --A OUTPUT -j limit-844 --A OUTPUT -j limit-843 --A OUTPUT -j limit-842 --A OUTPUT -j limit-841 --A OUTPUT -j limit-840 --A OUTPUT -j limit-839 --A OUTPUT -j limit-838 --A OUTPUT -j limit-837 --A OUTPUT -j limit-836 --A OUTPUT -j limit-835 --A OUTPUT -j limit-834 --A OUTPUT -j limit-833 --A OUTPUT -j limit-832 --A OUTPUT -j limit-831 --A OUTPUT -j limit-830 --A OUTPUT -j limit-829 --A OUTPUT -j limit-828 --A OUTPUT -j limit-827 --A OUTPUT -j limit-826 --A OUTPUT -j limit-825 --A OUTPUT -j limit-824 --A OUTPUT -j limit-823 --A OUTPUT -j limit-822 --A OUTPUT -j limit-821 --A OUTPUT -j limit-820 --A OUTPUT -j limit-819 --A OUTPUT -j limit-818 --A OUTPUT -j limit-817 --A OUTPUT -j limit-816 --A OUTPUT -j limit-815 --A OUTPUT -j limit-814 --A OUTPUT -j limit-813 --A OUTPUT -j limit-812 --A OUTPUT -j limit-811 --A OUTPUT -j limit-810 --A OUTPUT -j limit-809 --A OUTPUT -j limit-808 --A OUTPUT -j limit-807 --A OUTPUT -j limit-806 --A OUTPUT -j limit-805 --A OUTPUT -j limit-804 --A OUTPUT -j limit-803 --A OUTPUT -j limit-802 --A OUTPUT -j limit-801 --A OUTPUT -j limit-800 --A OUTPUT -j limit-799 --A OUTPUT -j limit-798 --A OUTPUT -j limit-797 --A OUTPUT -j limit-796 --A OUTPUT -j limit-795 --A OUTPUT -j limit-794 --A OUTPUT -j limit-793 --A OUTPUT -j limit-792 --A OUTPUT -j limit-791 --A OUTPUT -j limit-790 --A OUTPUT -j limit-789 --A OUTPUT -j limit-788 --A OUTPUT -j limit-787 --A OUTPUT -j limit-786 --A OUTPUT -j limit-785 --A OUTPUT -j limit-784 --A OUTPUT -j limit-783 --A OUTPUT -j limit-782 --A OUTPUT -j limit-781 --A OUTPUT -j limit-780 --A OUTPUT -j limit-779 --A OUTPUT -j limit-778 --A OUTPUT -j limit-777 --A OUTPUT -j limit-776 --A OUTPUT -j limit-775 --A OUTPUT -j limit-774 --A OUTPUT -j limit-773 --A OUTPUT -j limit-772 --A OUTPUT -j limit-771 --A OUTPUT -j limit-770 --A OUTPUT -j limit-769 --A OUTPUT -j limit-768 --A OUTPUT -j limit-767 --A OUTPUT -j limit-766 --A OUTPUT -j limit-765 --A OUTPUT -j limit-764 --A OUTPUT -j limit-763 --A OUTPUT -j limit-762 --A OUTPUT -j limit-761 --A OUTPUT -j limit-760 --A OUTPUT -j limit-759 --A OUTPUT -j limit-758 --A OUTPUT -j limit-757 --A OUTPUT -j limit-756 --A OUTPUT -j limit-755 --A OUTPUT -j limit-754 --A OUTPUT -j limit-753 --A OUTPUT -j limit-752 --A OUTPUT -j limit-751 --A OUTPUT -j limit-750 --A OUTPUT -j limit-749 --A OUTPUT -j limit-748 --A OUTPUT -j limit-747 --A OUTPUT -j limit-746 --A OUTPUT -j limit-745 --A OUTPUT -j limit-744 --A OUTPUT -j limit-743 --A OUTPUT -j limit-742 --A OUTPUT -j limit-741 --A OUTPUT -j limit-740 --A OUTPUT -j limit-739 --A OUTPUT -j limit-738 --A OUTPUT -j limit-737 --A OUTPUT -j limit-736 --A OUTPUT -j limit-735 --A OUTPUT -j limit-734 --A OUTPUT -j limit-733 --A OUTPUT -j limit-732 --A OUTPUT -j limit-731 --A OUTPUT -j limit-730 --A OUTPUT -j limit-729 --A OUTPUT -j limit-728 --A OUTPUT -j limit-727 --A OUTPUT -j limit-726 --A OUTPUT -j limit-725 --A OUTPUT -j limit-724 --A OUTPUT -j limit-723 --A OUTPUT -j limit-722 --A OUTPUT -j limit-721 --A OUTPUT -j limit-720 --A OUTPUT -j limit-719 --A OUTPUT -j limit-718 --A OUTPUT -j limit-717 --A OUTPUT -j limit-716 --A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT --A OUTPUT -o lo -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT --A OUTPUT -j logaccept-0 --A OUTPUT -j logpass-0 --A OUTPUT -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -d 172.16.0.0/16 --A OUTPUT -d 172.16.0.0/16 -j logaccept-1 --A OUTPUT -d 172.16.0.0/16 -j logpass-1 --A OUTPUT -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -d 172.16.0.0/16 --A OUTPUT -d 172.16.2.0/16 --A OUTPUT -d 172.16.0.0/16 -j logaccept-2 --A OUTPUT -d 172.16.2.0/16 -j logaccept-2 --A OUTPUT -d 172.16.0.0/16 -j logpass-2 --A OUTPUT -d 172.16.2.0/16 -j logpass-2 --A OUTPUT -s 10.0.0.1 -j ACCEPT --A OUTPUT -s 10.0.0.1 --A OUTPUT -s 10.0.0.1 -j logaccept-3 --A OUTPUT -s 10.0.0.1 -j logpass-3 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 --A OUTPUT -s 10.0.0.1 -j ACCEPT --A OUTPUT -s 10.0.0.2 -j ACCEPT --A OUTPUT -s 10.0.0.1 --A OUTPUT -s 10.0.0.2 --A OUTPUT -s 10.0.0.1 -j logaccept-6 --A OUTPUT -s 10.0.0.2 -j logaccept-6 --A OUTPUT -s 10.0.0.1 -j logpass-6 --A OUTPUT -s 10.0.0.2 -j logpass-6 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j logpass-9 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-0 --A OUTPUT --A OUTPUT -j logreject-0 --A OUTPUT -j logtarpit-0 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-0 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-2 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-3 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-4 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-5 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-6 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-7 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-8 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-9 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-10 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-11 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-12 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-13 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-14 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-15 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-16 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-17 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-18 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-19 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-20 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-21 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-22 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-23 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-24 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-25 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-26 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-27 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-28 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-29 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-30 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-31 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-32 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-33 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-34 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-35 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-36 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-37 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-38 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-39 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-43 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-47 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-55 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-59 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-69 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-73 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-77 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-85 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-89 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-97 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-101 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-105 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-109 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-113 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-117 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-127 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-131 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-135 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-139 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-143 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-147 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-151 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-155 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-159 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-163 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-167 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-177 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-181 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-185 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-189 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-193 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-197 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-201 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-205 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-209 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-217 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-221 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-235 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-239 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-247 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-251 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-259 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-263 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-271 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-275 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-289 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-293 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-301 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-305 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-313 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-317 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-325 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-329 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-358 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-359 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-360 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-361 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-362 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-363 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-364 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-365 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-366 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-367 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-368 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-369 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-370 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-371 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-372 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-373 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-374 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-375 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-376 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-378 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-379 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-380 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-138 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-382 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-383 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-384 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-385 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-386 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-387 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-388 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-390 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-391 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-392 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-394 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-395 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-396 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-397 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-398 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-399 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-400 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-402 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-403 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-404 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-406 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-407 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-408 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-409 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-410 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-411 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-412 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-414 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-415 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-416 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-174 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-418 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-419 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-420 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-421 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-422 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-423 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-424 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-425 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-426 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-427 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-428 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-429 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-430 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-432 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-433 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-434 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-436 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-437 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-438 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-439 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-440 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-441 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-442 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-444 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-445 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-446 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-448 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-449 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-450 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-451 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-452 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-453 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-454 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-456 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-457 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-458 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-460 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-461 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-462 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-463 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-464 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-465 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-466 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-468 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-469 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-470 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-472 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-473 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-474 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-475 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-476 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-477 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-478 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-479 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-480 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-481 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-482 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-483 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-484 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-486 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-487 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-488 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-490 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-491 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-492 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-493 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-494 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-495 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-496 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-498 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-499 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-500 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-502 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-503 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-504 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-505 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-506 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-507 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-508 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-510 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-511 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-512 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-514 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-515 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-516 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-517 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-518 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-519 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-520 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-522 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-523 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-524 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-526 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-527 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-528 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-529 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-530 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-531 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-532 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-533 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-534 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-535 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-536 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-537 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-538 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-540 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-541 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-542 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-192 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-544 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-545 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-546 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-547 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-548 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-549 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-550 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-552 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-553 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-554 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-556 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-557 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-558 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-559 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-560 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-561 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-562 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-564 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-565 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-566 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-568 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-569 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-570 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-571 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-572 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-573 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-574 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-576 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-577 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-578 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-228 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-580 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-581 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-582 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-583 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-584 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-585 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-586 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-587 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-588 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-589 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-590 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-591 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-592 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-594 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-595 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-596 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-598 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-599 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-600 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-601 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-602 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-603 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-604 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-606 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-607 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-608 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-610 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-611 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-612 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-613 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-614 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-615 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-616 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-618 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-619 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-620 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-622 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-623 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-624 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-625 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-626 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-627 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-628 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-630 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-631 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-632 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-634 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-635 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-636 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-637 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-638 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-639 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-640 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-641 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-642 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-643 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-644 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-645 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-646 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-648 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-649 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-650 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-652 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-653 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-654 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-655 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-656 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-657 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-658 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-660 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-661 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-662 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-664 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-665 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-666 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-667 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-668 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-669 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-670 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-672 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-673 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-674 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-676 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-677 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-678 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-679 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-680 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-681 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-682 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-684 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-685 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-686 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-688 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-689 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-690 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-691 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-692 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-693 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-694 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-695 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-696 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-697 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-698 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-699 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-700 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-701 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-702 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-703 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-704 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-705 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-706 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-707 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-708 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-709 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-710 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-711 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-712 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-713 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-714 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-715 --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-0 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-1 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-2 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-3 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-4 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-5 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-6 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-7 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-8 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-9 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-10 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-11 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-12 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-13 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-14 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-15 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-16 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-17 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-18 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-19 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-20 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-21 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-22 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-23 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-24 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-25 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-26 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-27 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-28 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-29 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-30 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-31 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-32 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-33 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-34 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-35 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-36 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-37 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-38 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-39 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-40 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-41 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-42 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-43 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-44 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-45 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-46 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-47 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-48 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-49 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-50 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-51 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-52 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-53 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-54 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-55 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-56 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-57 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-58 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-59 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-60 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-61 --A OUTPUT -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set --A OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set --A OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set --A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set --A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-457 --A OUTPUT --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT --A OUTPUT -j logaccept-84 --A OUTPUT -j logdrop-458 --A OUTPUT -j logpass-50 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT --A OUTPUT -p tcp --dport 80 -j ACCEPT --A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT --A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT --A OUTPUT -p esp -j ACCEPT --A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT --A OUTPUT -p icmp -j icmp-routing --A address-0 -d 172.16.0.0/16 -j ACCEPT --A address-1 -d 172.16.0.0/16 --A address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 --A address-100 -d 172.16.0.0/16 -j ACCEPT --A address-100 -d 172.16.2.0/16 -j ACCEPT --A address-101 -d 172.16.0.0/16 --A address-101 -d 172.16.2.0/16 --A address-102 -d 172.16.0.0/16 -j logaccept-56 --A address-102 -d 172.16.2.0/16 -j logaccept-56 --A address-103 -d 172.16.0.0/16 -j logpass-45 --A address-103 -d 172.16.2.0/16 -j logpass-45 --A address-104 -s 10.0.0.1 -j ACCEPT --A address-105 -s 10.0.0.1 --A address-106 -s 10.0.0.1 -j logaccept-57 --A address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-109 -s 10.0.0.1 -d 172.16.0.0/16 --A address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 --A address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-113 -s 10.0.0.1 -d 172.16.0.0/16 --A address-113 -s 10.0.0.1 -d 172.16.2.0/16 --A address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 --A address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 --A address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-46 --A address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-46 --A address-116 -s 10.0.0.1 -j ACCEPT --A address-116 -s 10.0.0.2 -j ACCEPT --A address-117 -s 10.0.0.1 --A address-117 -s 10.0.0.2 --A address-118 -s 10.0.0.1 -j logaccept-60 --A address-118 -s 10.0.0.2 -j logaccept-60 --A address-119 -s 10.0.0.1 -j logpass-47 --A address-119 -s 10.0.0.2 -j logpass-47 --A address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-121 -s 10.0.0.1 -d 172.16.0.0/16 --A address-121 -s 10.0.0.2 -d 172.16.0.0/16 --A address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 --A address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 --A address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-48 --A address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-48 --A address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-125 -s 10.0.0.1 -d 172.16.0.0/16 --A address-125 -s 10.0.0.1 -d 172.16.2.0/16 --A address-125 -s 10.0.0.2 -d 172.16.0.0/16 --A address-125 -s 10.0.0.2 -d 172.16.2.0/16 --A address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 --A address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 --A address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 --A address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 --A address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-49 --A address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-49 --A address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-49 --A address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-49 --A address-13 -s 10.0.0.1 -d 172.16.0.0/16 --A address-13 -s 10.0.0.1 -d 172.16.2.0/16 --A address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 --A address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 --A address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 --A address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-12 --A address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-17 -s 10.0.0.1 -d 172.16.0.0/16 --A address-17 -s 10.0.0.2 -d 172.16.0.0/16 --A address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 --A address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 --A address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-14 --A address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-14 --A address-2 -d 172.16.0.0/16 -j logaccept-10 --A address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-21 -s 10.0.0.1 -d 172.16.0.0/16 --A address-21 -s 10.0.0.1 -d 172.16.2.0/16 --A address-21 -s 10.0.0.2 -d 172.16.0.0/16 --A address-21 -s 10.0.0.2 -d 172.16.2.0/16 --A address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 --A address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 --A address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 --A address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 --A address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 --A address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 --A address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-15 --A address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-15 --A address-24 -d 172.16.0.0/16 -j ACCEPT --A address-25 -d 172.16.0.0/16 --A address-26 -d 172.16.0.0/16 -j logaccept-28 --A address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-28 -d 172.16.0.0/16 -j ACCEPT --A address-28 -d 172.16.2.0/16 -j ACCEPT --A address-29 -d 172.16.0.0/16 --A address-29 -d 172.16.2.0/16 --A address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-30 -d 172.16.0.0/16 -j logaccept-29 --A address-30 -d 172.16.2.0/16 -j logaccept-29 --A address-31 -d 172.16.0.0/16 -j logpass-25 --A address-31 -d 172.16.2.0/16 -j logpass-25 --A address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-33 -s 10.0.0.1 -d 172.16.0.0/16 --A address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 --A address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-37 -s 10.0.0.1 -d 172.16.0.0/16 --A address-37 -s 10.0.0.1 -d 172.16.2.0/16 --A address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 --A address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 --A address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-26 --A address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-26 --A address-4 -d 172.16.0.0/16 -j ACCEPT --A address-4 -d 172.16.2.0/16 -j ACCEPT --A address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-41 -s 10.0.0.1 -d 172.16.0.0/16 --A address-41 -s 10.0.0.2 -d 172.16.0.0/16 --A address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 --A address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 --A address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 --A address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 --A address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-45 -s 10.0.0.1 -d 172.16.0.0/16 --A address-45 -s 10.0.0.1 -d 172.16.2.0/16 --A address-45 -s 10.0.0.2 -d 172.16.0.0/16 --A address-45 -s 10.0.0.2 -d 172.16.2.0/16 --A address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 --A address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 --A address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 --A address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 --A address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-29 --A address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-29 --A address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-29 --A address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-29 --A address-48 -s 10.0.0.1 -j ACCEPT --A address-49 -s 10.0.0.1 --A address-5 -d 172.16.0.0/16 --A address-5 -d 172.16.2.0/16 --A address-50 -s 10.0.0.1 -j logaccept-39 --A address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-53 -s 10.0.0.1 -d 172.16.0.0/16 --A address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 --A address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-57 -s 10.0.0.1 -d 172.16.0.0/16 --A address-57 -s 10.0.0.1 -d 172.16.2.0/16 --A address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 --A address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 --A address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-33 --A address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-33 --A address-6 -d 172.16.0.0/16 -j logaccept-11 --A address-6 -d 172.16.2.0/16 -j logaccept-11 --A address-60 -s 10.0.0.1 -j ACCEPT --A address-60 -s 10.0.0.2 -j ACCEPT --A address-61 -s 10.0.0.1 --A address-61 -s 10.0.0.2 --A address-62 -s 10.0.0.1 -j logaccept-42 --A address-62 -s 10.0.0.2 -j logaccept-42 --A address-63 -s 10.0.0.1 -j logpass-34 --A address-63 -s 10.0.0.2 -j logpass-34 --A address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-65 -s 10.0.0.1 -d 172.16.0.0/16 --A address-65 -s 10.0.0.2 -d 172.16.0.0/16 --A address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 --A address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 --A address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 --A address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 --A address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-69 -s 10.0.0.1 -d 172.16.0.0/16 --A address-69 -s 10.0.0.1 -d 172.16.2.0/16 --A address-69 -s 10.0.0.2 -d 172.16.0.0/16 --A address-69 -s 10.0.0.2 -d 172.16.2.0/16 --A address-7 -d 172.16.0.0/16 -j logpass-10 --A address-7 -d 172.16.2.0/16 -j logpass-10 --A address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 --A address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 --A address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 --A address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 --A address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-36 --A address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-36 --A address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-36 --A address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-36 --A address-72 -s 10.0.0.1 -j ACCEPT --A address-73 -s 10.0.0.1 --A address-74 -s 10.0.0.1 -j logaccept-48 --A address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-77 -s 10.0.0.1 -d 172.16.0.0/16 --A address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 --A address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-81 -s 10.0.0.1 -d 172.16.0.0/16 --A address-81 -s 10.0.0.1 -d 172.16.2.0/16 --A address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 --A address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 --A address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 --A address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-40 --A address-84 -s 10.0.0.1 -j ACCEPT --A address-84 -s 10.0.0.2 -j ACCEPT --A address-85 -s 10.0.0.1 --A address-85 -s 10.0.0.2 --A address-86 -s 10.0.0.1 -j logaccept-51 --A address-86 -s 10.0.0.2 -j logaccept-51 --A address-87 -s 10.0.0.1 -j logpass-41 --A address-87 -s 10.0.0.2 -j logpass-41 --A address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-89 -s 10.0.0.1 -d 172.16.0.0/16 --A address-89 -s 10.0.0.2 -d 172.16.0.0/16 --A address-9 -s 10.0.0.1 -d 172.16.0.0/16 --A address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 --A address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 --A address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-42 --A address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-42 --A address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-93 -s 10.0.0.1 -d 172.16.0.0/16 --A address-93 -s 10.0.0.1 -d 172.16.2.0/16 --A address-93 -s 10.0.0.2 -d 172.16.0.0/16 --A address-93 -s 10.0.0.2 -d 172.16.2.0/16 --A address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 --A address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 --A address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 --A address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 --A address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-43 --A address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-43 --A address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-43 --A address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-43 --A address-96 -d 172.16.0.0/16 -j ACCEPT --A address-97 -d 172.16.0.0/16 --A address-98 -d 172.16.0.0/16 -j logaccept-55 --A address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A icmp-routing -p icmp --icmp-type 3 -j ACCEPT --A icmp-routing -p icmp --icmp-type 11 -j ACCEPT --A icmp-routing -p icmp --icmp-type 12 -j ACCEPT --A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 --A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 --A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set --A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 --A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-100 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-100 -j ACCEPT --A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1007 -m limit --limit 1/second -j LOG --A limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-101 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1019 -m limit --limit 1/second -j LOG --A limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1029 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1031 -m limit --limit 1/second -j LOG --A limit-1032 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1033 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-104 -m limit --limit 1/second -j LOG --A limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1040 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1041 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1043 -m limit --limit 1/second -j LOG --A limit-1044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1045 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1046 -j RETURN --A limit-1046 -m limit --limit 1/second -j LOG --A limit-1046 -j DROP --A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1047 -j RETURN --A limit-1047 -m limit --limit 1/second -j LOG --A limit-1047 -j DROP --A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j RETURN --A limit-1048 -m limit --limit 1/second -j LOG --A limit-1048 -j DROP --A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1049 -j RETURN --A limit-1049 -m limit --limit 1/second -j LOG --A limit-1049 -j DROP --A limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1050 -j RETURN --A limit-1050 -m limit --limit 1/second -j LOG --A limit-1050 -j DROP --A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1051 -j RETURN --A limit-1051 -m limit --limit 1/second -j LOG --A limit-1051 -j DROP --A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j RETURN --A limit-1052 -m limit --limit 1/second -j LOG --A limit-1052 -j DROP --A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1053 -j RETURN --A limit-1053 -m limit --limit 1/second -j LOG --A limit-1053 -j DROP --A limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1054 -j RETURN --A limit-1054 -j DROP --A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1055 -j RETURN --A limit-1055 -j DROP --A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j RETURN --A limit-1056 -j DROP --A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1057 -j RETURN --A limit-1057 -j DROP --A limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1058 -j RETURN --A limit-1058 -j DROP --A limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1059 -j RETURN --A limit-1059 -j DROP --A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j RETURN --A limit-1060 -j DROP --A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1061 -j RETURN --A limit-1061 -j DROP --A limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1062 -j RETURN --A limit-1062 -m limit --limit 1/second -j LOG --A limit-1062 -j DROP --A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1063 -j RETURN --A limit-1063 -m limit --limit 1/second -j LOG --A limit-1063 -j DROP --A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j RETURN --A limit-1064 -m limit --limit 1/second -j LOG --A limit-1064 -j DROP --A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1065 -j RETURN --A limit-1065 -m limit --limit 1/second -j LOG --A limit-1065 -j DROP --A limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1066 -j RETURN --A limit-1066 -j DROP --A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1067 -j RETURN --A limit-1067 -j DROP --A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j RETURN --A limit-1068 -j DROP --A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1069 -j RETURN --A limit-1069 -j DROP --A limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1070 -j RETURN --A limit-1070 -j DROP --A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1071 -j RETURN --A limit-1071 -j DROP --A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j RETURN --A limit-1072 -j DROP --A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1073 -j RETURN --A limit-1073 -j DROP --A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-343 --A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-344 --A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --set --A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-345 --A limit-1076 -m limit --limit 1/second -j LOG --A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-346 --A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-347 --A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-348 --A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set --A limit-108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-108 -j ACCEPT --A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-349 --A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-350 --A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set --A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-351 --A limit-1082 -m limit --limit 1/second -j LOG --A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-352 --A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-353 --A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-354 --A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set --A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-355 --A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-356 --A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-357 --A limit-1088 -m limit --limit 1/second -j LOG --A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-358 --A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-109 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-359 --A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-360 --A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-361 --A limit-1092 -j ACCEPT --A limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-363 --A limit-1094 -m limit --limit 1/second -j LOG --A limit-1094 -j ACCEPT --A limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-364 --A limit-1095 -m limit --limit 1/second -j LOG --A limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-365 --A limit-1096 -j ACCEPT --A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-367 --A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-368 --A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 --A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set --A limit-110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-110 -m limit --limit 1/second -j LOG --A limit-110 -j ACCEPT --A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-369 --A limit-1100 -m limit --limit 1/second -j LOG --A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-370 --A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-371 --A limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-372 --A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 --A limit-1104 -j ACCEPT --A limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 --A limit-1106 -m limit --limit 1/second -j LOG --A limit-1106 -j ACCEPT --A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-376 --A limit-1107 -m limit --limit 1/second -j LOG --A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-377 --A limit-1108 -j ACCEPT --A limit-111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-111 -m limit --limit 1/second -j LOG --A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-379 --A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-380 --A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-381 --A limit-1112 -m limit --limit 1/second -j LOG --A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-382 --A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-383 --A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-384 --A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-385 --A limit-1116 -j ACCEPT --A limit-1118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-387 --A limit-1118 -m limit --limit 1/second -j LOG --A limit-1118 -j ACCEPT --A limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-388 --A limit-1119 -m limit --limit 1/second -j LOG --A limit-112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-112 -j ACCEPT --A limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-389 --A limit-1120 -j ACCEPT --A limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-391 --A limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-392 --A limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-393 --A limit-1124 -m limit --limit 1/second -j LOG --A limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-394 --A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-395 --A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-396 --A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 --A limit-1128 -j ACCEPT --A limit-113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 --A limit-1130 -m limit --limit 1/second -j LOG --A limit-1130 -j ACCEPT --A limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-400 --A limit-1131 -m limit --limit 1/second -j LOG --A limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-401 --A limit-1132 -j ACCEPT --A limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1135 -m recent --name limit-1135 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1135 -m recent --name limit-1135 --rsource --mask 255.255.255.255 --set --A limit-1136 -m recent --name limit-1136 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1136 -m limit --limit 1/second -j LOG --A limit-1136 -m recent --name limit-1136 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1137 -m recent --name limit-1137 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1137 -m recent --name limit-1137 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1138 -m recent --name limit-1138 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1138 -m recent --name limit-1138 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1139 -m recent --name limit-1139 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1139 -m recent --name limit-1139 --rsource --mask 255.255.255.255 --set --A limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1140 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1140 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1141 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1141 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1142 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1142 -m limit --limit 1/second -j LOG --A limit-1142 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1143 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1143 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1144 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1144 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1145 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1145 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1146 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1146 -j ACCEPT --A limit-1148 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1148 -m limit --limit 1/second -j LOG --A limit-1148 -j ACCEPT --A limit-1149 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1149 -m limit --limit 1/second -j LOG --A limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --set --A limit-1150 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1150 -j ACCEPT --A limit-1152 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1152 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1153 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1153 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1154 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1154 -m limit --limit 1/second -j LOG --A limit-1154 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1155 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1155 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1156 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1156 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1157 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1157 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1158 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1158 -j ACCEPT --A limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-116 -m limit --limit 1/second -j LOG --A limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1160 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1160 -m limit --limit 1/second -j LOG --A limit-1160 -j ACCEPT --A limit-1161 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1161 -m limit --limit 1/second -j LOG --A limit-1162 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1162 -j ACCEPT --A limit-1164 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1164 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1165 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1165 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1166 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1166 -m limit --limit 1/second -j LOG --A limit-1166 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1167 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1167 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1168 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1168 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1169 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1169 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1170 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1170 -j ACCEPT --A limit-1172 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1172 -m limit --limit 1/second -j LOG --A limit-1172 -j ACCEPT --A limit-1173 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1173 -m limit --limit 1/second -j LOG --A limit-1174 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1174 -j ACCEPT --A limit-1176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1177 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1178 -m limit --limit 1/second -j LOG --A limit-1178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1180 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1180 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1181 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1181 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1182 -j ACCEPT --A limit-1184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1184 -m limit --limit 1/second -j LOG --A limit-1184 -j ACCEPT --A limit-1185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1185 -m limit --limit 1/second -j LOG --A limit-1186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1186 -j ACCEPT --A limit-1188 -m recent --name limit-1188 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1188 -m recent --name limit-1188 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1189 -m recent --name limit-1189 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1189 -m recent --name limit-1189 --rsource --mask 255.255.255.255 --set --A limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --set --A limit-1190 -m recent --name limit-1190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1190 -m limit --limit 1/second -j LOG --A limit-1190 -m recent --name limit-1190 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1191 -m recent --name limit-1191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1191 -m recent --name limit-1191 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1192 -m recent --name limit-1192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1192 -m recent --name limit-1192 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1193 -m recent --name limit-1193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1193 -m recent --name limit-1193 --rsource --mask 255.255.255.255 --set --A limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1196 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1196 -m limit --limit 1/second -j LOG --A limit-1196 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1197 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1197 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1198 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1198 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 --A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1200 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1200 -j ACCEPT --A limit-1202 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1202 -m limit --limit 1/second -j LOG --A limit-1202 -j ACCEPT --A limit-1203 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1203 -m limit --limit 1/second -j LOG --A limit-1204 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1204 -j ACCEPT --A limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1207 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1207 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1208 -m limit --limit 1/second -j LOG --A limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1212 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1212 -j ACCEPT --A limit-1214 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1214 -m limit --limit 1/second -j LOG --A limit-1214 -j ACCEPT --A limit-1215 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1215 -m limit --limit 1/second -j LOG --A limit-1216 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1216 -j ACCEPT --A limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-122 -m limit --limit 1/second -j LOG --A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1220 -m limit --limit 1/second -j LOG --A limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1224 -j ACCEPT --A limit-1226 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1226 -m limit --limit 1/second -j LOG --A limit-1226 -j ACCEPT --A limit-1227 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1227 -m limit --limit 1/second -j LOG --A limit-1228 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1228 -j ACCEPT --A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1230 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1230 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1231 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1231 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1232 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1232 -m limit --limit 1/second -j LOG --A limit-1232 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1233 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1233 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1234 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1234 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1235 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1235 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1236 -j ACCEPT --A limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1238 -m limit --limit 1/second -j LOG --A limit-1238 -j ACCEPT --A limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1239 -m limit --limit 1/second -j LOG --A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1240 -j ACCEPT --A limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 --A limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 --A limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --set --A limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 --A limit-1244 -m limit --limit 1/second -j LOG --A limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 --A limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 --A limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 --A limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --set --A limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 --A limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-410 --A limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-411 --A limit-1250 -m limit --limit 1/second -j LOG --A limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-412 --A limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-413 --A limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-414 --A limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 --A limit-1254 -j ACCEPT --A limit-1256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 --A limit-1256 -m limit --limit 1/second -j LOG --A limit-1256 -j ACCEPT --A limit-1257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 --A limit-1257 -m limit --limit 1/second -j LOG --A limit-1258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 --A limit-1258 -j ACCEPT --A limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-126 -j ACCEPT --A limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-421 --A limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-422 --A limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-423 --A limit-1262 -m limit --limit 1/second -j LOG --A limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-424 --A limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-425 --A limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-426 --A limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1266 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-427 --A limit-1266 -j ACCEPT --A limit-1268 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-429 --A limit-1268 -m limit --limit 1/second -j LOG --A limit-1268 -j ACCEPT --A limit-1269 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 --A limit-1269 -m limit --limit 1/second -j LOG --A limit-127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1270 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 --A limit-1270 -j ACCEPT --A limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-433 --A limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-434 --A limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-435 --A limit-1274 -m limit --limit 1/second -j LOG --A limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-436 --A limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-437 --A limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-438 --A limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 --A limit-1278 -j ACCEPT --A limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-128 -m limit --limit 1/second -j LOG --A limit-128 -j ACCEPT --A limit-1280 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-441 --A limit-1280 -m limit --limit 1/second -j LOG --A limit-1280 -j ACCEPT --A limit-1281 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-442 --A limit-1281 -m limit --limit 1/second -j LOG --A limit-1282 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-443 --A limit-1282 -j ACCEPT --A limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 --A limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 --A limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 --A limit-1286 -m limit --limit 1/second -j LOG --A limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 --A limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 --A limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-450 --A limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-129 -m limit --limit 1/second -j LOG --A limit-1290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 --A limit-1290 -j ACCEPT --A limit-1292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 --A limit-1292 -m limit --limit 1/second -j LOG --A limit-1292 -j ACCEPT --A limit-1293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 --A limit-1293 -m limit --limit 1/second -j LOG --A limit-1294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 --A limit-1294 -j ACCEPT --A limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1297 -m recent --name limit-1297 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1297 -m recent --name limit-1297 --rsource --mask 255.255.255.255 --set --A limit-1298 -m recent --name limit-1298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1298 -m limit --limit 1/second -j LOG --A limit-1298 -m recent --name limit-1298 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 --A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-130 -j ACCEPT --A limit-1300 -m recent --name limit-1300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1300 -m recent --name limit-1300 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1301 -m recent --name limit-1301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1301 -m recent --name limit-1301 --rsource --mask 255.255.255.255 --set --A limit-1302 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1302 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1303 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1303 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1304 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1304 -m limit --limit 1/second -j LOG --A limit-1304 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1305 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1305 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1306 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1306 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1307 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1307 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1308 -j ACCEPT --A limit-131 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1310 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1310 -m limit --limit 1/second -j LOG --A limit-1310 -j ACCEPT --A limit-1311 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1311 -m limit --limit 1/second -j LOG --A limit-1312 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1312 -j ACCEPT --A limit-1314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1315 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1316 -m limit --limit 1/second -j LOG --A limit-1316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1317 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1319 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1320 -j ACCEPT --A limit-1322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1322 -m limit --limit 1/second -j LOG --A limit-1322 -j ACCEPT --A limit-1323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1323 -m limit --limit 1/second -j LOG --A limit-1324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1324 -j ACCEPT --A limit-1326 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1326 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1327 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1327 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1328 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1328 -m limit --limit 1/second -j LOG --A limit-1328 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1329 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1329 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1331 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1332 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1332 -j ACCEPT --A limit-1334 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1334 -m limit --limit 1/second -j LOG --A limit-1334 -j ACCEPT --A limit-1335 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1335 -m limit --limit 1/second -j LOG --A limit-1336 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1336 -j ACCEPT --A limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-134 -m limit --limit 1/second -j LOG --A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1340 -m limit --limit 1/second -j LOG --A limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1343 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1343 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1344 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1344 -j ACCEPT --A limit-1346 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1346 -m limit --limit 1/second -j LOG --A limit-1346 -j ACCEPT --A limit-1347 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1347 -m limit --limit 1/second -j LOG --A limit-1348 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1348 -j ACCEPT --A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set --A limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1352 -m limit --limit 1/second -j LOG --A limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --set --A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1358 -m limit --limit 1/second -j LOG --A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1362 -j ACCEPT --A limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1364 -m limit --limit 1/second -j LOG --A limit-1364 -j ACCEPT --A limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1365 -m limit --limit 1/second -j LOG --A limit-1366 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1366 -j ACCEPT --A limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1370 -m limit --limit 1/second -j LOG --A limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1374 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1374 -j ACCEPT --A limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1376 -m limit --limit 1/second -j LOG --A limit-1376 -j ACCEPT --A limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1377 -m limit --limit 1/second -j LOG --A limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1378 -j ACCEPT --A limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-138 -j ACCEPT --A limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1382 -m limit --limit 1/second -j LOG --A limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1386 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1386 -j ACCEPT --A limit-1388 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1388 -m limit --limit 1/second -j LOG --A limit-1388 -j ACCEPT --A limit-1389 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1389 -m limit --limit 1/second -j LOG --A limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1390 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1390 -j ACCEPT --A limit-1392 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1392 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1393 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1393 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1394 -m limit --limit 1/second -j LOG --A limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1398 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1398 -j ACCEPT --A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 --A limit-14 -m limit --limit 1/second -j LOG --A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-140 -m limit --limit 1/second -j LOG --A limit-140 -j ACCEPT --A limit-1400 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1400 -m limit --limit 1/second -j LOG --A limit-1400 -j ACCEPT --A limit-1401 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1401 -m limit --limit 1/second -j LOG --A limit-1402 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1402 -j ACCEPT --A limit-1404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1404 -j ACCEPT --A limit-1404 -m limit --limit 1/second -j LOG --A limit-1404 -j DROP --A limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1405 -j RETURN --A limit-1405 -m limit --limit 1/second -j LOG --A limit-1405 -j DROP --A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1406 -j logaccept-77 --A limit-1406 -m limit --limit 1/second -j LOG --A limit-1406 -j DROP --A limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1407 -j ACCEPT --A limit-1407 -m limit --limit 1/second -j LOG --A limit-1407 -j DROP --A limit-1408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1408 -j ACCEPT --A limit-1408 -m limit --limit 1/second -j LOG --A limit-1408 -j DROP --A limit-1409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1409 -j RETURN --A limit-1409 -m limit --limit 1/second -j LOG --A limit-1409 -j DROP --A limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-141 -m limit --limit 1/second -j LOG --A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1410 -j logaccept-78 --A limit-1410 -m limit --limit 1/second -j LOG --A limit-1410 -j DROP --A limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1411 -j ACCEPT --A limit-1411 -m limit --limit 1/second -j LOG --A limit-1411 -j DROP --A limit-1412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1412 -j ACCEPT --A limit-1412 -j DROP --A limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1413 -j RETURN --A limit-1413 -j DROP --A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1414 -j logaccept-79 --A limit-1414 -j DROP --A limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1415 -j ACCEPT --A limit-1415 -j DROP --A limit-1416 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1416 -j ACCEPT --A limit-1416 -j DROP --A limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1417 -j RETURN --A limit-1417 -j DROP --A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1418 -j logaccept-80 --A limit-1418 -j DROP --A limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1419 -j ACCEPT --A limit-1419 -j DROP --A limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-142 -j ACCEPT --A limit-1420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1420 -j ACCEPT --A limit-1420 -m limit --limit 1/second -j LOG --A limit-1420 -j DROP --A limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1421 -j RETURN --A limit-1421 -m limit --limit 1/second -j LOG --A limit-1421 -j DROP --A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1422 -j logaccept-81 --A limit-1422 -m limit --limit 1/second -j LOG --A limit-1422 -j DROP --A limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1423 -j ACCEPT --A limit-1423 -m limit --limit 1/second -j LOG --A limit-1423 -j DROP --A limit-1424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1424 -j ACCEPT --A limit-1424 -j DROP --A limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1425 -j RETURN --A limit-1425 -j DROP --A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1426 -j logaccept-82 --A limit-1426 -j DROP --A limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1427 -j ACCEPT --A limit-1427 -j DROP --A limit-1428 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1428 -j ACCEPT --A limit-1428 -j DROP --A limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1429 -j RETURN --A limit-1429 -j DROP --A limit-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1430 -j logaccept-83 --A limit-1430 -j DROP --A limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1431 -j ACCEPT --A limit-1431 -j DROP --A limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-146 -m limit --limit 1/second -j LOG --A limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 --A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-150 -j ACCEPT --A limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-152 -m limit --limit 1/second -j LOG --A limit-152 -j ACCEPT --A limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-153 -m limit --limit 1/second -j LOG --A limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-154 -j ACCEPT --A limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-158 -m limit --limit 1/second -j LOG --A limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 --A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-162 -j ACCEPT --A limit-163 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-164 -m limit --limit 1/second -j LOG --A limit-164 -j ACCEPT --A limit-165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-165 -m limit --limit 1/second -j LOG --A limit-166 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-166 -j ACCEPT --A limit-167 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 --A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 --A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --set --A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 --A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 --A limit-170 -m limit --limit 1/second -j LOG --A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 --A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 --A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 --A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --set --A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 --A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 --A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 --A limit-176 -m limit --limit 1/second -j LOG --A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 --A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 --A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-72 --A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-19 --A limit-18 -j ACCEPT --A limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 --A limit-180 -j ACCEPT --A limit-181 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 --A limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 --A limit-182 -m limit --limit 1/second -j LOG --A limit-182 -j ACCEPT --A limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 --A limit-183 -m limit --limit 1/second -j LOG --A limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 --A limit-184 -j ACCEPT --A limit-185 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 --A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 --A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 --A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 --A limit-188 -m limit --limit 1/second -j LOG --A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 --A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20 --A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 --A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-84 --A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 --A limit-192 -j ACCEPT --A limit-193 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 --A limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 --A limit-194 -m limit --limit 1/second -j LOG --A limit-194 -j ACCEPT --A limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 --A limit-195 -m limit --limit 1/second -j LOG --A limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 --A limit-196 -j ACCEPT --A limit-197 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 --A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 --A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 --A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 --A limit-2 -m limit --limit 1/second -j LOG --A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-21 --A limit-20 -m limit --limit 1/second -j LOG --A limit-20 -j ACCEPT --A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 --A limit-200 -m limit --limit 1/second -j LOG --A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 --A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 --A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-96 --A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 --A limit-204 -j ACCEPT --A limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 --A limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 --A limit-206 -m limit --limit 1/second -j LOG --A limit-206 -j ACCEPT --A limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 --A limit-207 -m limit --limit 1/second -j LOG --A limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 --A limit-208 -j ACCEPT --A limit-209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 --A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-22 --A limit-21 -m limit --limit 1/second -j LOG --A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 --A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 --A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 --A limit-212 -m limit --limit 1/second -j LOG --A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 --A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 --A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-108 --A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 --A limit-216 -j ACCEPT --A limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 --A limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 --A limit-218 -m limit --limit 1/second -j LOG --A limit-218 -j ACCEPT --A limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 --A limit-219 -m limit --limit 1/second -j LOG --A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-23 --A limit-22 -j ACCEPT --A limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 --A limit-220 -j ACCEPT --A limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 --A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set --A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-224 -m limit --limit 1/second -j LOG --A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set --A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-24 --A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-230 -m limit --limit 1/second -j LOG --A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-234 -j ACCEPT --A limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-236 -m limit --limit 1/second -j LOG --A limit-236 -j ACCEPT --A limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-237 -m limit --limit 1/second -j LOG --A limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-238 -j ACCEPT --A limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 --A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-242 -m limit --limit 1/second -j LOG --A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-246 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-246 -j ACCEPT --A limit-247 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-248 -m limit --limit 1/second -j LOG --A limit-248 -j ACCEPT --A limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-249 -m limit --limit 1/second -j LOG --A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 --A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-250 -j ACCEPT --A limit-251 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-254 -m limit --limit 1/second -j LOG --A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-258 -j ACCEPT --A limit-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 --A limit-26 -m limit --limit 1/second -j LOG --A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-260 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-260 -m limit --limit 1/second -j LOG --A limit-260 -j ACCEPT --A limit-261 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-261 -m limit --limit 1/second -j LOG --A limit-262 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-262 -j ACCEPT --A limit-263 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-266 -m limit --limit 1/second -j LOG --A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 --A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-270 -j ACCEPT --A limit-271 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-272 -m limit --limit 1/second -j LOG --A limit-272 -j ACCEPT --A limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-273 -m limit --limit 1/second -j LOG --A limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-274 -j ACCEPT --A limit-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --set --A limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-278 -m limit --limit 1/second -j LOG --A limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 --A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set --A limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-284 -m limit --limit 1/second -j LOG --A limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-288 -j ACCEPT --A limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-30 --A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-290 -m limit --limit 1/second -j LOG --A limit-290 -j ACCEPT --A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-291 -m limit --limit 1/second -j LOG --A limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-292 -j ACCEPT --A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-296 -m limit --limit 1/second -j LOG --A limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 --A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-30 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 --A limit-30 -j ACCEPT --A limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-300 -j ACCEPT --A limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-302 -m limit --limit 1/second -j LOG --A limit-302 -j ACCEPT --A limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-303 -m limit --limit 1/second -j LOG --A limit-304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-304 -j ACCEPT --A limit-305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-308 -m limit --limit 1/second -j LOG --A limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-31 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 --A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-312 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-312 -j ACCEPT --A limit-313 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m limit --limit 1/second -j LOG --A limit-314 -j ACCEPT --A limit-315 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-315 -m limit --limit 1/second -j LOG --A limit-316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-316 -j ACCEPT --A limit-317 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 --A limit-32 -m limit --limit 1/second -j LOG --A limit-32 -j ACCEPT --A limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-320 -m limit --limit 1/second -j LOG --A limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-324 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-324 -j ACCEPT --A limit-325 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-326 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-326 -m limit --limit 1/second -j LOG --A limit-326 -j ACCEPT --A limit-327 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-327 -m limit --limit 1/second -j LOG --A limit-328 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-328 -j ACCEPT --A limit-329 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 --A limit-33 -m limit --limit 1/second -j LOG --A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-330 -j ACCEPT --A limit-330 -m limit --limit 1/second -j LOG --A limit-330 -j DROP --A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-331 -j RETURN --A limit-331 -m limit --limit 1/second -j LOG --A limit-331 -j DROP --A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-63 --A limit-332 -m limit --limit 1/second -j LOG --A limit-332 -j DROP --A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-333 -j ACCEPT --A limit-333 -m limit --limit 1/second -j LOG --A limit-333 -j DROP --A limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-334 -j ACCEPT --A limit-334 -m limit --limit 1/second -j LOG --A limit-334 -j DROP --A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-335 -j RETURN --A limit-335 -m limit --limit 1/second -j LOG --A limit-335 -j DROP --A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-64 --A limit-336 -m limit --limit 1/second -j LOG --A limit-336 -j DROP --A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-337 -j ACCEPT --A limit-337 -m limit --limit 1/second -j LOG --A limit-337 -j DROP --A limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-338 -j ACCEPT --A limit-338 -j DROP --A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-339 -j RETURN --A limit-339 -j DROP --A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 --A limit-34 -j ACCEPT --A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-65 --A limit-340 -j DROP --A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-341 -j ACCEPT --A limit-341 -j DROP --A limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-342 -j ACCEPT --A limit-342 -j DROP --A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-343 -j RETURN --A limit-343 -j DROP --A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-66 --A limit-344 -j DROP --A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-345 -j ACCEPT --A limit-345 -j DROP --A limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-346 -j ACCEPT --A limit-346 -m limit --limit 1/second -j LOG --A limit-346 -j DROP --A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-347 -j RETURN --A limit-347 -m limit --limit 1/second -j LOG --A limit-347 -j DROP --A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-67 --A limit-348 -m limit --limit 1/second -j LOG --A limit-348 -j DROP --A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-349 -j ACCEPT --A limit-349 -m limit --limit 1/second -j LOG --A limit-349 -j DROP --A limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-36 --A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-350 -j ACCEPT --A limit-350 -j DROP --A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-351 -j RETURN --A limit-351 -j DROP --A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-68 --A limit-352 -j DROP --A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-353 -j ACCEPT --A limit-353 -j DROP --A limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-354 -j ACCEPT --A limit-354 -j DROP --A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-355 -j RETURN --A limit-355 -j DROP --A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-69 --A limit-356 -j DROP --A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-357 -j ACCEPT --A limit-357 -j DROP --A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 --A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 --A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set --A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 --A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 --A limit-360 -m limit --limit 1/second -j LOG --A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 --A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 --A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 --A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set --A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 --A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 --A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set --A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 --A limit-366 -m limit --limit 1/second -j LOG --A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 --A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 --A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 --A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set --A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 --A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 --A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 --A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 --A limit-372 -m limit --limit 1/second -j LOG --A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 --A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 --A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 --A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 --A limit-376 -j ACCEPT --A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 --A limit-378 -m limit --limit 1/second -j LOG --A limit-378 -j ACCEPT --A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 --A limit-379 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 --A limit-38 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 --A limit-380 -j ACCEPT --A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 --A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 --A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 --A limit-384 -m limit --limit 1/second -j LOG --A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 --A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 --A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-144 --A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 --A limit-388 -j ACCEPT --A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 --A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 --A limit-390 -m limit --limit 1/second -j LOG --A limit-390 -j ACCEPT --A limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 --A limit-391 -m limit --limit 1/second -j LOG --A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 --A limit-392 -j ACCEPT --A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 --A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 --A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 --A limit-396 -m limit --limit 1/second -j LOG --A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 --A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 --A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 --A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 --A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 --A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 --A limit-400 -j ACCEPT --A limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 --A limit-402 -m limit --limit 1/second -j LOG --A limit-402 -j ACCEPT --A limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 --A limit-403 -m limit --limit 1/second -j LOG --A limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 --A limit-404 -j ACCEPT --A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 --A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 --A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 --A limit-408 -m limit --limit 1/second -j LOG --A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 --A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-42 --A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 --A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-168 --A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 --A limit-412 -j ACCEPT --A limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 --A limit-414 -m limit --limit 1/second -j LOG --A limit-414 -j ACCEPT --A limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 --A limit-415 -m limit --limit 1/second -j LOG --A limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 --A limit-416 -j ACCEPT --A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set --A limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 --A limit-42 -j ACCEPT --A limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-420 -m limit --limit 1/second -j LOG --A limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --set --A limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-426 -m limit --limit 1/second -j LOG --A limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-43 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 --A limit-430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-430 -j ACCEPT --A limit-432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-432 -m limit --limit 1/second -j LOG --A limit-432 -j ACCEPT --A limit-433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-433 -m limit --limit 1/second -j LOG --A limit-434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-434 -j ACCEPT --A limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-438 -m limit --limit 1/second -j LOG --A limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 --A limit-44 -m limit --limit 1/second -j LOG --A limit-44 -j ACCEPT --A limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-442 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-442 -j ACCEPT --A limit-444 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-444 -m limit --limit 1/second -j LOG --A limit-444 -j ACCEPT --A limit-445 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-445 -m limit --limit 1/second -j LOG --A limit-446 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-446 -j ACCEPT --A limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 --A limit-45 -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-450 -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-454 -j ACCEPT --A limit-456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-456 -m limit --limit 1/second -j LOG --A limit-456 -j ACCEPT --A limit-457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-457 -m limit --limit 1/second -j LOG --A limit-458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-458 -j ACCEPT --A limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 --A limit-46 -j ACCEPT --A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-462 -m limit --limit 1/second -j LOG --A limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-466 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-466 -j ACCEPT --A limit-468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-468 -m limit --limit 1/second -j LOG --A limit-468 -j ACCEPT --A limit-469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-469 -m limit --limit 1/second -j LOG --A limit-47 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 --A limit-470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-470 -j ACCEPT --A limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --set --A limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-474 -m limit --limit 1/second -j LOG --A limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --set --A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 --A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-480 -m limit --limit 1/second -j LOG --A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-484 -j ACCEPT --A limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-486 -m limit --limit 1/second -j LOG --A limit-486 -j ACCEPT --A limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-487 -m limit --limit 1/second -j LOG --A limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-488 -j ACCEPT --A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 --A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-492 -m limit --limit 1/second -j LOG --A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-496 -j ACCEPT --A limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-498 -m limit --limit 1/second -j LOG --A limit-498 -j ACCEPT --A limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-499 -m limit --limit 1/second -j LOG --A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 --A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set --A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 --A limit-50 -m limit --limit 1/second -j LOG --A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-500 -j ACCEPT --A limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-504 -m limit --limit 1/second -j LOG --A limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-508 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-508 -j ACCEPT --A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 --A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-510 -m limit --limit 1/second -j LOG --A limit-510 -j ACCEPT --A limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-511 -m limit --limit 1/second -j LOG --A limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-512 -j ACCEPT --A limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-516 -m limit --limit 1/second -j LOG --A limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 --A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-520 -j ACCEPT --A limit-522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-522 -m limit --limit 1/second -j LOG --A limit-522 -j ACCEPT --A limit-523 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-523 -m limit --limit 1/second -j LOG --A limit-524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-524 -j ACCEPT --A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 --A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 --A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set --A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 --A limit-528 -m limit --limit 1/second -j LOG --A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 --A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-54 --A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 --A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 --A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set --A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 --A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 --A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 --A limit-534 -m limit --limit 1/second -j LOG --A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 --A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 --A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-186 --A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 --A limit-538 -j ACCEPT --A limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 --A limit-54 -j ACCEPT --A limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 --A limit-540 -m limit --limit 1/second -j LOG --A limit-540 -j ACCEPT --A limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 --A limit-541 -m limit --limit 1/second -j LOG --A limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 --A limit-542 -j ACCEPT --A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 --A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 --A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 --A limit-546 -m limit --limit 1/second -j LOG --A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 --A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 --A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-198 --A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-55 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 --A limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 --A limit-550 -j ACCEPT --A limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 --A limit-552 -m limit --limit 1/second -j LOG --A limit-552 -j ACCEPT --A limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 --A limit-553 -m limit --limit 1/second -j LOG --A limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 --A limit-554 -j ACCEPT --A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 --A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 --A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 --A limit-558 -m limit --limit 1/second -j LOG --A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 --A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 --A limit-56 -m limit --limit 1/second -j LOG --A limit-56 -j ACCEPT --A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 --A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-210 --A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 --A limit-562 -j ACCEPT --A limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 --A limit-564 -m limit --limit 1/second -j LOG --A limit-564 -j ACCEPT --A limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 --A limit-565 -m limit --limit 1/second -j LOG --A limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 --A limit-566 -j ACCEPT --A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 --A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 --A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 --A limit-57 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 --A limit-570 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 --A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 --A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-222 --A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 --A limit-574 -j ACCEPT --A limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 --A limit-576 -m limit --limit 1/second -j LOG --A limit-576 -j ACCEPT --A limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 --A limit-577 -m limit --limit 1/second -j LOG --A limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 --A limit-578 -j ACCEPT --A limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 --A limit-58 -j ACCEPT --A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --set --A limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-582 -m limit --limit 1/second -j LOG --A limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --set --A limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-588 -m limit --limit 1/second -j LOG --A limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-59 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 --A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-592 -j ACCEPT --A limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-594 -m limit --limit 1/second -j LOG --A limit-594 -j ACCEPT --A limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-595 -m limit --limit 1/second -j LOG --A limit-596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-596 -j ACCEPT --A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 --A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-600 -m limit --limit 1/second -j LOG --A limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-604 -j ACCEPT --A limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-606 -m limit --limit 1/second -j LOG --A limit-606 -j ACCEPT --A limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-607 -m limit --limit 1/second -j LOG --A limit-608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-608 -j ACCEPT --A limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --set --A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-612 -m limit --limit 1/second -j LOG --A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-616 -j ACCEPT --A limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-618 -m limit --limit 1/second -j LOG --A limit-618 -j ACCEPT --A limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-619 -m limit --limit 1/second -j LOG --A limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-62 -m limit --limit 1/second -j LOG --A limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-620 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-620 -j ACCEPT --A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-624 -m limit --limit 1/second -j LOG --A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-628 -j ACCEPT --A limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-630 -m limit --limit 1/second -j LOG --A limit-630 -j ACCEPT --A limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-631 -m limit --limit 1/second -j LOG --A limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-632 -j ACCEPT --A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set --A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-636 -m limit --limit 1/second -j LOG --A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set --A limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-642 -m limit --limit 1/second -j LOG --A limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-646 -j ACCEPT --A limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-648 -m limit --limit 1/second -j LOG --A limit-648 -j ACCEPT --A limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-649 -m limit --limit 1/second -j LOG --A limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --set --A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-650 -j ACCEPT --A limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-654 -m limit --limit 1/second -j LOG --A limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-658 -j ACCEPT --A limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-660 -m limit --limit 1/second -j LOG --A limit-660 -j ACCEPT --A limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-661 -m limit --limit 1/second -j LOG --A limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-662 -j ACCEPT --A limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-666 -m limit --limit 1/second -j LOG --A limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-670 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-670 -j ACCEPT --A limit-672 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-672 -m limit --limit 1/second -j LOG --A limit-672 -j ACCEPT --A limit-673 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-673 -m limit --limit 1/second -j LOG --A limit-674 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-674 -j ACCEPT --A limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-678 -m limit --limit 1/second -j LOG --A limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-68 -m limit --limit 1/second -j LOG --A limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-682 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-682 -j ACCEPT --A limit-684 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-684 -m limit --limit 1/second -j LOG --A limit-684 -j ACCEPT --A limit-685 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-685 -m limit --limit 1/second -j LOG --A limit-686 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-686 -j ACCEPT --A limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-688 -j ACCEPT --A limit-688 -m limit --limit 1/second -j LOG --A limit-688 -j DROP --A limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-689 -j RETURN --A limit-689 -m limit --limit 1/second -j LOG --A limit-689 -j DROP --A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j logaccept-70 --A limit-690 -m limit --limit 1/second -j LOG --A limit-690 -j DROP --A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-691 -j ACCEPT --A limit-691 -m limit --limit 1/second -j LOG --A limit-691 -j DROP --A limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-692 -j ACCEPT --A limit-692 -m limit --limit 1/second -j LOG --A limit-692 -j DROP --A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-693 -j RETURN --A limit-693 -m limit --limit 1/second -j LOG --A limit-693 -j DROP --A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j logaccept-71 --A limit-694 -m limit --limit 1/second -j LOG --A limit-694 -j DROP --A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-695 -j ACCEPT --A limit-695 -m limit --limit 1/second -j LOG --A limit-695 -j DROP --A limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-696 -j ACCEPT --A limit-696 -j DROP --A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-697 -j RETURN --A limit-697 -j DROP --A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j logaccept-72 --A limit-698 -j DROP --A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-699 -j ACCEPT --A limit-699 -j DROP --A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 --A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set --A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-700 -j ACCEPT --A limit-700 -j DROP --A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-701 -j RETURN --A limit-701 -j DROP --A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j logaccept-73 --A limit-702 -j DROP --A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-703 -j ACCEPT --A limit-703 -j DROP --A limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-704 -j ACCEPT --A limit-704 -m limit --limit 1/second -j LOG --A limit-704 -j DROP --A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-705 -j RETURN --A limit-705 -m limit --limit 1/second -j LOG --A limit-705 -j DROP --A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j logaccept-74 --A limit-706 -m limit --limit 1/second -j LOG --A limit-706 -j DROP --A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-707 -j ACCEPT --A limit-707 -m limit --limit 1/second -j LOG --A limit-707 -j DROP --A limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-708 -j ACCEPT --A limit-708 -j DROP --A limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-709 -j RETURN --A limit-709 -j DROP --A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j logaccept-75 --A limit-710 -j DROP --A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-711 -j ACCEPT --A limit-711 -j DROP --A limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-712 -j ACCEPT --A limit-712 -j DROP --A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-713 -j RETURN --A limit-713 -j DROP --A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j logaccept-76 --A limit-714 -j DROP --A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-715 -j ACCEPT --A limit-715 -j DROP --A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 --A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set --A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 --A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set --A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 --A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set --A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 --A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-72 -j ACCEPT --A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 --A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set --A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 --A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set --A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 --A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set --A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 --A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set --A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 --A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set --A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 --A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 --A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set --A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 --A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set --A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 --A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 --A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 --A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 --A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 --A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-246 --A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 --A limit-735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 --A limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 --A limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 --A limit-737 -m limit --limit 1/second -j LOG --A limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 --A limit-739 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 --A limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-74 -m limit --limit 1/second -j LOG --A limit-74 -j ACCEPT --A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 --A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 --A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 --A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 --A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 --A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-258 --A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 --A limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 --A limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 --A limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 --A limit-749 -m limit --limit 1/second -j LOG --A limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-75 -m limit --limit 1/second -j LOG --A limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 --A limit-751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-264 --A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 --A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 --A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 --A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 --A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 --A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-270 --A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 --A limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 --A limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-76 -j ACCEPT --A limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 --A limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 --A limit-761 -m limit --limit 1/second -j LOG --A limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 --A limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 --A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 --A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 --A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 --A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 --A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 --A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-282 --A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 --A limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 --A limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 --A limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 --A limit-773 -m limit --limit 1/second -j LOG --A limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 --A limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-288 --A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --set --A limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --set --A limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --set --A limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --set --A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --set --A limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-788 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-789 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-791 -m limit --limit 1/second -j LOG --A limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 --A limit-8 -m limit --limit 1/second -j LOG --A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-80 -m limit --limit 1/second -j LOG --A limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-800 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-801 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-802 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-803 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-803 -m limit --limit 1/second -j LOG --A limit-804 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-805 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-813 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-815 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-815 -m limit --limit 1/second -j LOG --A limit-816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-817 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-824 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-825 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-826 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-827 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-827 -m limit --limit 1/second -j LOG --A limit-828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-829 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --set --A limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --set --A limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --set --A limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --set --A limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --set --A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-84 -j ACCEPT --A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-845 -m limit --limit 1/second -j LOG --A limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-847 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-857 -m limit --limit 1/second -j LOG --A limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-86 -m limit --limit 1/second -j LOG --A limit-86 -j ACCEPT --A limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-866 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-867 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-868 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-869 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-869 -m limit --limit 1/second -j LOG --A limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-87 -m limit --limit 1/second -j LOG --A limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-879 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-88 -j ACCEPT --A limit-880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-881 -m limit --limit 1/second -j LOG --A limit-882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-883 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 --A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --set --A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 --A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --set --A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 --A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --set --A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 --A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 --A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --set --A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 --A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --set --A limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 --A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 --A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 --A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 --A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 --A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-300 --A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 --A limit-897 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 --A limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 --A limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 --A limit-899 -m limit --limit 1/second -j LOG --A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 --A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 --A limit-901 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 --A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 --A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 --A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 --A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 --A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 --A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 --A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 --A limit-909 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 --A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 --A limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 --A limit-911 -m limit --limit 1/second -j LOG --A limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 --A limit-913 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-318 --A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 --A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 --A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 --A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 --A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 --A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-324 --A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-92 -m limit --limit 1/second -j LOG --A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 --A limit-921 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 --A limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 --A limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 --A limit-923 -m limit --limit 1/second -j LOG --A limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 --A limit-925 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-330 --A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 --A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 --A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 --A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 --A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 --A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 --A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 --A limit-933 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 --A limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 --A limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 --A limit-935 -m limit --limit 1/second -j LOG --A limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 --A limit-937 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 --A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --set --A limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --set --A limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --set --A limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --set --A limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --set --A limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-950 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-951 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-952 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-953 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-953 -m limit --limit 1/second -j LOG --A limit-954 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-955 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-96 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-96 -j ACCEPT --A limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-962 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-963 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-964 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-965 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-965 -m limit --limit 1/second -j LOG --A limit-966 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-967 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-97 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-974 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-975 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-976 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-977 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-977 -m limit --limit 1/second -j LOG --A limit-978 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-979 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-98 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-98 -m limit --limit 1/second -j LOG --A limit-98 -j ACCEPT --A limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-987 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-989 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-989 -m limit --limit 1/second -j LOG --A limit-99 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-99 -m limit --limit 1/second -j LOG --A limit-990 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-991 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set --A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set --A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set --A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --set --A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --set --A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A logaccept-0 -m limit --limit 1/second -j LOG --A logaccept-0 -j ACCEPT --A logaccept-1 -m limit --limit 1/second -j LOG --A logaccept-1 -j ACCEPT --A logaccept-10 -m limit --limit 1/second -j LOG --A logaccept-10 -j ACCEPT --A logaccept-11 -m limit --limit 1/second -j LOG --A logaccept-11 -j ACCEPT --A logaccept-12 -m limit --limit 1/second -j LOG --A logaccept-12 -j ACCEPT --A logaccept-13 -m limit --limit 1/second -j LOG --A logaccept-13 -j ACCEPT --A logaccept-14 -m limit --limit 1/second -j LOG --A logaccept-14 -j ACCEPT --A logaccept-15 -m limit --limit 1/second -j LOG --A logaccept-15 -j ACCEPT --A logaccept-16 -m limit --limit 1/second -j LOG --A logaccept-16 -j ACCEPT --A logaccept-17 -m limit --limit 1/second -j LOG --A logaccept-17 -j ACCEPT --A logaccept-18 -m limit --limit 1/second -j LOG --A logaccept-18 -j ACCEPT --A logaccept-19 -m limit --limit 1/second -j LOG --A logaccept-19 -j ACCEPT --A logaccept-2 -m limit --limit 1/second -j LOG --A logaccept-2 -j ACCEPT --A logaccept-20 -m limit --limit 1/second -j LOG --A logaccept-20 -j ACCEPT --A logaccept-21 -m limit --limit 1/second -j LOG --A logaccept-21 -j ACCEPT --A logaccept-22 -m limit --limit 1/second -j LOG --A logaccept-22 -j ACCEPT --A logaccept-23 -m limit --limit 1/second -j LOG --A logaccept-23 -j ACCEPT --A logaccept-24 -m limit --limit 1/second -j LOG --A logaccept-24 -j ACCEPT --A logaccept-25 -m limit --limit 1/second -j LOG --A logaccept-25 -j ACCEPT --A logaccept-26 -m limit --limit 1/second -j LOG --A logaccept-26 -j ACCEPT --A logaccept-27 -m limit --limit 1/second -j LOG --A logaccept-27 -j ACCEPT --A logaccept-28 -m limit --limit 1/second -j LOG --A logaccept-28 -j ACCEPT --A logaccept-29 -m limit --limit 1/second -j LOG --A logaccept-29 -j ACCEPT --A logaccept-3 -m limit --limit 1/second -j LOG --A logaccept-3 -j ACCEPT --A logaccept-30 -m limit --limit 1/second -j LOG --A logaccept-30 -j ACCEPT --A logaccept-31 -m limit --limit 1/second -j LOG --A logaccept-31 -j ACCEPT --A logaccept-32 -m limit --limit 1/second -j LOG --A logaccept-32 -j ACCEPT --A logaccept-33 -m limit --limit 1/second -j LOG --A logaccept-33 -j ACCEPT --A logaccept-34 -m limit --limit 1/second -j LOG --A logaccept-34 -j ACCEPT --A logaccept-35 -m limit --limit 1/second -j LOG --A logaccept-35 -j ACCEPT --A logaccept-36 -m limit --limit 1/second -j LOG --A logaccept-36 -j ACCEPT --A logaccept-37 -m limit --limit 1/second -j LOG --A logaccept-37 -j ACCEPT --A logaccept-38 -m limit --limit 1/second -j LOG --A logaccept-38 -j ACCEPT --A logaccept-39 -m limit --limit 1/second -j LOG --A logaccept-39 -j ACCEPT --A logaccept-4 -m limit --limit 1/second -j LOG --A logaccept-4 -j ACCEPT --A logaccept-40 -m limit --limit 1/second -j LOG --A logaccept-40 -j ACCEPT --A logaccept-41 -m limit --limit 1/second -j LOG --A logaccept-41 -j ACCEPT --A logaccept-42 -m limit --limit 1/second -j LOG --A logaccept-42 -j ACCEPT --A logaccept-43 -m limit --limit 1/second -j LOG --A logaccept-43 -j ACCEPT --A logaccept-44 -m limit --limit 1/second -j LOG --A logaccept-44 -j ACCEPT --A logaccept-45 -m limit --limit 1/second -j LOG --A logaccept-45 -j ACCEPT --A logaccept-46 -m limit --limit 1/second -j LOG --A logaccept-46 -j ACCEPT --A logaccept-47 -m limit --limit 1/second -j LOG --A logaccept-47 -j ACCEPT --A logaccept-48 -m limit --limit 1/second -j LOG --A logaccept-48 -j ACCEPT --A logaccept-49 -m limit --limit 1/second -j LOG --A logaccept-49 -j ACCEPT --A logaccept-5 -m limit --limit 1/second -j LOG --A logaccept-5 -j ACCEPT --A logaccept-50 -m limit --limit 1/second -j LOG --A logaccept-50 -j ACCEPT --A logaccept-51 -m limit --limit 1/second -j LOG --A logaccept-51 -j ACCEPT --A logaccept-52 -m limit --limit 1/second -j LOG --A logaccept-52 -j ACCEPT --A logaccept-53 -m limit --limit 1/second -j LOG --A logaccept-53 -j ACCEPT --A logaccept-54 -m limit --limit 1/second -j LOG --A logaccept-54 -j ACCEPT --A logaccept-55 -m limit --limit 1/second -j LOG --A logaccept-55 -j ACCEPT --A logaccept-56 -m limit --limit 1/second -j LOG --A logaccept-56 -j ACCEPT --A logaccept-57 -m limit --limit 1/second -j LOG --A logaccept-57 -j ACCEPT --A logaccept-58 -m limit --limit 1/second -j LOG --A logaccept-58 -j ACCEPT --A logaccept-59 -m limit --limit 1/second -j LOG --A logaccept-59 -j ACCEPT --A logaccept-6 -m limit --limit 1/second -j LOG --A logaccept-6 -j ACCEPT --A logaccept-60 -m limit --limit 1/second -j LOG --A logaccept-60 -j ACCEPT --A logaccept-61 -m limit --limit 1/second -j LOG --A logaccept-61 -j ACCEPT --A logaccept-62 -m limit --limit 1/second -j LOG --A logaccept-62 -j ACCEPT --A logaccept-63 -m limit --limit 1/second -j LOG --A logaccept-63 -j ACCEPT --A logaccept-64 -m limit --limit 1/second -j LOG --A logaccept-64 -j ACCEPT --A logaccept-65 -m limit --limit 1/second -j LOG --A logaccept-65 -j ACCEPT --A logaccept-66 -m limit --limit 1/second -j LOG --A logaccept-66 -j ACCEPT --A logaccept-67 -m limit --limit 1/second -j LOG --A logaccept-67 -j ACCEPT --A logaccept-68 -m limit --limit 1/second -j LOG --A logaccept-68 -j ACCEPT --A logaccept-69 -m limit --limit 1/second -j LOG --A logaccept-69 -j ACCEPT --A logaccept-7 -m limit --limit 1/second -j LOG --A logaccept-7 -j ACCEPT --A logaccept-70 -m limit --limit 1/second -j LOG --A logaccept-70 -j ACCEPT --A logaccept-71 -m limit --limit 1/second -j LOG --A logaccept-71 -j ACCEPT --A logaccept-72 -m limit --limit 1/second -j LOG --A logaccept-72 -j ACCEPT --A logaccept-73 -m limit --limit 1/second -j LOG --A logaccept-73 -j ACCEPT --A logaccept-74 -m limit --limit 1/second -j LOG --A logaccept-74 -j ACCEPT --A logaccept-75 -m limit --limit 1/second -j LOG --A logaccept-75 -j ACCEPT --A logaccept-76 -m limit --limit 1/second -j LOG --A logaccept-76 -j ACCEPT --A logaccept-77 -m limit --limit 1/second -j LOG --A logaccept-77 -j ACCEPT --A logaccept-78 -m limit --limit 1/second -j LOG --A logaccept-78 -j ACCEPT --A logaccept-79 -m limit --limit 1/second -j LOG --A logaccept-79 -j ACCEPT --A logaccept-8 -m limit --limit 1/second -j LOG --A logaccept-8 -j ACCEPT --A logaccept-80 -m limit --limit 1/second -j LOG --A logaccept-80 -j ACCEPT --A logaccept-81 -m limit --limit 1/second -j LOG --A logaccept-81 -j ACCEPT --A logaccept-82 -m limit --limit 1/second -j LOG --A logaccept-82 -j ACCEPT --A logaccept-83 -m limit --limit 1/second -j LOG --A logaccept-83 -j ACCEPT --A logaccept-84 -m limit --limit 1/second -j LOG --A logaccept-84 -j ACCEPT --A logaccept-9 -m limit --limit 1/second -j LOG --A logaccept-9 -j ACCEPT --A logaccept-final-0 -m limit --limit 1/second -j LOG --A logaccept-final-0 -j ACCEPT --A logaccept-final-1 -m limit --limit 1/second -j LOG --A logaccept-final-1 -j ACCEPT --A logaccept-final-10 -m limit --limit 1/second -j LOG --A logaccept-final-10 -j ACCEPT --A logaccept-final-11 -m limit --limit 1/second -j LOG --A logaccept-final-11 -j ACCEPT --A logaccept-final-12 -m limit --limit 1/second -j LOG --A logaccept-final-12 -j ACCEPT --A logaccept-final-13 -m limit --limit 1/second -j LOG --A logaccept-final-13 -j ACCEPT --A logaccept-final-14 -m limit --limit 1/second -j LOG --A logaccept-final-14 -j ACCEPT --A logaccept-final-15 -m limit --limit 1/second -j LOG --A logaccept-final-15 -j ACCEPT --A logaccept-final-16 -m limit --limit 1/second -j LOG --A logaccept-final-16 -j ACCEPT --A logaccept-final-17 -m limit --limit 1/second -j LOG --A logaccept-final-17 -j ACCEPT --A logaccept-final-18 -m limit --limit 1/second -j LOG --A logaccept-final-18 -j ACCEPT --A logaccept-final-19 -m limit --limit 1/second -j LOG --A logaccept-final-19 -j ACCEPT --A logaccept-final-2 -m limit --limit 1/second -j LOG --A logaccept-final-2 -j ACCEPT --A logaccept-final-20 -m limit --limit 1/second -j LOG --A logaccept-final-20 -j ACCEPT --A logaccept-final-21 -m limit --limit 1/second -j LOG --A logaccept-final-21 -j ACCEPT --A logaccept-final-22 -m limit --limit 1/second -j LOG --A logaccept-final-22 -j ACCEPT --A logaccept-final-23 -m limit --limit 1/second -j LOG --A logaccept-final-23 -j ACCEPT --A logaccept-final-24 -m limit --limit 1/second -j LOG --A logaccept-final-24 -j ACCEPT --A logaccept-final-25 -m limit --limit 1/second -j LOG --A logaccept-final-25 -j ACCEPT --A logaccept-final-26 -m limit --limit 1/second -j LOG --A logaccept-final-26 -j ACCEPT --A logaccept-final-27 -m limit --limit 1/second -j LOG --A logaccept-final-27 -j ACCEPT --A logaccept-final-28 -m limit --limit 1/second -j LOG --A logaccept-final-28 -j ACCEPT --A logaccept-final-29 -m limit --limit 1/second -j LOG --A logaccept-final-29 -j ACCEPT --A logaccept-final-3 -m limit --limit 1/second -j LOG --A logaccept-final-3 -j ACCEPT --A logaccept-final-30 -m limit --limit 1/second -j LOG --A logaccept-final-30 -j ACCEPT --A logaccept-final-31 -m limit --limit 1/second -j LOG --A logaccept-final-31 -j ACCEPT --A logaccept-final-32 -m limit --limit 1/second -j LOG --A logaccept-final-32 -j ACCEPT --A logaccept-final-33 -m limit --limit 1/second -j LOG --A logaccept-final-33 -j ACCEPT --A logaccept-final-34 -m limit --limit 1/second -j LOG --A logaccept-final-34 -j ACCEPT --A logaccept-final-35 -m limit --limit 1/second -j LOG --A logaccept-final-35 -j ACCEPT --A logaccept-final-36 -m limit --limit 1/second -j LOG --A logaccept-final-36 -j ACCEPT --A logaccept-final-37 -m limit --limit 1/second -j LOG --A logaccept-final-37 -j ACCEPT --A logaccept-final-38 -m limit --limit 1/second -j LOG --A logaccept-final-38 -j ACCEPT --A logaccept-final-39 -m limit --limit 1/second -j LOG --A logaccept-final-39 -j ACCEPT --A logaccept-final-4 -m limit --limit 1/second -j LOG --A logaccept-final-4 -j ACCEPT --A logaccept-final-40 -m limit --limit 1/second -j LOG --A logaccept-final-40 -j ACCEPT --A logaccept-final-41 -m limit --limit 1/second -j LOG --A logaccept-final-41 -j ACCEPT --A logaccept-final-42 -m limit --limit 1/second -j LOG --A logaccept-final-42 -j ACCEPT --A logaccept-final-43 -m limit --limit 1/second -j LOG --A logaccept-final-43 -j ACCEPT --A logaccept-final-44 -m limit --limit 1/second -j LOG --A logaccept-final-44 -j ACCEPT --A logaccept-final-45 -m limit --limit 1/second -j LOG --A logaccept-final-45 -j ACCEPT --A logaccept-final-46 -m limit --limit 1/second -j LOG --A logaccept-final-46 -j ACCEPT --A logaccept-final-47 -m limit --limit 1/second -j LOG --A logaccept-final-47 -j ACCEPT --A logaccept-final-48 -m limit --limit 1/second -j LOG --A logaccept-final-48 -j ACCEPT --A logaccept-final-49 -m limit --limit 1/second -j LOG --A logaccept-final-49 -j ACCEPT --A logaccept-final-5 -m limit --limit 1/second -j LOG --A logaccept-final-5 -j ACCEPT --A logaccept-final-50 -m limit --limit 1/second -j LOG --A logaccept-final-50 -j ACCEPT --A logaccept-final-51 -m limit --limit 1/second -j LOG --A logaccept-final-51 -j ACCEPT --A logaccept-final-52 -m limit --limit 1/second -j LOG --A logaccept-final-52 -j ACCEPT --A logaccept-final-53 -m limit --limit 1/second -j LOG --A logaccept-final-53 -j ACCEPT --A logaccept-final-54 -m limit --limit 1/second -j LOG --A logaccept-final-54 -j ACCEPT --A logaccept-final-55 -m limit --limit 1/second -j LOG --A logaccept-final-55 -j ACCEPT --A logaccept-final-56 -m limit --limit 1/second -j LOG --A logaccept-final-56 -j ACCEPT --A logaccept-final-57 -m limit --limit 1/second -j LOG --A logaccept-final-57 -j ACCEPT --A logaccept-final-58 -m limit --limit 1/second -j LOG --A logaccept-final-58 -j ACCEPT --A logaccept-final-59 -m limit --limit 1/second -j LOG --A logaccept-final-59 -j ACCEPT --A logaccept-final-6 -m limit --limit 1/second -j LOG --A logaccept-final-6 -j ACCEPT --A logaccept-final-60 -m limit --limit 1/second -j LOG --A logaccept-final-60 -j ACCEPT --A logaccept-final-61 -m limit --limit 1/second -j LOG --A logaccept-final-61 -j ACCEPT --A logaccept-final-7 -m limit --limit 1/second -j LOG --A logaccept-final-7 -j ACCEPT --A logaccept-final-8 -m limit --limit 1/second -j LOG --A logaccept-final-8 -j ACCEPT --A logaccept-final-9 -m limit --limit 1/second -j LOG --A logaccept-final-9 -j ACCEPT --A logdrop-0 -m limit --limit 1/second -j LOG --A logdrop-0 -j DROP --A logdrop-1 -m limit --limit 1/second -j LOG --A logdrop-1 -j DROP --A logdrop-10 -m limit --limit 1/second -j LOG --A logdrop-10 -j DROP --A logdrop-100 -m limit --limit 1/second -j LOG --A logdrop-100 -j DROP --A logdrop-101 -m limit --limit 1/second -j LOG --A logdrop-101 -j DROP --A logdrop-102 -m limit --limit 1/second -j LOG --A logdrop-102 -j DROP --A logdrop-103 -m limit --limit 1/second -j LOG --A logdrop-103 -j DROP --A logdrop-104 -m limit --limit 1/second -j LOG --A logdrop-104 -j DROP --A logdrop-105 -m limit --limit 1/second -j LOG --A logdrop-105 -j DROP --A logdrop-106 -m limit --limit 1/second -j LOG --A logdrop-106 -j DROP --A logdrop-107 -m limit --limit 1/second -j LOG --A logdrop-107 -j DROP --A logdrop-108 -m limit --limit 1/second -j LOG --A logdrop-108 -j DROP --A logdrop-109 -m limit --limit 1/second -j LOG --A logdrop-109 -j DROP --A logdrop-11 -m limit --limit 1/second -j LOG --A logdrop-11 -j DROP --A logdrop-110 -m limit --limit 1/second -j LOG --A logdrop-110 -j DROP --A logdrop-111 -m limit --limit 1/second -j LOG --A logdrop-111 -j DROP --A logdrop-112 -m limit --limit 1/second -j LOG --A logdrop-112 -j DROP --A logdrop-113 -m limit --limit 1/second -j LOG --A logdrop-113 -j DROP --A logdrop-114 -m limit --limit 1/second -j LOG --A logdrop-114 -j DROP --A logdrop-115 -m limit --limit 1/second -j LOG --A logdrop-115 -j DROP --A logdrop-116 -m limit --limit 1/second -j LOG --A logdrop-116 -j DROP --A logdrop-117 -m limit --limit 1/second -j LOG --A logdrop-117 -j DROP --A logdrop-118 -m limit --limit 1/second -j LOG --A logdrop-118 -j DROP --A logdrop-119 -m limit --limit 1/second -j LOG --A logdrop-119 -j DROP --A logdrop-12 -m limit --limit 1/second -j LOG --A logdrop-12 -j DROP --A logdrop-120 -m limit --limit 1/second -j LOG --A logdrop-120 -j DROP --A logdrop-121 -m limit --limit 1/second -j LOG --A logdrop-121 -j DROP --A logdrop-122 -m limit --limit 1/second -j LOG --A logdrop-122 -j DROP --A logdrop-123 -m limit --limit 1/second -j LOG --A logdrop-123 -j DROP --A logdrop-124 -m limit --limit 1/second -j LOG --A logdrop-124 -j DROP --A logdrop-125 -m limit --limit 1/second -j LOG --A logdrop-125 -j DROP --A logdrop-126 -m limit --limit 1/second -j LOG --A logdrop-126 -j DROP --A logdrop-127 -m limit --limit 1/second -j LOG --A logdrop-127 -j DROP --A logdrop-128 -m limit --limit 1/second -j LOG --A logdrop-128 -j DROP --A logdrop-129 -m limit --limit 1/second -j LOG --A logdrop-129 -j DROP --A logdrop-13 -m limit --limit 1/second -j LOG --A logdrop-13 -j DROP --A logdrop-130 -m limit --limit 1/second -j LOG --A logdrop-130 -j DROP --A logdrop-131 -m limit --limit 1/second -j LOG --A logdrop-131 -j DROP --A logdrop-132 -m limit --limit 1/second -j LOG --A logdrop-132 -j DROP --A logdrop-133 -m limit --limit 1/second -j LOG --A logdrop-133 -j DROP --A logdrop-134 -m limit --limit 1/second -j LOG --A logdrop-134 -j DROP --A logdrop-135 -m limit --limit 1/second -j LOG --A logdrop-135 -j DROP --A logdrop-136 -m limit --limit 1/second -j LOG --A logdrop-136 -j DROP --A logdrop-137 -m limit --limit 1/second -j LOG --A logdrop-137 -j DROP --A logdrop-138 -m limit --limit 1/second -j LOG --A logdrop-138 -j DROP --A logdrop-139 -m limit --limit 1/second -j LOG --A logdrop-139 -j DROP --A logdrop-14 -m limit --limit 1/second -j LOG --A logdrop-14 -j DROP --A logdrop-140 -m limit --limit 1/second -j LOG --A logdrop-140 -j DROP --A logdrop-141 -m limit --limit 1/second -j LOG --A logdrop-141 -j DROP --A logdrop-142 -m limit --limit 1/second -j LOG --A logdrop-142 -j DROP --A logdrop-143 -m limit --limit 1/second -j LOG --A logdrop-143 -j DROP --A logdrop-144 -m limit --limit 1/second -j LOG --A logdrop-144 -j DROP --A logdrop-145 -m limit --limit 1/second -j LOG --A logdrop-145 -j DROP --A logdrop-146 -m limit --limit 1/second -j LOG --A logdrop-146 -j DROP --A logdrop-147 -m limit --limit 1/second -j LOG --A logdrop-147 -j DROP --A logdrop-148 -m limit --limit 1/second -j LOG --A logdrop-148 -j DROP --A logdrop-149 -m limit --limit 1/second -j LOG --A logdrop-149 -j DROP --A logdrop-15 -m limit --limit 1/second -j LOG --A logdrop-15 -j DROP --A logdrop-150 -m limit --limit 1/second -j LOG --A logdrop-150 -j DROP --A logdrop-151 -m limit --limit 1/second -j LOG --A logdrop-151 -j DROP --A logdrop-152 -m limit --limit 1/second -j LOG --A logdrop-152 -j DROP --A logdrop-153 -m limit --limit 1/second -j LOG --A logdrop-153 -j DROP --A logdrop-154 -m limit --limit 1/second -j LOG --A logdrop-154 -j DROP --A logdrop-155 -m limit --limit 1/second -j LOG --A logdrop-155 -j DROP --A logdrop-156 -m limit --limit 1/second -j LOG --A logdrop-156 -j DROP --A logdrop-157 -m limit --limit 1/second -j LOG --A logdrop-157 -j DROP --A logdrop-158 -m limit --limit 1/second -j LOG --A logdrop-158 -j DROP --A logdrop-159 -m limit --limit 1/second -j LOG --A logdrop-159 -j DROP --A logdrop-16 -m limit --limit 1/second -j LOG --A logdrop-16 -j DROP --A logdrop-160 -m limit --limit 1/second -j LOG --A logdrop-160 -j DROP --A logdrop-161 -m limit --limit 1/second -j LOG --A logdrop-161 -j DROP --A logdrop-162 -m limit --limit 1/second -j LOG --A logdrop-162 -j DROP --A logdrop-163 -m limit --limit 1/second -j LOG --A logdrop-163 -j DROP --A logdrop-164 -m limit --limit 1/second -j LOG --A logdrop-164 -j DROP --A logdrop-165 -m limit --limit 1/second -j LOG --A logdrop-165 -j DROP --A logdrop-166 -m limit --limit 1/second -j LOG --A logdrop-166 -j DROP --A logdrop-167 -m limit --limit 1/second -j LOG --A logdrop-167 -j DROP --A logdrop-168 -m limit --limit 1/second -j LOG --A logdrop-168 -j DROP --A logdrop-169 -m limit --limit 1/second -j LOG --A logdrop-169 -j DROP --A logdrop-17 -m limit --limit 1/second -j LOG --A logdrop-17 -j DROP --A logdrop-170 -m limit --limit 1/second -j LOG --A logdrop-170 -j DROP --A logdrop-171 -m limit --limit 1/second -j LOG --A logdrop-171 -j DROP --A logdrop-172 -m limit --limit 1/second -j LOG --A logdrop-172 -j DROP --A logdrop-173 -m limit --limit 1/second -j LOG --A logdrop-173 -j DROP --A logdrop-174 -m limit --limit 1/second -j LOG --A logdrop-174 -j DROP --A logdrop-175 -m limit --limit 1/second -j LOG --A logdrop-175 -j DROP --A logdrop-176 -m limit --limit 1/second -j LOG --A logdrop-176 -j DROP --A logdrop-177 -m limit --limit 1/second -j LOG --A logdrop-177 -j DROP --A logdrop-178 -m limit --limit 1/second -j LOG --A logdrop-178 -j DROP --A logdrop-179 -m limit --limit 1/second -j LOG --A logdrop-179 -j DROP --A logdrop-18 -m limit --limit 1/second -j LOG --A logdrop-18 -j DROP --A logdrop-180 -m limit --limit 1/second -j LOG --A logdrop-180 -j DROP --A logdrop-181 -m limit --limit 1/second -j LOG --A logdrop-181 -j DROP --A logdrop-182 -m limit --limit 1/second -j LOG --A logdrop-182 -j DROP --A logdrop-183 -m limit --limit 1/second -j LOG --A logdrop-183 -j DROP --A logdrop-184 -m limit --limit 1/second -j LOG --A logdrop-184 -j DROP --A logdrop-185 -m limit --limit 1/second -j LOG --A logdrop-185 -j DROP --A logdrop-186 -m limit --limit 1/second -j LOG --A logdrop-186 -j DROP --A logdrop-187 -m limit --limit 1/second -j LOG --A logdrop-187 -j DROP --A logdrop-188 -m limit --limit 1/second -j LOG --A logdrop-188 -j DROP --A logdrop-189 -m limit --limit 1/second -j LOG --A logdrop-189 -j DROP --A logdrop-19 -m limit --limit 1/second -j LOG --A logdrop-19 -j DROP --A logdrop-190 -m limit --limit 1/second -j LOG --A logdrop-190 -j DROP --A logdrop-191 -m limit --limit 1/second -j LOG --A logdrop-191 -j DROP --A logdrop-192 -m limit --limit 1/second -j LOG --A logdrop-192 -j DROP --A logdrop-193 -m limit --limit 1/second -j LOG --A logdrop-193 -j DROP --A logdrop-194 -m limit --limit 1/second -j LOG --A logdrop-194 -j DROP --A logdrop-195 -m limit --limit 1/second -j LOG --A logdrop-195 -j DROP --A logdrop-196 -m limit --limit 1/second -j LOG --A logdrop-196 -j DROP --A logdrop-197 -m limit --limit 1/second -j LOG --A logdrop-197 -j DROP --A logdrop-198 -m limit --limit 1/second -j LOG --A logdrop-198 -j DROP --A logdrop-199 -m limit --limit 1/second -j LOG --A logdrop-199 -j DROP --A logdrop-2 -m limit --limit 1/second -j LOG --A logdrop-2 -j DROP --A logdrop-20 -m limit --limit 1/second -j LOG --A logdrop-20 -j DROP --A logdrop-200 -m limit --limit 1/second -j LOG --A logdrop-200 -j DROP --A logdrop-201 -m limit --limit 1/second -j LOG --A logdrop-201 -j DROP --A logdrop-202 -m limit --limit 1/second -j LOG --A logdrop-202 -j DROP --A logdrop-203 -m limit --limit 1/second -j LOG --A logdrop-203 -j DROP --A logdrop-204 -m limit --limit 1/second -j LOG --A logdrop-204 -j DROP --A logdrop-205 -m limit --limit 1/second -j LOG --A logdrop-205 -j DROP --A logdrop-206 -m limit --limit 1/second -j LOG --A logdrop-206 -j DROP --A logdrop-207 -m limit --limit 1/second -j LOG --A logdrop-207 -j DROP --A logdrop-208 -m limit --limit 1/second -j LOG --A logdrop-208 -j DROP --A logdrop-209 -m limit --limit 1/second -j LOG --A logdrop-209 -j DROP --A logdrop-21 -m limit --limit 1/second -j LOG --A logdrop-21 -j DROP --A logdrop-210 -m limit --limit 1/second -j LOG --A logdrop-210 -j DROP --A logdrop-211 -m limit --limit 1/second -j LOG --A logdrop-211 -j DROP --A logdrop-212 -m limit --limit 1/second -j LOG --A logdrop-212 -j DROP --A logdrop-213 -m limit --limit 1/second -j LOG --A logdrop-213 -j DROP --A logdrop-214 -m limit --limit 1/second -j LOG --A logdrop-214 -j DROP --A logdrop-215 -m limit --limit 1/second -j LOG --A logdrop-215 -j DROP --A logdrop-216 -m limit --limit 1/second -j LOG --A logdrop-216 -j DROP --A logdrop-217 -m limit --limit 1/second -j LOG --A logdrop-217 -j DROP --A logdrop-218 -m limit --limit 1/second -j LOG --A logdrop-218 -j DROP --A logdrop-219 -m limit --limit 1/second -j LOG --A logdrop-219 -j DROP --A logdrop-22 -m limit --limit 1/second -j LOG --A logdrop-22 -j DROP --A logdrop-220 -m limit --limit 1/second -j LOG --A logdrop-220 -j DROP --A logdrop-221 -m limit --limit 1/second -j LOG --A logdrop-221 -j DROP --A logdrop-222 -m limit --limit 1/second -j LOG --A logdrop-222 -j DROP --A logdrop-223 -m limit --limit 1/second -j LOG --A logdrop-223 -j DROP --A logdrop-224 -m limit --limit 1/second -j LOG --A logdrop-224 -j DROP --A logdrop-225 -m limit --limit 1/second -j LOG --A logdrop-225 -j DROP --A logdrop-226 -m limit --limit 1/second -j LOG --A logdrop-226 -j DROP --A logdrop-227 -m limit --limit 1/second -j LOG --A logdrop-227 -j DROP --A logdrop-228 -m limit --limit 1/second -j LOG --A logdrop-228 -j DROP --A logdrop-229 -m limit --limit 1/second -j LOG --A logdrop-229 -j DROP --A logdrop-23 -m limit --limit 1/second -j LOG --A logdrop-23 -j DROP --A logdrop-230 -m limit --limit 1/second -j LOG --A logdrop-230 -j DROP --A logdrop-231 -m limit --limit 1/second -j LOG --A logdrop-231 -j DROP --A logdrop-232 -m limit --limit 1/second -j LOG --A logdrop-232 -j DROP --A logdrop-233 -m limit --limit 1/second -j LOG --A logdrop-233 -j DROP --A logdrop-234 -m limit --limit 1/second -j LOG --A logdrop-234 -j DROP --A logdrop-235 -m limit --limit 1/second -j LOG --A logdrop-235 -j DROP --A logdrop-236 -m limit --limit 1/second -j LOG --A logdrop-236 -j DROP --A logdrop-237 -m limit --limit 1/second -j LOG --A logdrop-237 -j DROP --A logdrop-238 -m limit --limit 1/second -j LOG --A logdrop-238 -j DROP --A logdrop-239 -m limit --limit 1/second -j LOG --A logdrop-239 -j DROP --A logdrop-24 -m limit --limit 1/second -j LOG --A logdrop-24 -j DROP --A logdrop-240 -m limit --limit 1/second -j LOG --A logdrop-240 -j DROP --A logdrop-241 -m limit --limit 1/second -j LOG --A logdrop-241 -j DROP --A logdrop-242 -m limit --limit 1/second -j LOG --A logdrop-242 -j DROP --A logdrop-243 -m limit --limit 1/second -j LOG --A logdrop-243 -j DROP --A logdrop-244 -m limit --limit 1/second -j LOG --A logdrop-244 -j DROP --A logdrop-245 -m limit --limit 1/second -j LOG --A logdrop-245 -j DROP --A logdrop-246 -m limit --limit 1/second -j LOG --A logdrop-246 -j DROP --A logdrop-247 -m limit --limit 1/second -j LOG --A logdrop-247 -j DROP --A logdrop-248 -m limit --limit 1/second -j LOG --A logdrop-248 -j DROP --A logdrop-249 -m limit --limit 1/second -j LOG --A logdrop-249 -j DROP --A logdrop-25 -m limit --limit 1/second -j LOG --A logdrop-25 -j DROP --A logdrop-250 -m limit --limit 1/second -j LOG --A logdrop-250 -j DROP --A logdrop-251 -m limit --limit 1/second -j LOG --A logdrop-251 -j DROP --A logdrop-252 -m limit --limit 1/second -j LOG --A logdrop-252 -j DROP --A logdrop-253 -m limit --limit 1/second -j LOG --A logdrop-253 -j DROP --A logdrop-254 -m limit --limit 1/second -j LOG --A logdrop-254 -j DROP --A logdrop-255 -m limit --limit 1/second -j LOG --A logdrop-255 -j DROP --A logdrop-256 -m limit --limit 1/second -j LOG --A logdrop-256 -j DROP --A logdrop-257 -m limit --limit 1/second -j LOG --A logdrop-257 -j DROP --A logdrop-258 -m limit --limit 1/second -j LOG --A logdrop-258 -j DROP --A logdrop-259 -m limit --limit 1/second -j LOG --A logdrop-259 -j DROP --A logdrop-26 -m limit --limit 1/second -j LOG --A logdrop-26 -j DROP --A logdrop-260 -m limit --limit 1/second -j LOG --A logdrop-260 -j DROP --A logdrop-261 -m limit --limit 1/second -j LOG --A logdrop-261 -j DROP --A logdrop-262 -m limit --limit 1/second -j LOG --A logdrop-262 -j DROP --A logdrop-263 -m limit --limit 1/second -j LOG --A logdrop-263 -j DROP --A logdrop-264 -m limit --limit 1/second -j LOG --A logdrop-264 -j DROP --A logdrop-265 -m limit --limit 1/second -j LOG --A logdrop-265 -j DROP --A logdrop-266 -m limit --limit 1/second -j LOG --A logdrop-266 -j DROP --A logdrop-267 -m limit --limit 1/second -j LOG --A logdrop-267 -j DROP --A logdrop-268 -m limit --limit 1/second -j LOG --A logdrop-268 -j DROP --A logdrop-269 -m limit --limit 1/second -j LOG --A logdrop-269 -j DROP --A logdrop-27 -m limit --limit 1/second -j LOG --A logdrop-27 -j DROP --A logdrop-270 -m limit --limit 1/second -j LOG --A logdrop-270 -j DROP --A logdrop-271 -m limit --limit 1/second -j LOG --A logdrop-271 -j DROP --A logdrop-272 -m limit --limit 1/second -j LOG --A logdrop-272 -j DROP --A logdrop-273 -m limit --limit 1/second -j LOG --A logdrop-273 -j DROP --A logdrop-274 -m limit --limit 1/second -j LOG --A logdrop-274 -j DROP --A logdrop-275 -m limit --limit 1/second -j LOG --A logdrop-275 -j DROP --A logdrop-276 -m limit --limit 1/second -j LOG --A logdrop-276 -j DROP --A logdrop-277 -m limit --limit 1/second -j LOG --A logdrop-277 -j DROP --A logdrop-278 -m limit --limit 1/second -j LOG --A logdrop-278 -j DROP --A logdrop-279 -m limit --limit 1/second -j LOG --A logdrop-279 -j DROP --A logdrop-28 -m limit --limit 1/second -j LOG --A logdrop-28 -j DROP --A logdrop-280 -m limit --limit 1/second -j LOG --A logdrop-280 -j DROP --A logdrop-281 -m limit --limit 1/second -j LOG --A logdrop-281 -j DROP --A logdrop-282 -m limit --limit 1/second -j LOG --A logdrop-282 -j DROP --A logdrop-283 -m limit --limit 1/second -j LOG --A logdrop-283 -j DROP --A logdrop-284 -m limit --limit 1/second -j LOG --A logdrop-284 -j DROP --A logdrop-285 -m limit --limit 1/second -j LOG --A logdrop-285 -j DROP --A logdrop-286 -m limit --limit 1/second -j LOG --A logdrop-286 -j DROP --A logdrop-287 -m limit --limit 1/second -j LOG --A logdrop-287 -j DROP --A logdrop-288 -m limit --limit 1/second -j LOG --A logdrop-288 -j DROP --A logdrop-289 -m limit --limit 1/second -j LOG --A logdrop-289 -j DROP --A logdrop-29 -m limit --limit 1/second -j LOG --A logdrop-29 -j DROP --A logdrop-290 -m limit --limit 1/second -j LOG --A logdrop-290 -j DROP --A logdrop-291 -m limit --limit 1/second -j LOG --A logdrop-291 -j DROP --A logdrop-292 -m limit --limit 1/second -j LOG --A logdrop-292 -j DROP --A logdrop-293 -m limit --limit 1/second -j LOG --A logdrop-293 -j DROP --A logdrop-294 -m limit --limit 1/second -j LOG --A logdrop-294 -j DROP --A logdrop-295 -m limit --limit 1/second -j LOG --A logdrop-295 -j DROP --A logdrop-296 -m limit --limit 1/second -j LOG --A logdrop-296 -j DROP --A logdrop-297 -m limit --limit 1/second -j LOG --A logdrop-297 -j DROP --A logdrop-298 -m limit --limit 1/second -j LOG --A logdrop-298 -j DROP --A logdrop-299 -m limit --limit 1/second -j LOG --A logdrop-299 -j DROP --A logdrop-3 -m limit --limit 1/second -j LOG --A logdrop-3 -j DROP --A logdrop-30 -m limit --limit 1/second -j LOG --A logdrop-30 -j DROP --A logdrop-300 -m limit --limit 1/second -j LOG --A logdrop-300 -j DROP --A logdrop-301 -m limit --limit 1/second -j LOG --A logdrop-301 -j DROP --A logdrop-302 -m limit --limit 1/second -j LOG --A logdrop-302 -j DROP --A logdrop-303 -m limit --limit 1/second -j LOG --A logdrop-303 -j DROP --A logdrop-304 -m limit --limit 1/second -j LOG --A logdrop-304 -j DROP --A logdrop-305 -m limit --limit 1/second -j LOG --A logdrop-305 -j DROP --A logdrop-306 -m limit --limit 1/second -j LOG --A logdrop-306 -j DROP --A logdrop-307 -m limit --limit 1/second -j LOG --A logdrop-307 -j DROP --A logdrop-308 -m limit --limit 1/second -j LOG --A logdrop-308 -j DROP --A logdrop-309 -m limit --limit 1/second -j LOG --A logdrop-309 -j DROP --A logdrop-31 -m limit --limit 1/second -j LOG --A logdrop-31 -j DROP --A logdrop-310 -m limit --limit 1/second -j LOG --A logdrop-310 -j DROP --A logdrop-311 -m limit --limit 1/second -j LOG --A logdrop-311 -j DROP --A logdrop-312 -m limit --limit 1/second -j LOG --A logdrop-312 -j DROP --A logdrop-313 -m limit --limit 1/second -j LOG --A logdrop-313 -j DROP --A logdrop-314 -m limit --limit 1/second -j LOG --A logdrop-314 -j DROP --A logdrop-315 -m limit --limit 1/second -j LOG --A logdrop-315 -j DROP --A logdrop-316 -m limit --limit 1/second -j LOG --A logdrop-316 -j DROP --A logdrop-317 -m limit --limit 1/second -j LOG --A logdrop-317 -j DROP --A logdrop-318 -m limit --limit 1/second -j LOG --A logdrop-318 -j DROP --A logdrop-319 -m limit --limit 1/second -j LOG --A logdrop-319 -j DROP --A logdrop-32 -m limit --limit 1/second -j LOG --A logdrop-32 -j DROP --A logdrop-320 -m limit --limit 1/second -j LOG --A logdrop-320 -j DROP --A logdrop-321 -m limit --limit 1/second -j LOG --A logdrop-321 -j DROP --A logdrop-322 -m limit --limit 1/second -j LOG --A logdrop-322 -j DROP --A logdrop-323 -m limit --limit 1/second -j LOG --A logdrop-323 -j DROP --A logdrop-324 -m limit --limit 1/second -j LOG --A logdrop-324 -j DROP --A logdrop-325 -m limit --limit 1/second -j LOG --A logdrop-325 -j DROP --A logdrop-326 -m limit --limit 1/second -j LOG --A logdrop-326 -j DROP --A logdrop-327 -m limit --limit 1/second -j LOG --A logdrop-327 -j DROP --A logdrop-328 -m limit --limit 1/second -j LOG --A logdrop-328 -j DROP --A logdrop-329 -m limit --limit 1/second -j LOG --A logdrop-329 -j DROP --A logdrop-33 -m limit --limit 1/second -j LOG --A logdrop-33 -j DROP --A logdrop-330 -m limit --limit 1/second -j LOG --A logdrop-330 -j DROP --A logdrop-331 -m limit --limit 1/second -j LOG --A logdrop-331 -j DROP --A logdrop-332 -m limit --limit 1/second -j LOG --A logdrop-332 -j DROP --A logdrop-333 -m limit --limit 1/second -j LOG --A logdrop-333 -j DROP --A logdrop-334 -m limit --limit 1/second -j LOG --A logdrop-334 -j DROP --A logdrop-335 -m limit --limit 1/second -j LOG --A logdrop-335 -j DROP --A logdrop-336 -m limit --limit 1/second -j LOG --A logdrop-336 -j DROP --A logdrop-337 -m limit --limit 1/second -j LOG --A logdrop-337 -j DROP --A logdrop-338 -m limit --limit 1/second -j LOG --A logdrop-338 -j DROP --A logdrop-339 -m limit --limit 1/second -j LOG --A logdrop-339 -j DROP --A logdrop-34 -m limit --limit 1/second -j LOG --A logdrop-34 -j DROP --A logdrop-340 -m limit --limit 1/second -j LOG --A logdrop-340 -j DROP --A logdrop-341 -m limit --limit 1/second -j LOG --A logdrop-341 -j DROP --A logdrop-342 -m limit --limit 1/second -j LOG --A logdrop-342 -j DROP --A logdrop-343 -m limit --limit 1/second -j LOG --A logdrop-343 -j DROP --A logdrop-344 -m limit --limit 1/second -j LOG --A logdrop-344 -j DROP --A logdrop-345 -m limit --limit 1/second -j LOG --A logdrop-345 -j DROP --A logdrop-346 -m limit --limit 1/second -j LOG --A logdrop-346 -j DROP --A logdrop-347 -m limit --limit 1/second -j LOG --A logdrop-347 -j DROP --A logdrop-348 -m limit --limit 1/second -j LOG --A logdrop-348 -j DROP --A logdrop-349 -m limit --limit 1/second -j LOG --A logdrop-349 -j DROP --A logdrop-35 -m limit --limit 1/second -j LOG --A logdrop-35 -j DROP --A logdrop-350 -m limit --limit 1/second -j LOG --A logdrop-350 -j DROP --A logdrop-351 -m limit --limit 1/second -j LOG --A logdrop-351 -j DROP --A logdrop-352 -m limit --limit 1/second -j LOG --A logdrop-352 -j DROP --A logdrop-353 -m limit --limit 1/second -j LOG --A logdrop-353 -j DROP --A logdrop-354 -m limit --limit 1/second -j LOG --A logdrop-354 -j DROP --A logdrop-355 -m limit --limit 1/second -j LOG --A logdrop-355 -j DROP --A logdrop-356 -m limit --limit 1/second -j LOG --A logdrop-356 -j DROP --A logdrop-357 -m limit --limit 1/second -j LOG --A logdrop-357 -j DROP --A logdrop-358 -m limit --limit 1/second -j LOG --A logdrop-358 -j DROP --A logdrop-359 -m limit --limit 1/second -j LOG --A logdrop-359 -j DROP --A logdrop-36 -m limit --limit 1/second -j LOG --A logdrop-36 -j DROP --A logdrop-360 -m limit --limit 1/second -j LOG --A logdrop-360 -j DROP --A logdrop-361 -m limit --limit 1/second -j LOG --A logdrop-361 -j DROP --A logdrop-362 -m limit --limit 1/second -j LOG --A logdrop-362 -j DROP --A logdrop-363 -m limit --limit 1/second -j LOG --A logdrop-363 -j DROP --A logdrop-364 -m limit --limit 1/second -j LOG --A logdrop-364 -j DROP --A logdrop-365 -m limit --limit 1/second -j LOG --A logdrop-365 -j DROP --A logdrop-366 -m limit --limit 1/second -j LOG --A logdrop-366 -j DROP --A logdrop-367 -m limit --limit 1/second -j LOG --A logdrop-367 -j DROP --A logdrop-368 -m limit --limit 1/second -j LOG --A logdrop-368 -j DROP --A logdrop-369 -m limit --limit 1/second -j LOG --A logdrop-369 -j DROP --A logdrop-37 -m limit --limit 1/second -j LOG --A logdrop-37 -j DROP --A logdrop-370 -m limit --limit 1/second -j LOG --A logdrop-370 -j DROP --A logdrop-371 -m limit --limit 1/second -j LOG --A logdrop-371 -j DROP --A logdrop-372 -m limit --limit 1/second -j LOG --A logdrop-372 -j DROP --A logdrop-373 -m limit --limit 1/second -j LOG --A logdrop-373 -j DROP --A logdrop-374 -m limit --limit 1/second -j LOG --A logdrop-374 -j DROP --A logdrop-375 -m limit --limit 1/second -j LOG --A logdrop-375 -j DROP --A logdrop-376 -m limit --limit 1/second -j LOG --A logdrop-376 -j DROP --A logdrop-377 -m limit --limit 1/second -j LOG --A logdrop-377 -j DROP --A logdrop-378 -m limit --limit 1/second -j LOG --A logdrop-378 -j DROP --A logdrop-379 -m limit --limit 1/second -j LOG --A logdrop-379 -j DROP --A logdrop-38 -m limit --limit 1/second -j LOG --A logdrop-38 -j DROP --A logdrop-380 -m limit --limit 1/second -j LOG --A logdrop-380 -j DROP --A logdrop-381 -m limit --limit 1/second -j LOG --A logdrop-381 -j DROP --A logdrop-382 -m limit --limit 1/second -j LOG --A logdrop-382 -j DROP --A logdrop-383 -m limit --limit 1/second -j LOG --A logdrop-383 -j DROP --A logdrop-384 -m limit --limit 1/second -j LOG --A logdrop-384 -j DROP --A logdrop-385 -m limit --limit 1/second -j LOG --A logdrop-385 -j DROP --A logdrop-386 -m limit --limit 1/second -j LOG --A logdrop-386 -j DROP --A logdrop-387 -m limit --limit 1/second -j LOG --A logdrop-387 -j DROP --A logdrop-388 -m limit --limit 1/second -j LOG --A logdrop-388 -j DROP --A logdrop-389 -m limit --limit 1/second -j LOG --A logdrop-389 -j DROP --A logdrop-39 -m limit --limit 1/second -j LOG --A logdrop-39 -j DROP --A logdrop-390 -m limit --limit 1/second -j LOG --A logdrop-390 -j DROP --A logdrop-391 -m limit --limit 1/second -j LOG --A logdrop-391 -j DROP --A logdrop-392 -m limit --limit 1/second -j LOG --A logdrop-392 -j DROP --A logdrop-393 -m limit --limit 1/second -j LOG --A logdrop-393 -j DROP --A logdrop-394 -m limit --limit 1/second -j LOG --A logdrop-394 -j DROP --A logdrop-395 -m limit --limit 1/second -j LOG --A logdrop-395 -j DROP --A logdrop-396 -m limit --limit 1/second -j LOG --A logdrop-396 -j DROP --A logdrop-397 -m limit --limit 1/second -j LOG --A logdrop-397 -j DROP --A logdrop-398 -m limit --limit 1/second -j LOG --A logdrop-398 -j DROP --A logdrop-399 -m limit --limit 1/second -j LOG --A logdrop-399 -j DROP --A logdrop-4 -m limit --limit 1/second -j LOG --A logdrop-4 -j DROP --A logdrop-40 -m limit --limit 1/second -j LOG --A logdrop-40 -j DROP --A logdrop-400 -m limit --limit 1/second -j LOG --A logdrop-400 -j DROP --A logdrop-401 -m limit --limit 1/second -j LOG --A logdrop-401 -j DROP --A logdrop-402 -m limit --limit 1/second -j LOG --A logdrop-402 -j DROP --A logdrop-403 -m limit --limit 1/second -j LOG --A logdrop-403 -j DROP --A logdrop-404 -m limit --limit 1/second -j LOG --A logdrop-404 -j DROP --A logdrop-405 -m limit --limit 1/second -j LOG --A logdrop-405 -j DROP --A logdrop-406 -m limit --limit 1/second -j LOG --A logdrop-406 -j DROP --A logdrop-407 -m limit --limit 1/second -j LOG --A logdrop-407 -j DROP --A logdrop-408 -m limit --limit 1/second -j LOG --A logdrop-408 -j DROP --A logdrop-409 -m limit --limit 1/second -j LOG --A logdrop-409 -j DROP --A logdrop-41 -m limit --limit 1/second -j LOG --A logdrop-41 -j DROP --A logdrop-410 -m limit --limit 1/second -j LOG --A logdrop-410 -j DROP --A logdrop-411 -m limit --limit 1/second -j LOG --A logdrop-411 -j DROP --A logdrop-412 -m limit --limit 1/second -j LOG --A logdrop-412 -j DROP --A logdrop-413 -m limit --limit 1/second -j LOG --A logdrop-413 -j DROP --A logdrop-414 -m limit --limit 1/second -j LOG --A logdrop-414 -j DROP --A logdrop-415 -m limit --limit 1/second -j LOG --A logdrop-415 -j DROP --A logdrop-416 -m limit --limit 1/second -j LOG --A logdrop-416 -j DROP --A logdrop-417 -m limit --limit 1/second -j LOG --A logdrop-417 -j DROP --A logdrop-418 -m limit --limit 1/second -j LOG --A logdrop-418 -j DROP --A logdrop-419 -m limit --limit 1/second -j LOG --A logdrop-419 -j DROP --A logdrop-42 -m limit --limit 1/second -j LOG --A logdrop-42 -j DROP --A logdrop-420 -m limit --limit 1/second -j LOG --A logdrop-420 -j DROP --A logdrop-421 -m limit --limit 1/second -j LOG --A logdrop-421 -j DROP --A logdrop-422 -m limit --limit 1/second -j LOG --A logdrop-422 -j DROP --A logdrop-423 -m limit --limit 1/second -j LOG --A logdrop-423 -j DROP --A logdrop-424 -m limit --limit 1/second -j LOG --A logdrop-424 -j DROP --A logdrop-425 -m limit --limit 1/second -j LOG --A logdrop-425 -j DROP --A logdrop-426 -m limit --limit 1/second -j LOG --A logdrop-426 -j DROP --A logdrop-427 -m limit --limit 1/second -j LOG --A logdrop-427 -j DROP --A logdrop-428 -m limit --limit 1/second -j LOG --A logdrop-428 -j DROP --A logdrop-429 -m limit --limit 1/second -j LOG --A logdrop-429 -j DROP --A logdrop-43 -m limit --limit 1/second -j LOG --A logdrop-43 -j DROP --A logdrop-430 -m limit --limit 1/second -j LOG --A logdrop-430 -j DROP --A logdrop-431 -m limit --limit 1/second -j LOG --A logdrop-431 -j DROP --A logdrop-432 -m limit --limit 1/second -j LOG --A logdrop-432 -j DROP --A logdrop-433 -m limit --limit 1/second -j LOG --A logdrop-433 -j DROP --A logdrop-434 -m limit --limit 1/second -j LOG --A logdrop-434 -j DROP --A logdrop-435 -m limit --limit 1/second -j LOG --A logdrop-435 -j DROP --A logdrop-436 -m limit --limit 1/second -j LOG --A logdrop-436 -j DROP --A logdrop-437 -m limit --limit 1/second -j LOG --A logdrop-437 -j DROP --A logdrop-438 -m limit --limit 1/second -j LOG --A logdrop-438 -j DROP --A logdrop-439 -m limit --limit 1/second -j LOG --A logdrop-439 -j DROP --A logdrop-44 -m limit --limit 1/second -j LOG --A logdrop-44 -j DROP --A logdrop-440 -m limit --limit 1/second -j LOG --A logdrop-440 -j DROP --A logdrop-441 -m limit --limit 1/second -j LOG --A logdrop-441 -j DROP --A logdrop-442 -m limit --limit 1/second -j LOG --A logdrop-442 -j DROP --A logdrop-443 -m limit --limit 1/second -j LOG --A logdrop-443 -j DROP --A logdrop-444 -m limit --limit 1/second -j LOG --A logdrop-444 -j DROP --A logdrop-445 -m limit --limit 1/second -j LOG --A logdrop-445 -j DROP --A logdrop-446 -m limit --limit 1/second -j LOG --A logdrop-446 -j DROP --A logdrop-447 -m limit --limit 1/second -j LOG --A logdrop-447 -j DROP --A logdrop-448 -m limit --limit 1/second -j LOG --A logdrop-448 -j DROP --A logdrop-449 -m limit --limit 1/second -j LOG --A logdrop-449 -j DROP --A logdrop-45 -m limit --limit 1/second -j LOG --A logdrop-45 -j DROP --A logdrop-450 -m limit --limit 1/second -j LOG --A logdrop-450 -j DROP --A logdrop-451 -m limit --limit 1/second -j LOG --A logdrop-451 -j DROP --A logdrop-452 -m limit --limit 1/second -j LOG --A logdrop-452 -j DROP --A logdrop-453 -m limit --limit 1/second -j LOG --A logdrop-453 -j DROP --A logdrop-454 -m limit --limit 1/second -j LOG --A logdrop-454 -j DROP --A logdrop-455 -m limit --limit 1/second -j LOG --A logdrop-455 -j DROP --A logdrop-456 -m limit --limit 1/second -j LOG --A logdrop-456 -j DROP --A logdrop-457 -m limit --limit 1/second -j LOG --A logdrop-457 -j DROP --A logdrop-458 -m limit --limit 1/second -j LOG --A logdrop-458 -j DROP --A logdrop-46 -m limit --limit 1/second -j LOG --A logdrop-46 -j DROP --A logdrop-47 -m limit --limit 1/second -j LOG --A logdrop-47 -j DROP --A logdrop-48 -m limit --limit 1/second -j LOG --A logdrop-48 -j DROP --A logdrop-49 -m limit --limit 1/second -j LOG --A logdrop-49 -j DROP --A logdrop-5 -m limit --limit 1/second -j LOG --A logdrop-5 -j DROP --A logdrop-50 -m limit --limit 1/second -j LOG --A logdrop-50 -j DROP --A logdrop-51 -m limit --limit 1/second -j LOG --A logdrop-51 -j DROP --A logdrop-52 -m limit --limit 1/second -j LOG --A logdrop-52 -j DROP --A logdrop-53 -m limit --limit 1/second -j LOG --A logdrop-53 -j DROP --A logdrop-54 -m limit --limit 1/second -j LOG --A logdrop-54 -j DROP --A logdrop-55 -m limit --limit 1/second -j LOG --A logdrop-55 -j DROP --A logdrop-56 -m limit --limit 1/second -j LOG --A logdrop-56 -j DROP --A logdrop-57 -m limit --limit 1/second -j LOG --A logdrop-57 -j DROP --A logdrop-58 -m limit --limit 1/second -j LOG --A logdrop-58 -j DROP --A logdrop-59 -m limit --limit 1/second -j LOG --A logdrop-59 -j DROP --A logdrop-6 -m limit --limit 1/second -j LOG --A logdrop-6 -j DROP --A logdrop-60 -m limit --limit 1/second -j LOG --A logdrop-60 -j DROP --A logdrop-61 -m limit --limit 1/second -j LOG --A logdrop-61 -j DROP --A logdrop-62 -m limit --limit 1/second -j LOG --A logdrop-62 -j DROP --A logdrop-63 -m limit --limit 1/second -j LOG --A logdrop-63 -j DROP --A logdrop-64 -m limit --limit 1/second -j LOG --A logdrop-64 -j DROP --A logdrop-65 -m limit --limit 1/second -j LOG --A logdrop-65 -j DROP --A logdrop-66 -m limit --limit 1/second -j LOG --A logdrop-66 -j DROP --A logdrop-67 -m limit --limit 1/second -j LOG --A logdrop-67 -j DROP --A logdrop-68 -m limit --limit 1/second -j LOG --A logdrop-68 -j DROP --A logdrop-69 -m limit --limit 1/second -j LOG --A logdrop-69 -j DROP --A logdrop-7 -m limit --limit 1/second -j LOG --A logdrop-7 -j DROP --A logdrop-70 -m limit --limit 1/second -j LOG --A logdrop-70 -j DROP --A logdrop-71 -m limit --limit 1/second -j LOG --A logdrop-71 -j DROP --A logdrop-72 -m limit --limit 1/second -j LOG --A logdrop-72 -j DROP --A logdrop-73 -m limit --limit 1/second -j LOG --A logdrop-73 -j DROP --A logdrop-74 -m limit --limit 1/second -j LOG --A logdrop-74 -j DROP --A logdrop-75 -m limit --limit 1/second -j LOG --A logdrop-75 -j DROP --A logdrop-76 -m limit --limit 1/second -j LOG --A logdrop-76 -j DROP --A logdrop-77 -m limit --limit 1/second -j LOG --A logdrop-77 -j DROP --A logdrop-78 -m limit --limit 1/second -j LOG --A logdrop-78 -j DROP --A logdrop-79 -m limit --limit 1/second -j LOG --A logdrop-79 -j DROP --A logdrop-8 -m limit --limit 1/second -j LOG --A logdrop-8 -j DROP --A logdrop-80 -m limit --limit 1/second -j LOG --A logdrop-80 -j DROP --A logdrop-81 -m limit --limit 1/second -j LOG --A logdrop-81 -j DROP --A logdrop-82 -m limit --limit 1/second -j LOG --A logdrop-82 -j DROP --A logdrop-83 -m limit --limit 1/second -j LOG --A logdrop-83 -j DROP --A logdrop-84 -m limit --limit 1/second -j LOG --A logdrop-84 -j DROP --A logdrop-85 -m limit --limit 1/second -j LOG --A logdrop-85 -j DROP --A logdrop-86 -m limit --limit 1/second -j LOG --A logdrop-86 -j DROP --A logdrop-87 -m limit --limit 1/second -j LOG --A logdrop-87 -j DROP --A logdrop-88 -m limit --limit 1/second -j LOG --A logdrop-88 -j DROP --A logdrop-89 -m limit --limit 1/second -j LOG --A logdrop-89 -j DROP --A logdrop-9 -m limit --limit 1/second -j LOG --A logdrop-9 -j DROP --A logdrop-90 -m limit --limit 1/second -j LOG --A logdrop-90 -j DROP --A logdrop-91 -m limit --limit 1/second -j LOG --A logdrop-91 -j DROP --A logdrop-92 -m limit --limit 1/second -j LOG --A logdrop-92 -j DROP --A logdrop-93 -m limit --limit 1/second -j LOG --A logdrop-93 -j DROP --A logdrop-94 -m limit --limit 1/second -j LOG --A logdrop-94 -j DROP --A logdrop-95 -m limit --limit 1/second -j LOG --A logdrop-95 -j DROP --A logdrop-96 -m limit --limit 1/second -j LOG --A logdrop-96 -j DROP --A logdrop-97 -m limit --limit 1/second -j LOG --A logdrop-97 -j DROP --A logdrop-98 -m limit --limit 1/second -j LOG --A logdrop-98 -j DROP --A logdrop-99 -m limit --limit 1/second -j LOG --A logdrop-99 -j DROP --A logpass-0 -m limit --limit 1/second -j LOG --A logpass-1 -m limit --limit 1/second -j LOG --A logpass-10 -m limit --limit 1/second -j LOG --A logpass-11 -m limit --limit 1/second -j LOG --A logpass-12 -m limit --limit 1/second -j LOG --A logpass-13 -m limit --limit 1/second -j LOG --A logpass-14 -m limit --limit 1/second -j LOG --A logpass-15 -m limit --limit 1/second -j LOG --A logpass-16 -m limit --limit 1/second -j LOG --A logpass-17 -m limit --limit 1/second -j LOG --A logpass-18 -m limit --limit 1/second -j LOG --A logpass-19 -m limit --limit 1/second -j LOG --A logpass-2 -m limit --limit 1/second -j LOG --A logpass-20 -m limit --limit 1/second -j LOG --A logpass-21 -m limit --limit 1/second -j LOG --A logpass-22 -m limit --limit 1/second -j LOG --A logpass-23 -m limit --limit 1/second -j LOG --A logpass-24 -m limit --limit 1/second -j LOG --A logpass-25 -m limit --limit 1/second -j LOG --A logpass-26 -m limit --limit 1/second -j LOG --A logpass-27 -m limit --limit 1/second -j LOG --A logpass-28 -m limit --limit 1/second -j LOG --A logpass-29 -m limit --limit 1/second -j LOG --A logpass-3 -m limit --limit 1/second -j LOG --A logpass-30 -m limit --limit 1/second -j LOG --A logpass-31 -m limit --limit 1/second -j LOG --A logpass-32 -m limit --limit 1/second -j LOG --A logpass-33 -m limit --limit 1/second -j LOG --A logpass-34 -m limit --limit 1/second -j LOG --A logpass-35 -m limit --limit 1/second -j LOG --A logpass-36 -m limit --limit 1/second -j LOG --A logpass-37 -m limit --limit 1/second -j LOG --A logpass-38 -m limit --limit 1/second -j LOG --A logpass-39 -m limit --limit 1/second -j LOG --A logpass-4 -m limit --limit 1/second -j LOG --A logpass-40 -m limit --limit 1/second -j LOG --A logpass-41 -m limit --limit 1/second -j LOG --A logpass-42 -m limit --limit 1/second -j LOG --A logpass-43 -m limit --limit 1/second -j LOG --A logpass-44 -m limit --limit 1/second -j LOG --A logpass-45 -m limit --limit 1/second -j LOG --A logpass-46 -m limit --limit 1/second -j LOG --A logpass-47 -m limit --limit 1/second -j LOG --A logpass-48 -m limit --limit 1/second -j LOG --A logpass-49 -m limit --limit 1/second -j LOG --A logpass-5 -m limit --limit 1/second -j LOG --A logpass-50 -m limit --limit 1/second -j LOG --A logpass-6 -m limit --limit 1/second -j LOG --A logpass-7 -m limit --limit 1/second -j LOG --A logpass-8 -m limit --limit 1/second -j LOG --A logpass-9 -m limit --limit 1/second -j LOG --A logreject-0 -m limit --limit 1/second -j LOG --A logreject-0 -j REJECT --A logtarpit-0 -m limit --limit 1/second -j LOG --A logtarpit-0 -j tarpit --A tarpit -p tcp -j TARPIT --A tarpit -j DROP -COMMIT -*mangle -:FORWARD ACCEPT [0:0] -:INPUT ACCEPT [0:0] -:OUTPUT ACCEPT [0:0] -:POSTROUTING ACCEPT [0:0] -:PREROUTING ACCEPT [0:0] --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 --A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 --A INPUT -j MARK --set-mark 2 --A OUTPUT -j MARK --set-mark 0 --A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 --A PREROUTING -i eth0 -j MARK --set-mark 0 -COMMIT -*nat -:INPUT ACCEPT [0:0] -:OUTPUT ACCEPT [0:0] -:POSTROUTING ACCEPT [0:0] -:PREROUTING ACCEPT [0:0] -:awall-masquerade - [0:0] --A INPUT -j MASQUERADE --A OUTPUT -j REDIRECT --A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE --A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade --A PREROUTING -i eth0 -j REDIRECT --A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT --A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE -COMMIT -*raw -:OUTPUT ACCEPT [0:0] -:PREROUTING ACCEPT [0:0] --A OUTPUT -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -p tcp --dport 80 -j CT --notrack --A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack --A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack --A OUTPUT -p esp -j CT --notrack --A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack --A OUTPUT -j CT --notrack --A PREROUTING -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack --A PREROUTING -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A PREROUTING -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A PREROUTING -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A PREROUTING -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A PREROUTING -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack --A PREROUTING -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack --A PREROUTING -i eth0 -j CT --notrack --A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack -COMMIT diff --git a/test/output/rules6-save b/test/output/rules6-save deleted file mode 100644 index d6c06d6..0000000 --- a/test/output/rules6-save +++ /dev/null @@ -1,9721 +0,0 @@ -# rules6-save generated by awall -*filter -:FORWARD DROP [0:0] -:INPUT DROP [0:0] -:OUTPUT DROP [0:0] -:icmp-routing - [0:0] -:limit-0 - [0:0] -:limit-1 - [0:0] -:limit-10 - [0:0] -:limit-100 - [0:0] -:limit-1000 - [0:0] -:limit-1001 - [0:0] -:limit-1002 - [0:0] -:limit-1003 - [0:0] -:limit-1004 - [0:0] -:limit-1005 - [0:0] -:limit-1006 - [0:0] -:limit-1007 - [0:0] -:limit-1008 - [0:0] -:limit-1009 - [0:0] -:limit-101 - [0:0] -:limit-1010 - [0:0] -:limit-1011 - [0:0] -:limit-1012 - [0:0] -:limit-1013 - [0:0] -:limit-1014 - [0:0] -:limit-1015 - [0:0] -:limit-1016 - [0:0] -:limit-1017 - [0:0] -:limit-1018 - [0:0] -:limit-1019 - [0:0] -:limit-102 - [0:0] -:limit-1020 - [0:0] -:limit-1021 - [0:0] -:limit-1022 - [0:0] -:limit-1023 - [0:0] -:limit-1024 - [0:0] -:limit-1025 - [0:0] -:limit-1026 - [0:0] -:limit-1027 - [0:0] -:limit-1028 - [0:0] -:limit-1029 - [0:0] -:limit-103 - [0:0] -:limit-1030 - [0:0] -:limit-1031 - [0:0] -:limit-1032 - [0:0] -:limit-1033 - [0:0] -:limit-1034 - [0:0] -:limit-1035 - [0:0] -:limit-1036 - [0:0] -:limit-1037 - [0:0] -:limit-1038 - [0:0] -:limit-1039 - [0:0] -:limit-104 - [0:0] -:limit-1040 - [0:0] -:limit-1041 - [0:0] -:limit-1042 - [0:0] -:limit-1043 - [0:0] -:limit-1044 - [0:0] -:limit-1045 - [0:0] -:limit-1046 - [0:0] -:limit-1047 - [0:0] -:limit-1048 - [0:0] -:limit-1049 - [0:0] -:limit-105 - [0:0] -:limit-1050 - [0:0] -:limit-1051 - [0:0] -:limit-1052 - [0:0] -:limit-1053 - [0:0] -:limit-1054 - [0:0] -:limit-1055 - [0:0] -:limit-1056 - [0:0] -:limit-1057 - [0:0] -:limit-1058 - [0:0] -:limit-1059 - [0:0] -:limit-106 - [0:0] -:limit-1060 - [0:0] -:limit-1061 - [0:0] -:limit-1062 - [0:0] -:limit-1063 - [0:0] -:limit-1064 - [0:0] -:limit-1065 - [0:0] -:limit-1066 - [0:0] -:limit-1067 - [0:0] -:limit-1068 - [0:0] -:limit-1069 - [0:0] -:limit-107 - [0:0] -:limit-1070 - [0:0] -:limit-1071 - [0:0] -:limit-1072 - [0:0] -:limit-1073 - [0:0] -:limit-1074 - [0:0] -:limit-1075 - [0:0] -:limit-1076 - [0:0] -:limit-1077 - [0:0] -:limit-1078 - [0:0] -:limit-1079 - [0:0] -:limit-108 - [0:0] -:limit-1080 - [0:0] -:limit-1081 - [0:0] -:limit-1082 - [0:0] -:limit-1083 - [0:0] -:limit-1084 - [0:0] -:limit-1085 - [0:0] -:limit-1086 - [0:0] -:limit-1087 - [0:0] -:limit-1088 - [0:0] -:limit-1089 - [0:0] -:limit-109 - [0:0] -:limit-1090 - [0:0] -:limit-1091 - [0:0] -:limit-1092 - [0:0] -:limit-1094 - [0:0] -:limit-1095 - [0:0] -:limit-1096 - [0:0] -:limit-1098 - [0:0] -:limit-1099 - [0:0] -:limit-11 - [0:0] -:limit-110 - [0:0] -:limit-1100 - [0:0] -:limit-1101 - [0:0] -:limit-1102 - [0:0] -:limit-1103 - [0:0] -:limit-1104 - [0:0] -:limit-1106 - [0:0] -:limit-1107 - [0:0] -:limit-1108 - [0:0] -:limit-111 - [0:0] -:limit-1110 - [0:0] -:limit-1111 - [0:0] -:limit-1112 - [0:0] -:limit-1113 - [0:0] -:limit-1114 - [0:0] -:limit-1115 - [0:0] -:limit-1116 - [0:0] -:limit-1118 - [0:0] -:limit-1119 - [0:0] -:limit-112 - [0:0] -:limit-1120 - [0:0] -:limit-1122 - [0:0] -:limit-1123 - [0:0] -:limit-1124 - [0:0] -:limit-1125 - [0:0] -:limit-1126 - [0:0] -:limit-1127 - [0:0] -:limit-1128 - [0:0] -:limit-113 - [0:0] -:limit-1130 - [0:0] -:limit-1131 - [0:0] -:limit-1132 - [0:0] -:limit-1134 - [0:0] -:limit-1135 - [0:0] -:limit-1136 - [0:0] -:limit-1137 - [0:0] -:limit-1138 - [0:0] -:limit-1139 - [0:0] -:limit-114 - [0:0] -:limit-1140 - [0:0] -:limit-1141 - [0:0] -:limit-1142 - [0:0] -:limit-1143 - [0:0] -:limit-1144 - [0:0] -:limit-1145 - [0:0] -:limit-1146 - [0:0] -:limit-1148 - [0:0] -:limit-1149 - [0:0] -:limit-115 - [0:0] -:limit-1150 - [0:0] -:limit-1152 - [0:0] -:limit-1153 - [0:0] -:limit-1154 - [0:0] -:limit-1155 - [0:0] -:limit-1156 - [0:0] -:limit-1157 - [0:0] -:limit-1158 - [0:0] -:limit-116 - [0:0] -:limit-1160 - [0:0] -:limit-1161 - [0:0] -:limit-1162 - [0:0] -:limit-1164 - [0:0] -:limit-1165 - [0:0] -:limit-1166 - [0:0] -:limit-1167 - [0:0] -:limit-1168 - [0:0] -:limit-1169 - [0:0] -:limit-117 - [0:0] -:limit-1170 - [0:0] -:limit-1172 - [0:0] -:limit-1173 - [0:0] -:limit-1174 - [0:0] -:limit-1176 - [0:0] -:limit-1177 - [0:0] -:limit-1178 - [0:0] -:limit-1179 - [0:0] -:limit-118 - [0:0] -:limit-1180 - [0:0] -:limit-1181 - [0:0] -:limit-1182 - [0:0] -:limit-1184 - [0:0] -:limit-1185 - [0:0] -:limit-1186 - [0:0] -:limit-1188 - [0:0] -:limit-1189 - [0:0] -:limit-119 - [0:0] -:limit-1190 - [0:0] -:limit-1191 - [0:0] -:limit-1192 - [0:0] -:limit-1193 - [0:0] -:limit-1194 - [0:0] -:limit-1195 - [0:0] -:limit-1196 - [0:0] -:limit-1197 - [0:0] -:limit-1198 - [0:0] -:limit-1199 - [0:0] -:limit-12 - [0:0] -:limit-120 - [0:0] -:limit-1200 - [0:0] -:limit-1202 - [0:0] -:limit-1203 - [0:0] -:limit-1204 - [0:0] -:limit-1206 - [0:0] -:limit-1207 - [0:0] -:limit-1208 - [0:0] -:limit-1209 - [0:0] -:limit-121 - [0:0] -:limit-1210 - [0:0] -:limit-1211 - [0:0] -:limit-1212 - [0:0] -:limit-1214 - [0:0] -:limit-1215 - [0:0] -:limit-1216 - [0:0] -:limit-1218 - [0:0] -:limit-1219 - [0:0] -:limit-122 - [0:0] -:limit-1220 - [0:0] -:limit-1221 - [0:0] -:limit-1222 - [0:0] -:limit-1223 - [0:0] -:limit-1224 - [0:0] -:limit-1226 - [0:0] -:limit-1227 - [0:0] -:limit-1228 - [0:0] -:limit-123 - [0:0] -:limit-1230 - [0:0] -:limit-1231 - [0:0] -:limit-1232 - [0:0] -:limit-1233 - [0:0] -:limit-1234 - [0:0] -:limit-1235 - [0:0] -:limit-1236 - [0:0] -:limit-1238 - [0:0] -:limit-1239 - [0:0] -:limit-124 - [0:0] -:limit-1240 - [0:0] -:limit-1242 - [0:0] -:limit-1243 - [0:0] -:limit-1244 - [0:0] -:limit-1245 - [0:0] -:limit-1246 - [0:0] -:limit-1247 - [0:0] -:limit-1248 - [0:0] -:limit-1249 - [0:0] -:limit-125 - [0:0] -:limit-1250 - [0:0] -:limit-1251 - [0:0] -:limit-1252 - [0:0] -:limit-1253 - [0:0] -:limit-1254 - [0:0] -:limit-1256 - [0:0] -:limit-1257 - [0:0] -:limit-1258 - [0:0] -:limit-126 - [0:0] -:limit-1260 - [0:0] -:limit-1261 - [0:0] -:limit-1262 - [0:0] -:limit-1263 - [0:0] -:limit-1264 - [0:0] -:limit-1265 - [0:0] -:limit-1266 - [0:0] -:limit-1268 - [0:0] -:limit-1269 - [0:0] -:limit-127 - [0:0] -:limit-1270 - [0:0] -:limit-1272 - [0:0] -:limit-1273 - [0:0] -:limit-1274 - [0:0] -:limit-1275 - [0:0] -:limit-1276 - [0:0] -:limit-1277 - [0:0] -:limit-1278 - [0:0] -:limit-128 - [0:0] -:limit-1280 - [0:0] -:limit-1281 - [0:0] -:limit-1282 - [0:0] -:limit-1284 - [0:0] -:limit-1285 - [0:0] -:limit-1286 - [0:0] -:limit-1287 - [0:0] -:limit-1288 - [0:0] -:limit-1289 - [0:0] -:limit-129 - [0:0] -:limit-1290 - [0:0] -:limit-1292 - [0:0] -:limit-1293 - [0:0] -:limit-1294 - [0:0] -:limit-1296 - [0:0] -:limit-1297 - [0:0] -:limit-1298 - [0:0] -:limit-1299 - [0:0] -:limit-13 - [0:0] -:limit-130 - [0:0] -:limit-1300 - [0:0] -:limit-1301 - [0:0] -:limit-1302 - [0:0] -:limit-1303 - [0:0] -:limit-1304 - [0:0] -:limit-1305 - [0:0] -:limit-1306 - [0:0] -:limit-1307 - [0:0] -:limit-1308 - [0:0] -:limit-131 - [0:0] -:limit-1310 - [0:0] -:limit-1311 - [0:0] -:limit-1312 - [0:0] -:limit-1314 - [0:0] -:limit-1315 - [0:0] -:limit-1316 - [0:0] -:limit-1317 - [0:0] -:limit-1318 - [0:0] -:limit-1319 - [0:0] -:limit-132 - [0:0] -:limit-1320 - [0:0] -:limit-1322 - [0:0] -:limit-1323 - [0:0] -:limit-1324 - [0:0] -:limit-1326 - [0:0] -:limit-1327 - [0:0] -:limit-1328 - [0:0] -:limit-1329 - [0:0] -:limit-133 - [0:0] -:limit-1330 - [0:0] -:limit-1331 - [0:0] -:limit-1332 - [0:0] -:limit-1334 - [0:0] -:limit-1335 - [0:0] -:limit-1336 - [0:0] -:limit-1338 - [0:0] -:limit-1339 - [0:0] -:limit-134 - [0:0] -:limit-1340 - [0:0] -:limit-1341 - [0:0] -:limit-1342 - [0:0] -:limit-1343 - [0:0] -:limit-1344 - [0:0] -:limit-1346 - [0:0] -:limit-1347 - [0:0] -:limit-1348 - [0:0] -:limit-135 - [0:0] -:limit-1350 - [0:0] -:limit-1351 - [0:0] -:limit-1352 - [0:0] -:limit-1353 - [0:0] -:limit-1354 - [0:0] -:limit-1355 - [0:0] -:limit-1356 - [0:0] -:limit-1357 - [0:0] -:limit-1358 - [0:0] -:limit-1359 - [0:0] -:limit-136 - [0:0] -:limit-1360 - [0:0] -:limit-1361 - [0:0] -:limit-1362 - [0:0] -:limit-1364 - [0:0] -:limit-1365 - [0:0] -:limit-1366 - [0:0] -:limit-1368 - [0:0] -:limit-1369 - [0:0] -:limit-137 - [0:0] -:limit-1370 - [0:0] -:limit-1371 - [0:0] -:limit-1372 - [0:0] -:limit-1373 - [0:0] -:limit-1374 - [0:0] -:limit-1376 - [0:0] -:limit-1377 - [0:0] -:limit-1378 - [0:0] -:limit-138 - [0:0] -:limit-1380 - [0:0] -:limit-1381 - [0:0] -:limit-1382 - [0:0] -:limit-1383 - [0:0] -:limit-1384 - [0:0] -:limit-1385 - [0:0] -:limit-1386 - [0:0] -:limit-1388 - [0:0] -:limit-1389 - [0:0] -:limit-139 - [0:0] -:limit-1390 - [0:0] -:limit-1392 - [0:0] -:limit-1393 - [0:0] -:limit-1394 - [0:0] -:limit-1395 - [0:0] -:limit-1396 - [0:0] -:limit-1397 - [0:0] -:limit-1398 - [0:0] -:limit-14 - [0:0] -:limit-140 - [0:0] -:limit-1400 - [0:0] -:limit-1401 - [0:0] -:limit-1402 - [0:0] -:limit-1404 - [0:0] -:limit-1405 - [0:0] -:limit-1406 - [0:0] -:limit-1407 - [0:0] -:limit-1408 - [0:0] -:limit-1409 - [0:0] -:limit-141 - [0:0] -:limit-1410 - [0:0] -:limit-1411 - [0:0] -:limit-1412 - [0:0] -:limit-1413 - [0:0] -:limit-1414 - [0:0] -:limit-1415 - [0:0] -:limit-1416 - [0:0] -:limit-1417 - [0:0] -:limit-1418 - [0:0] -:limit-1419 - [0:0] -:limit-142 - [0:0] -:limit-1420 - [0:0] -:limit-1421 - [0:0] -:limit-1422 - [0:0] -:limit-1423 - [0:0] -:limit-1424 - [0:0] -:limit-1425 - [0:0] -:limit-1426 - [0:0] -:limit-1427 - [0:0] -:limit-1428 - [0:0] -:limit-1429 - [0:0] -:limit-143 - [0:0] -:limit-1430 - [0:0] -:limit-1431 - [0:0] -:limit-144 - [0:0] -:limit-145 - [0:0] -:limit-146 - [0:0] -:limit-147 - [0:0] -:limit-148 - [0:0] -:limit-149 - [0:0] -:limit-15 - [0:0] -:limit-150 - [0:0] -:limit-151 - [0:0] -:limit-152 - [0:0] -:limit-153 - [0:0] -:limit-154 - [0:0] -:limit-155 - [0:0] -:limit-156 - [0:0] -:limit-157 - [0:0] -:limit-158 - [0:0] -:limit-159 - [0:0] -:limit-16 - [0:0] -:limit-160 - [0:0] -:limit-161 - [0:0] -:limit-162 - [0:0] -:limit-163 - [0:0] -:limit-164 - [0:0] -:limit-165 - [0:0] -:limit-166 - [0:0] -:limit-167 - [0:0] -:limit-168 - [0:0] -:limit-169 - [0:0] -:limit-17 - [0:0] -:limit-170 - [0:0] -:limit-171 - [0:0] -:limit-172 - [0:0] -:limit-173 - [0:0] -:limit-174 - [0:0] -:limit-175 - [0:0] -:limit-176 - [0:0] -:limit-177 - [0:0] -:limit-178 - [0:0] -:limit-179 - [0:0] -:limit-18 - [0:0] -:limit-180 - [0:0] -:limit-181 - [0:0] -:limit-182 - [0:0] -:limit-183 - [0:0] -:limit-184 - [0:0] -:limit-185 - [0:0] -:limit-186 - [0:0] -:limit-187 - [0:0] -:limit-188 - [0:0] -:limit-189 - [0:0] -:limit-19 - [0:0] -:limit-190 - [0:0] -:limit-191 - [0:0] -:limit-192 - [0:0] -:limit-193 - [0:0] -:limit-194 - [0:0] -:limit-195 - [0:0] -:limit-196 - [0:0] -:limit-197 - [0:0] -:limit-198 - [0:0] -:limit-199 - [0:0] -:limit-2 - [0:0] -:limit-20 - [0:0] -:limit-200 - [0:0] -:limit-201 - [0:0] -:limit-202 - [0:0] -:limit-203 - [0:0] -:limit-204 - [0:0] -:limit-205 - [0:0] -:limit-206 - [0:0] -:limit-207 - [0:0] -:limit-208 - [0:0] -:limit-209 - [0:0] -:limit-21 - [0:0] -:limit-210 - [0:0] -:limit-211 - [0:0] -:limit-212 - [0:0] -:limit-213 - [0:0] -:limit-214 - [0:0] -:limit-215 - [0:0] -:limit-216 - [0:0] -:limit-217 - [0:0] -:limit-218 - [0:0] -:limit-219 - [0:0] -:limit-22 - [0:0] -:limit-220 - [0:0] -:limit-221 - [0:0] -:limit-222 - [0:0] -:limit-223 - [0:0] -:limit-224 - [0:0] -:limit-225 - [0:0] -:limit-226 - [0:0] -:limit-227 - [0:0] -:limit-228 - [0:0] -:limit-229 - [0:0] -:limit-23 - [0:0] -:limit-230 - [0:0] -:limit-231 - [0:0] -:limit-232 - [0:0] -:limit-233 - [0:0] -:limit-234 - [0:0] -:limit-235 - [0:0] -:limit-236 - [0:0] -:limit-237 - [0:0] -:limit-238 - [0:0] -:limit-239 - [0:0] -:limit-24 - [0:0] -:limit-240 - [0:0] -:limit-241 - [0:0] -:limit-242 - [0:0] -:limit-243 - [0:0] -:limit-244 - [0:0] -:limit-245 - [0:0] -:limit-246 - [0:0] -:limit-247 - [0:0] -:limit-248 - [0:0] -:limit-249 - [0:0] -:limit-25 - [0:0] -:limit-250 - [0:0] -:limit-251 - [0:0] -:limit-252 - [0:0] -:limit-253 - [0:0] -:limit-254 - [0:0] -:limit-255 - [0:0] -:limit-256 - [0:0] -:limit-257 - [0:0] -:limit-258 - [0:0] -:limit-259 - [0:0] -:limit-26 - [0:0] -:limit-260 - [0:0] -:limit-261 - [0:0] -:limit-262 - [0:0] -:limit-263 - [0:0] -:limit-264 - [0:0] -:limit-265 - [0:0] -:limit-266 - [0:0] -:limit-267 - [0:0] -:limit-268 - [0:0] -:limit-269 - [0:0] -:limit-27 - [0:0] -:limit-270 - [0:0] -:limit-271 - [0:0] -:limit-272 - [0:0] -:limit-273 - [0:0] -:limit-274 - [0:0] -:limit-275 - [0:0] -:limit-276 - [0:0] -:limit-277 - [0:0] -:limit-278 - [0:0] -:limit-279 - [0:0] -:limit-28 - [0:0] -:limit-280 - [0:0] -:limit-281 - [0:0] -:limit-282 - [0:0] -:limit-283 - [0:0] -:limit-284 - [0:0] -:limit-285 - [0:0] -:limit-286 - [0:0] -:limit-287 - [0:0] -:limit-288 - [0:0] -:limit-289 - [0:0] -:limit-29 - [0:0] -:limit-290 - [0:0] -:limit-291 - [0:0] -:limit-292 - [0:0] -:limit-293 - [0:0] -:limit-294 - [0:0] -:limit-295 - [0:0] -:limit-296 - [0:0] -:limit-297 - [0:0] -:limit-298 - [0:0] -:limit-299 - [0:0] -:limit-3 - [0:0] -:limit-30 - [0:0] -:limit-300 - [0:0] -:limit-301 - [0:0] -:limit-302 - [0:0] -:limit-303 - [0:0] -:limit-304 - [0:0] -:limit-305 - [0:0] -:limit-306 - [0:0] -:limit-307 - [0:0] -:limit-308 - [0:0] -:limit-309 - [0:0] -:limit-31 - [0:0] -:limit-310 - [0:0] -:limit-311 - [0:0] -:limit-312 - [0:0] -:limit-313 - [0:0] -:limit-314 - [0:0] -:limit-315 - [0:0] -:limit-316 - [0:0] -:limit-317 - [0:0] -:limit-318 - [0:0] -:limit-319 - [0:0] -:limit-32 - [0:0] -:limit-320 - [0:0] -:limit-321 - [0:0] -:limit-322 - [0:0] -:limit-323 - [0:0] -:limit-324 - [0:0] -:limit-325 - [0:0] -:limit-326 - [0:0] -:limit-327 - [0:0] -:limit-328 - [0:0] -:limit-329 - [0:0] -:limit-33 - [0:0] -:limit-330 - [0:0] -:limit-331 - [0:0] -:limit-332 - [0:0] -:limit-333 - [0:0] -:limit-334 - [0:0] -:limit-335 - [0:0] -:limit-336 - [0:0] -:limit-337 - [0:0] -:limit-338 - [0:0] -:limit-339 - [0:0] -:limit-34 - [0:0] -:limit-340 - [0:0] -:limit-341 - [0:0] -:limit-342 - [0:0] -:limit-343 - [0:0] -:limit-344 - [0:0] -:limit-345 - [0:0] -:limit-346 - [0:0] -:limit-347 - [0:0] -:limit-348 - [0:0] -:limit-349 - [0:0] -:limit-35 - [0:0] -:limit-350 - [0:0] -:limit-351 - [0:0] -:limit-352 - [0:0] -:limit-353 - [0:0] -:limit-354 - [0:0] -:limit-355 - [0:0] -:limit-356 - [0:0] -:limit-357 - [0:0] -:limit-358 - [0:0] -:limit-359 - [0:0] -:limit-36 - [0:0] -:limit-360 - [0:0] -:limit-361 - [0:0] -:limit-362 - [0:0] -:limit-363 - [0:0] -:limit-364 - [0:0] -:limit-365 - [0:0] -:limit-366 - [0:0] -:limit-367 - [0:0] -:limit-368 - [0:0] -:limit-369 - [0:0] -:limit-37 - [0:0] -:limit-370 - [0:0] -:limit-371 - [0:0] -:limit-372 - [0:0] -:limit-373 - [0:0] -:limit-374 - [0:0] -:limit-375 - [0:0] -:limit-376 - [0:0] -:limit-378 - [0:0] -:limit-379 - [0:0] -:limit-38 - [0:0] -:limit-380 - [0:0] -:limit-382 - [0:0] -:limit-383 - [0:0] -:limit-384 - [0:0] -:limit-385 - [0:0] -:limit-386 - [0:0] -:limit-387 - [0:0] -:limit-388 - [0:0] -:limit-39 - [0:0] -:limit-390 - [0:0] -:limit-391 - [0:0] -:limit-392 - [0:0] -:limit-394 - [0:0] -:limit-395 - [0:0] -:limit-396 - [0:0] -:limit-397 - [0:0] -:limit-398 - [0:0] -:limit-399 - [0:0] -:limit-4 - [0:0] -:limit-40 - [0:0] -:limit-400 - [0:0] -:limit-402 - [0:0] -:limit-403 - [0:0] -:limit-404 - [0:0] -:limit-406 - [0:0] -:limit-407 - [0:0] -:limit-408 - [0:0] -:limit-409 - [0:0] -:limit-41 - [0:0] -:limit-410 - [0:0] -:limit-411 - [0:0] -:limit-412 - [0:0] -:limit-414 - [0:0] -:limit-415 - [0:0] -:limit-416 - [0:0] -:limit-418 - [0:0] -:limit-419 - [0:0] -:limit-42 - [0:0] -:limit-420 - [0:0] -:limit-421 - [0:0] -:limit-422 - [0:0] -:limit-423 - [0:0] -:limit-424 - [0:0] -:limit-425 - [0:0] -:limit-426 - [0:0] -:limit-427 - [0:0] -:limit-428 - [0:0] -:limit-429 - [0:0] -:limit-43 - [0:0] -:limit-430 - [0:0] -:limit-432 - [0:0] -:limit-433 - [0:0] -:limit-434 - [0:0] -:limit-436 - [0:0] -:limit-437 - [0:0] -:limit-438 - [0:0] -:limit-439 - [0:0] -:limit-44 - [0:0] -:limit-440 - [0:0] -:limit-441 - [0:0] -:limit-442 - [0:0] -:limit-444 - [0:0] -:limit-445 - [0:0] -:limit-446 - [0:0] -:limit-448 - [0:0] -:limit-449 - [0:0] -:limit-45 - [0:0] -:limit-450 - [0:0] -:limit-451 - [0:0] -:limit-452 - [0:0] -:limit-453 - [0:0] -:limit-454 - [0:0] -:limit-456 - [0:0] -:limit-457 - [0:0] -:limit-458 - [0:0] -:limit-46 - [0:0] -:limit-460 - [0:0] -:limit-461 - [0:0] -:limit-462 - [0:0] -:limit-463 - [0:0] -:limit-464 - [0:0] -:limit-465 - [0:0] -:limit-466 - [0:0] -:limit-468 - [0:0] -:limit-469 - [0:0] -:limit-47 - [0:0] -:limit-470 - [0:0] -:limit-472 - [0:0] -:limit-473 - [0:0] -:limit-474 - [0:0] -:limit-475 - [0:0] -:limit-476 - [0:0] -:limit-477 - [0:0] -:limit-478 - [0:0] -:limit-479 - [0:0] -:limit-48 - [0:0] -:limit-480 - [0:0] -:limit-481 - [0:0] -:limit-482 - [0:0] -:limit-483 - [0:0] -:limit-484 - [0:0] -:limit-486 - [0:0] -:limit-487 - [0:0] -:limit-488 - [0:0] -:limit-49 - [0:0] -:limit-490 - [0:0] -:limit-491 - [0:0] -:limit-492 - [0:0] -:limit-493 - [0:0] -:limit-494 - [0:0] -:limit-495 - [0:0] -:limit-496 - [0:0] -:limit-498 - [0:0] -:limit-499 - [0:0] -:limit-5 - [0:0] -:limit-50 - [0:0] -:limit-500 - [0:0] -:limit-502 - [0:0] -:limit-503 - [0:0] -:limit-504 - [0:0] -:limit-505 - [0:0] -:limit-506 - [0:0] -:limit-507 - [0:0] -:limit-508 - [0:0] -:limit-51 - [0:0] -:limit-510 - [0:0] -:limit-511 - [0:0] -:limit-512 - [0:0] -:limit-514 - [0:0] -:limit-515 - [0:0] -:limit-516 - [0:0] -:limit-517 - [0:0] -:limit-518 - [0:0] -:limit-519 - [0:0] -:limit-52 - [0:0] -:limit-520 - [0:0] -:limit-522 - [0:0] -:limit-523 - [0:0] -:limit-524 - [0:0] -:limit-526 - [0:0] -:limit-527 - [0:0] -:limit-528 - [0:0] -:limit-529 - [0:0] -:limit-53 - [0:0] -:limit-530 - [0:0] -:limit-531 - [0:0] -:limit-532 - [0:0] -:limit-533 - [0:0] -:limit-534 - [0:0] -:limit-535 - [0:0] -:limit-536 - [0:0] -:limit-537 - [0:0] -:limit-538 - [0:0] -:limit-54 - [0:0] -:limit-540 - [0:0] -:limit-541 - [0:0] -:limit-542 - [0:0] -:limit-544 - [0:0] -:limit-545 - [0:0] -:limit-546 - [0:0] -:limit-547 - [0:0] -:limit-548 - [0:0] -:limit-549 - [0:0] -:limit-55 - [0:0] -:limit-550 - [0:0] -:limit-552 - [0:0] -:limit-553 - [0:0] -:limit-554 - [0:0] -:limit-556 - [0:0] -:limit-557 - [0:0] -:limit-558 - [0:0] -:limit-559 - [0:0] -:limit-56 - [0:0] -:limit-560 - [0:0] -:limit-561 - [0:0] -:limit-562 - [0:0] -:limit-564 - [0:0] -:limit-565 - [0:0] -:limit-566 - [0:0] -:limit-568 - [0:0] -:limit-569 - [0:0] -:limit-57 - [0:0] -:limit-570 - [0:0] -:limit-571 - [0:0] -:limit-572 - [0:0] -:limit-573 - [0:0] -:limit-574 - [0:0] -:limit-576 - [0:0] -:limit-577 - [0:0] -:limit-578 - [0:0] -:limit-58 - [0:0] -:limit-580 - [0:0] -:limit-581 - [0:0] -:limit-582 - [0:0] -:limit-583 - [0:0] -:limit-584 - [0:0] -:limit-585 - [0:0] -:limit-586 - [0:0] -:limit-587 - [0:0] -:limit-588 - [0:0] -:limit-589 - [0:0] -:limit-59 - [0:0] -:limit-590 - [0:0] -:limit-591 - [0:0] -:limit-592 - [0:0] -:limit-594 - [0:0] -:limit-595 - [0:0] -:limit-596 - [0:0] -:limit-598 - [0:0] -:limit-599 - [0:0] -:limit-6 - [0:0] -:limit-60 - [0:0] -:limit-600 - [0:0] -:limit-601 - [0:0] -:limit-602 - [0:0] -:limit-603 - [0:0] -:limit-604 - [0:0] -:limit-606 - [0:0] -:limit-607 - [0:0] -:limit-608 - [0:0] -:limit-61 - [0:0] -:limit-610 - [0:0] -:limit-611 - [0:0] -:limit-612 - [0:0] -:limit-613 - [0:0] -:limit-614 - [0:0] -:limit-615 - [0:0] -:limit-616 - [0:0] -:limit-618 - [0:0] -:limit-619 - [0:0] -:limit-62 - [0:0] -:limit-620 - [0:0] -:limit-622 - [0:0] -:limit-623 - [0:0] -:limit-624 - [0:0] -:limit-625 - [0:0] -:limit-626 - [0:0] -:limit-627 - [0:0] -:limit-628 - [0:0] -:limit-63 - [0:0] -:limit-630 - [0:0] -:limit-631 - [0:0] -:limit-632 - [0:0] -:limit-634 - [0:0] -:limit-635 - [0:0] -:limit-636 - [0:0] -:limit-637 - [0:0] -:limit-638 - [0:0] -:limit-639 - [0:0] -:limit-64 - [0:0] -:limit-640 - [0:0] -:limit-641 - [0:0] -:limit-642 - [0:0] -:limit-643 - [0:0] -:limit-644 - [0:0] -:limit-645 - [0:0] -:limit-646 - [0:0] -:limit-648 - [0:0] -:limit-649 - [0:0] -:limit-65 - [0:0] -:limit-650 - [0:0] -:limit-652 - [0:0] -:limit-653 - [0:0] -:limit-654 - [0:0] -:limit-655 - [0:0] -:limit-656 - [0:0] -:limit-657 - [0:0] -:limit-658 - [0:0] -:limit-66 - [0:0] -:limit-660 - [0:0] -:limit-661 - [0:0] -:limit-662 - [0:0] -:limit-664 - [0:0] -:limit-665 - [0:0] -:limit-666 - [0:0] -:limit-667 - [0:0] -:limit-668 - [0:0] -:limit-669 - [0:0] -:limit-67 - [0:0] -:limit-670 - [0:0] -:limit-672 - [0:0] -:limit-673 - [0:0] -:limit-674 - [0:0] -:limit-676 - [0:0] -:limit-677 - [0:0] -:limit-678 - [0:0] -:limit-679 - [0:0] -:limit-68 - [0:0] -:limit-680 - [0:0] -:limit-681 - [0:0] -:limit-682 - [0:0] -:limit-684 - [0:0] -:limit-685 - [0:0] -:limit-686 - [0:0] -:limit-688 - [0:0] -:limit-689 - [0:0] -:limit-69 - [0:0] -:limit-690 - [0:0] -:limit-691 - [0:0] -:limit-692 - [0:0] -:limit-693 - [0:0] -:limit-694 - [0:0] -:limit-695 - [0:0] -:limit-696 - [0:0] -:limit-697 - [0:0] -:limit-698 - [0:0] -:limit-699 - [0:0] -:limit-7 - [0:0] -:limit-70 - [0:0] -:limit-700 - [0:0] -:limit-701 - [0:0] -:limit-702 - [0:0] -:limit-703 - [0:0] -:limit-704 - [0:0] -:limit-705 - [0:0] -:limit-706 - [0:0] -:limit-707 - [0:0] -:limit-708 - [0:0] -:limit-709 - [0:0] -:limit-71 - [0:0] -:limit-710 - [0:0] -:limit-711 - [0:0] -:limit-712 - [0:0] -:limit-713 - [0:0] -:limit-714 - [0:0] -:limit-715 - [0:0] -:limit-716 - [0:0] -:limit-717 - [0:0] -:limit-718 - [0:0] -:limit-719 - [0:0] -:limit-72 - [0:0] -:limit-720 - [0:0] -:limit-721 - [0:0] -:limit-722 - [0:0] -:limit-723 - [0:0] -:limit-724 - [0:0] -:limit-725 - [0:0] -:limit-726 - [0:0] -:limit-727 - [0:0] -:limit-728 - [0:0] -:limit-729 - [0:0] -:limit-73 - [0:0] -:limit-730 - [0:0] -:limit-731 - [0:0] -:limit-732 - [0:0] -:limit-733 - [0:0] -:limit-734 - [0:0] -:limit-735 - [0:0] -:limit-736 - [0:0] -:limit-737 - [0:0] -:limit-738 - [0:0] -:limit-739 - [0:0] -:limit-74 - [0:0] -:limit-740 - [0:0] -:limit-741 - [0:0] -:limit-742 - [0:0] -:limit-743 - [0:0] -:limit-744 - [0:0] -:limit-745 - [0:0] -:limit-746 - [0:0] -:limit-747 - [0:0] -:limit-748 - [0:0] -:limit-749 - [0:0] -:limit-75 - [0:0] -:limit-750 - [0:0] -:limit-751 - [0:0] -:limit-752 - [0:0] -:limit-753 - [0:0] -:limit-754 - [0:0] -:limit-755 - [0:0] -:limit-756 - [0:0] -:limit-757 - [0:0] -:limit-758 - [0:0] -:limit-759 - [0:0] -:limit-76 - [0:0] -:limit-760 - [0:0] -:limit-761 - [0:0] -:limit-762 - [0:0] -:limit-763 - [0:0] -:limit-764 - [0:0] -:limit-765 - [0:0] -:limit-766 - [0:0] -:limit-767 - [0:0] -:limit-768 - [0:0] -:limit-769 - [0:0] -:limit-77 - [0:0] -:limit-770 - [0:0] -:limit-771 - [0:0] -:limit-772 - [0:0] -:limit-773 - [0:0] -:limit-774 - [0:0] -:limit-775 - [0:0] -:limit-776 - [0:0] -:limit-777 - [0:0] -:limit-778 - [0:0] -:limit-779 - [0:0] -:limit-78 - [0:0] -:limit-780 - [0:0] -:limit-781 - [0:0] -:limit-782 - [0:0] -:limit-783 - [0:0] -:limit-784 - [0:0] -:limit-785 - [0:0] -:limit-786 - [0:0] -:limit-787 - [0:0] -:limit-788 - [0:0] -:limit-789 - [0:0] -:limit-79 - [0:0] -:limit-790 - [0:0] -:limit-791 - [0:0] -:limit-792 - [0:0] -:limit-793 - [0:0] -:limit-794 - [0:0] -:limit-795 - [0:0] -:limit-796 - [0:0] -:limit-797 - [0:0] -:limit-798 - [0:0] -:limit-799 - [0:0] -:limit-8 - [0:0] -:limit-80 - [0:0] -:limit-800 - [0:0] -:limit-801 - [0:0] -:limit-802 - [0:0] -:limit-803 - [0:0] -:limit-804 - [0:0] -:limit-805 - [0:0] -:limit-806 - [0:0] -:limit-807 - [0:0] -:limit-808 - [0:0] -:limit-809 - [0:0] -:limit-81 - [0:0] -:limit-810 - [0:0] -:limit-811 - [0:0] -:limit-812 - [0:0] -:limit-813 - [0:0] -:limit-814 - [0:0] -:limit-815 - [0:0] -:limit-816 - [0:0] -:limit-817 - [0:0] -:limit-818 - [0:0] -:limit-819 - [0:0] -:limit-82 - [0:0] -:limit-820 - [0:0] -:limit-821 - [0:0] -:limit-822 - [0:0] -:limit-823 - [0:0] -:limit-824 - [0:0] -:limit-825 - [0:0] -:limit-826 - [0:0] -:limit-827 - [0:0] -:limit-828 - [0:0] -:limit-829 - [0:0] -:limit-83 - [0:0] -:limit-830 - [0:0] -:limit-831 - [0:0] -:limit-832 - [0:0] -:limit-833 - [0:0] -:limit-834 - [0:0] -:limit-835 - [0:0] -:limit-836 - [0:0] -:limit-837 - [0:0] -:limit-838 - [0:0] -:limit-839 - [0:0] -:limit-84 - [0:0] -:limit-840 - [0:0] -:limit-841 - [0:0] -:limit-842 - [0:0] -:limit-843 - [0:0] -:limit-844 - [0:0] -:limit-845 - [0:0] -:limit-846 - [0:0] -:limit-847 - [0:0] -:limit-848 - [0:0] -:limit-849 - [0:0] -:limit-85 - [0:0] -:limit-850 - [0:0] -:limit-851 - [0:0] -:limit-852 - [0:0] -:limit-853 - [0:0] -:limit-854 - [0:0] -:limit-855 - [0:0] -:limit-856 - [0:0] -:limit-857 - [0:0] -:limit-858 - [0:0] -:limit-859 - [0:0] -:limit-86 - [0:0] -:limit-860 - [0:0] -:limit-861 - [0:0] -:limit-862 - [0:0] -:limit-863 - [0:0] -:limit-864 - [0:0] -:limit-865 - [0:0] -:limit-866 - [0:0] -:limit-867 - [0:0] -:limit-868 - [0:0] -:limit-869 - [0:0] -:limit-87 - [0:0] -:limit-870 - [0:0] -:limit-871 - [0:0] -:limit-872 - [0:0] -:limit-873 - [0:0] -:limit-874 - [0:0] -:limit-875 - [0:0] -:limit-876 - [0:0] -:limit-877 - [0:0] -:limit-878 - [0:0] -:limit-879 - [0:0] -:limit-88 - [0:0] -:limit-880 - [0:0] -:limit-881 - [0:0] -:limit-882 - [0:0] -:limit-883 - [0:0] -:limit-884 - [0:0] -:limit-885 - [0:0] -:limit-886 - [0:0] -:limit-887 - [0:0] -:limit-888 - [0:0] -:limit-889 - [0:0] -:limit-89 - [0:0] -:limit-890 - [0:0] -:limit-891 - [0:0] -:limit-892 - [0:0] -:limit-893 - [0:0] -:limit-894 - [0:0] -:limit-895 - [0:0] -:limit-896 - [0:0] -:limit-897 - [0:0] -:limit-898 - [0:0] -:limit-899 - [0:0] -:limit-9 - [0:0] -:limit-90 - [0:0] -:limit-900 - [0:0] -:limit-901 - [0:0] -:limit-902 - [0:0] -:limit-903 - [0:0] -:limit-904 - [0:0] -:limit-905 - [0:0] -:limit-906 - [0:0] -:limit-907 - [0:0] -:limit-908 - [0:0] -:limit-909 - [0:0] -:limit-91 - [0:0] -:limit-910 - [0:0] -:limit-911 - [0:0] -:limit-912 - [0:0] -:limit-913 - [0:0] -:limit-914 - [0:0] -:limit-915 - [0:0] -:limit-916 - [0:0] -:limit-917 - [0:0] -:limit-918 - [0:0] -:limit-919 - [0:0] -:limit-92 - [0:0] -:limit-920 - [0:0] -:limit-921 - [0:0] -:limit-922 - [0:0] -:limit-923 - [0:0] -:limit-924 - [0:0] -:limit-925 - [0:0] -:limit-926 - [0:0] -:limit-927 - [0:0] -:limit-928 - [0:0] -:limit-929 - [0:0] -:limit-93 - [0:0] -:limit-930 - [0:0] -:limit-931 - [0:0] -:limit-932 - [0:0] -:limit-933 - [0:0] -:limit-934 - [0:0] -:limit-935 - [0:0] -:limit-936 - [0:0] -:limit-937 - [0:0] -:limit-938 - [0:0] -:limit-939 - [0:0] -:limit-94 - [0:0] -:limit-940 - [0:0] -:limit-941 - [0:0] -:limit-942 - [0:0] -:limit-943 - [0:0] -:limit-944 - [0:0] -:limit-945 - [0:0] -:limit-946 - [0:0] -:limit-947 - [0:0] -:limit-948 - [0:0] -:limit-949 - [0:0] -:limit-95 - [0:0] -:limit-950 - [0:0] -:limit-951 - [0:0] -:limit-952 - [0:0] -:limit-953 - [0:0] -:limit-954 - [0:0] -:limit-955 - [0:0] -:limit-956 - [0:0] -:limit-957 - [0:0] -:limit-958 - [0:0] -:limit-959 - [0:0] -:limit-96 - [0:0] -:limit-960 - [0:0] -:limit-961 - [0:0] -:limit-962 - [0:0] -:limit-963 - [0:0] -:limit-964 - [0:0] -:limit-965 - [0:0] -:limit-966 - [0:0] -:limit-967 - [0:0] -:limit-968 - [0:0] -:limit-969 - [0:0] -:limit-97 - [0:0] -:limit-970 - [0:0] -:limit-971 - [0:0] -:limit-972 - [0:0] -:limit-973 - [0:0] -:limit-974 - [0:0] -:limit-975 - [0:0] -:limit-976 - [0:0] -:limit-977 - [0:0] -:limit-978 - [0:0] -:limit-979 - [0:0] -:limit-98 - [0:0] -:limit-980 - [0:0] -:limit-981 - [0:0] -:limit-982 - [0:0] -:limit-983 - [0:0] -:limit-984 - [0:0] -:limit-985 - [0:0] -:limit-986 - [0:0] -:limit-987 - [0:0] -:limit-988 - [0:0] -:limit-989 - [0:0] -:limit-99 - [0:0] -:limit-990 - [0:0] -:limit-991 - [0:0] -:limit-992 - [0:0] -:limit-993 - [0:0] -:limit-994 - [0:0] -:limit-995 - [0:0] -:limit-996 - [0:0] -:limit-997 - [0:0] -:limit-998 - [0:0] -:limit-999 - [0:0] -:logaccept-0 - [0:0] -:logaccept-18 - [0:0] -:logaccept-27 - [0:0] -:logaccept-36 - [0:0] -:logaccept-45 - [0:0] -:logaccept-63 - [0:0] -:logaccept-64 - [0:0] -:logaccept-65 - [0:0] -:logaccept-66 - [0:0] -:logaccept-67 - [0:0] -:logaccept-68 - [0:0] -:logaccept-69 - [0:0] -:logaccept-70 - [0:0] -:logaccept-71 - [0:0] -:logaccept-72 - [0:0] -:logaccept-73 - [0:0] -:logaccept-74 - [0:0] -:logaccept-75 - [0:0] -:logaccept-76 - [0:0] -:logaccept-77 - [0:0] -:logaccept-78 - [0:0] -:logaccept-79 - [0:0] -:logaccept-80 - [0:0] -:logaccept-81 - [0:0] -:logaccept-82 - [0:0] -:logaccept-83 - [0:0] -:logaccept-84 - [0:0] -:logaccept-9 - [0:0] -:logaccept-final-0 - [0:0] -:logaccept-final-1 - [0:0] -:logaccept-final-10 - [0:0] -:logaccept-final-11 - [0:0] -:logaccept-final-12 - [0:0] -:logaccept-final-13 - [0:0] -:logaccept-final-14 - [0:0] -:logaccept-final-15 - [0:0] -:logaccept-final-16 - [0:0] -:logaccept-final-17 - [0:0] -:logaccept-final-18 - [0:0] -:logaccept-final-19 - [0:0] -:logaccept-final-2 - [0:0] -:logaccept-final-20 - [0:0] -:logaccept-final-21 - [0:0] -:logaccept-final-22 - [0:0] -:logaccept-final-23 - [0:0] -:logaccept-final-24 - [0:0] -:logaccept-final-25 - [0:0] -:logaccept-final-26 - [0:0] -:logaccept-final-27 - [0:0] -:logaccept-final-28 - [0:0] -:logaccept-final-29 - [0:0] -:logaccept-final-3 - [0:0] -:logaccept-final-30 - [0:0] -:logaccept-final-31 - [0:0] -:logaccept-final-32 - [0:0] -:logaccept-final-33 - [0:0] -:logaccept-final-34 - [0:0] -:logaccept-final-35 - [0:0] -:logaccept-final-36 - [0:0] -:logaccept-final-37 - [0:0] -:logaccept-final-38 - [0:0] -:logaccept-final-39 - [0:0] -:logaccept-final-4 - [0:0] -:logaccept-final-40 - [0:0] -:logaccept-final-41 - [0:0] -:logaccept-final-42 - [0:0] -:logaccept-final-43 - [0:0] -:logaccept-final-44 - [0:0] -:logaccept-final-45 - [0:0] -:logaccept-final-46 - [0:0] -:logaccept-final-47 - [0:0] -:logaccept-final-48 - [0:0] -:logaccept-final-49 - [0:0] -:logaccept-final-5 - [0:0] -:logaccept-final-50 - [0:0] -:logaccept-final-51 - [0:0] -:logaccept-final-52 - [0:0] -:logaccept-final-53 - [0:0] -:logaccept-final-54 - [0:0] -:logaccept-final-55 - [0:0] -:logaccept-final-56 - [0:0] -:logaccept-final-57 - [0:0] -:logaccept-final-58 - [0:0] -:logaccept-final-59 - [0:0] -:logaccept-final-6 - [0:0] -:logaccept-final-60 - [0:0] -:logaccept-final-61 - [0:0] -:logaccept-final-7 - [0:0] -:logaccept-final-8 - [0:0] -:logaccept-final-9 - [0:0] -:logdrop-0 - [0:0] -:logdrop-1 - [0:0] -:logdrop-10 - [0:0] -:logdrop-100 - [0:0] -:logdrop-101 - [0:0] -:logdrop-102 - [0:0] -:logdrop-103 - [0:0] -:logdrop-104 - [0:0] -:logdrop-105 - [0:0] -:logdrop-106 - [0:0] -:logdrop-107 - [0:0] -:logdrop-108 - [0:0] -:logdrop-109 - [0:0] -:logdrop-11 - [0:0] -:logdrop-110 - [0:0] -:logdrop-111 - [0:0] -:logdrop-112 - [0:0] -:logdrop-113 - [0:0] -:logdrop-114 - [0:0] -:logdrop-115 - [0:0] -:logdrop-116 - [0:0] -:logdrop-117 - [0:0] -:logdrop-118 - [0:0] -:logdrop-119 - [0:0] -:logdrop-12 - [0:0] -:logdrop-120 - [0:0] -:logdrop-121 - [0:0] -:logdrop-122 - [0:0] -:logdrop-123 - [0:0] -:logdrop-124 - [0:0] -:logdrop-125 - [0:0] -:logdrop-126 - [0:0] -:logdrop-127 - [0:0] -:logdrop-128 - [0:0] -:logdrop-129 - [0:0] -:logdrop-13 - [0:0] -:logdrop-130 - [0:0] -:logdrop-131 - [0:0] -:logdrop-132 - [0:0] -:logdrop-133 - [0:0] -:logdrop-134 - [0:0] -:logdrop-135 - [0:0] -:logdrop-136 - [0:0] -:logdrop-137 - [0:0] -:logdrop-138 - [0:0] -:logdrop-139 - [0:0] -:logdrop-14 - [0:0] -:logdrop-140 - [0:0] -:logdrop-141 - [0:0] -:logdrop-142 - [0:0] -:logdrop-143 - [0:0] -:logdrop-144 - [0:0] -:logdrop-145 - [0:0] -:logdrop-146 - [0:0] -:logdrop-147 - [0:0] -:logdrop-148 - [0:0] -:logdrop-149 - [0:0] -:logdrop-15 - [0:0] -:logdrop-150 - [0:0] -:logdrop-151 - [0:0] -:logdrop-152 - [0:0] -:logdrop-153 - [0:0] -:logdrop-154 - [0:0] -:logdrop-155 - [0:0] -:logdrop-156 - [0:0] -:logdrop-157 - [0:0] -:logdrop-158 - [0:0] -:logdrop-159 - [0:0] -:logdrop-16 - [0:0] -:logdrop-160 - [0:0] -:logdrop-161 - [0:0] -:logdrop-162 - [0:0] -:logdrop-163 - [0:0] -:logdrop-164 - [0:0] -:logdrop-165 - [0:0] -:logdrop-166 - [0:0] -:logdrop-167 - [0:0] -:logdrop-168 - [0:0] -:logdrop-169 - [0:0] -:logdrop-17 - [0:0] -:logdrop-170 - [0:0] -:logdrop-171 - [0:0] -:logdrop-172 - [0:0] -:logdrop-173 - [0:0] -:logdrop-174 - [0:0] -:logdrop-175 - [0:0] -:logdrop-176 - [0:0] -:logdrop-177 - [0:0] -:logdrop-178 - [0:0] -:logdrop-179 - [0:0] -:logdrop-18 - [0:0] -:logdrop-180 - [0:0] -:logdrop-181 - [0:0] -:logdrop-182 - [0:0] -:logdrop-183 - [0:0] -:logdrop-184 - [0:0] -:logdrop-185 - [0:0] -:logdrop-186 - [0:0] -:logdrop-187 - [0:0] -:logdrop-188 - [0:0] -:logdrop-189 - [0:0] -:logdrop-19 - [0:0] -:logdrop-190 - [0:0] -:logdrop-191 - [0:0] -:logdrop-192 - [0:0] -:logdrop-193 - [0:0] -:logdrop-194 - [0:0] -:logdrop-195 - [0:0] -:logdrop-196 - [0:0] -:logdrop-197 - [0:0] -:logdrop-198 - [0:0] -:logdrop-199 - [0:0] -:logdrop-2 - [0:0] -:logdrop-20 - [0:0] -:logdrop-200 - [0:0] -:logdrop-201 - [0:0] -:logdrop-202 - [0:0] -:logdrop-203 - [0:0] -:logdrop-204 - [0:0] -:logdrop-205 - [0:0] -:logdrop-206 - [0:0] -:logdrop-207 - [0:0] -:logdrop-208 - [0:0] -:logdrop-209 - [0:0] -:logdrop-21 - [0:0] -:logdrop-210 - [0:0] -:logdrop-211 - [0:0] -:logdrop-212 - [0:0] -:logdrop-213 - [0:0] -:logdrop-214 - [0:0] -:logdrop-215 - [0:0] -:logdrop-216 - [0:0] -:logdrop-217 - [0:0] -:logdrop-218 - [0:0] -:logdrop-219 - [0:0] -:logdrop-22 - [0:0] -:logdrop-220 - [0:0] -:logdrop-221 - [0:0] -:logdrop-222 - [0:0] -:logdrop-223 - [0:0] -:logdrop-224 - [0:0] -:logdrop-225 - [0:0] -:logdrop-226 - [0:0] -:logdrop-227 - [0:0] -:logdrop-228 - [0:0] -:logdrop-229 - [0:0] -:logdrop-23 - [0:0] -:logdrop-230 - [0:0] -:logdrop-231 - [0:0] -:logdrop-232 - [0:0] -:logdrop-233 - [0:0] -:logdrop-234 - [0:0] -:logdrop-235 - [0:0] -:logdrop-236 - [0:0] -:logdrop-237 - [0:0] -:logdrop-238 - [0:0] -:logdrop-239 - [0:0] -:logdrop-24 - [0:0] -:logdrop-240 - [0:0] -:logdrop-241 - [0:0] -:logdrop-242 - [0:0] -:logdrop-243 - [0:0] -:logdrop-244 - [0:0] -:logdrop-245 - [0:0] -:logdrop-246 - [0:0] -:logdrop-247 - [0:0] -:logdrop-248 - [0:0] -:logdrop-249 - [0:0] -:logdrop-25 - [0:0] -:logdrop-250 - [0:0] -:logdrop-251 - [0:0] -:logdrop-252 - [0:0] -:logdrop-253 - [0:0] -:logdrop-254 - [0:0] -:logdrop-255 - [0:0] -:logdrop-256 - [0:0] -:logdrop-257 - [0:0] -:logdrop-258 - [0:0] -:logdrop-259 - [0:0] -:logdrop-26 - [0:0] -:logdrop-260 - [0:0] -:logdrop-261 - [0:0] -:logdrop-262 - [0:0] -:logdrop-263 - [0:0] -:logdrop-264 - [0:0] -:logdrop-265 - [0:0] -:logdrop-266 - [0:0] -:logdrop-267 - [0:0] -:logdrop-268 - [0:0] -:logdrop-269 - [0:0] -:logdrop-27 - [0:0] -:logdrop-270 - [0:0] -:logdrop-271 - [0:0] -:logdrop-272 - [0:0] -:logdrop-273 - [0:0] -:logdrop-274 - [0:0] -:logdrop-275 - [0:0] -:logdrop-276 - [0:0] -:logdrop-277 - [0:0] -:logdrop-278 - [0:0] -:logdrop-279 - [0:0] -:logdrop-28 - [0:0] -:logdrop-280 - [0:0] -:logdrop-281 - [0:0] -:logdrop-282 - [0:0] -:logdrop-283 - [0:0] -:logdrop-284 - [0:0] -:logdrop-285 - [0:0] -:logdrop-286 - [0:0] -:logdrop-287 - [0:0] -:logdrop-288 - [0:0] -:logdrop-289 - [0:0] -:logdrop-29 - [0:0] -:logdrop-290 - [0:0] -:logdrop-291 - [0:0] -:logdrop-292 - [0:0] -:logdrop-293 - [0:0] -:logdrop-294 - [0:0] -:logdrop-295 - [0:0] -:logdrop-296 - [0:0] -:logdrop-297 - [0:0] -:logdrop-298 - [0:0] -:logdrop-299 - [0:0] -:logdrop-3 - [0:0] -:logdrop-30 - [0:0] -:logdrop-300 - [0:0] -:logdrop-301 - [0:0] -:logdrop-302 - [0:0] -:logdrop-303 - [0:0] -:logdrop-304 - [0:0] -:logdrop-305 - [0:0] -:logdrop-306 - [0:0] -:logdrop-307 - [0:0] -:logdrop-308 - [0:0] -:logdrop-309 - [0:0] -:logdrop-31 - [0:0] -:logdrop-310 - [0:0] -:logdrop-311 - [0:0] -:logdrop-312 - [0:0] -:logdrop-313 - [0:0] -:logdrop-314 - [0:0] -:logdrop-315 - [0:0] -:logdrop-316 - [0:0] -:logdrop-317 - [0:0] -:logdrop-318 - [0:0] -:logdrop-319 - [0:0] -:logdrop-32 - [0:0] -:logdrop-320 - [0:0] -:logdrop-321 - [0:0] -:logdrop-322 - [0:0] -:logdrop-323 - [0:0] -:logdrop-324 - [0:0] -:logdrop-325 - [0:0] -:logdrop-326 - [0:0] -:logdrop-327 - [0:0] -:logdrop-328 - [0:0] -:logdrop-329 - [0:0] -:logdrop-33 - [0:0] -:logdrop-330 - [0:0] -:logdrop-331 - [0:0] -:logdrop-332 - [0:0] -:logdrop-333 - [0:0] -:logdrop-334 - [0:0] -:logdrop-335 - [0:0] -:logdrop-336 - [0:0] -:logdrop-337 - [0:0] -:logdrop-338 - [0:0] -:logdrop-339 - [0:0] -:logdrop-34 - [0:0] -:logdrop-340 - [0:0] -:logdrop-341 - [0:0] -:logdrop-342 - [0:0] -:logdrop-343 - [0:0] -:logdrop-344 - [0:0] -:logdrop-345 - [0:0] -:logdrop-346 - [0:0] -:logdrop-347 - [0:0] -:logdrop-348 - [0:0] -:logdrop-349 - [0:0] -:logdrop-35 - [0:0] -:logdrop-350 - [0:0] -:logdrop-351 - [0:0] -:logdrop-352 - [0:0] -:logdrop-353 - [0:0] -:logdrop-354 - [0:0] -:logdrop-355 - [0:0] -:logdrop-356 - [0:0] -:logdrop-357 - [0:0] -:logdrop-358 - [0:0] -:logdrop-359 - [0:0] -:logdrop-36 - [0:0] -:logdrop-360 - [0:0] -:logdrop-361 - [0:0] -:logdrop-362 - [0:0] -:logdrop-363 - [0:0] -:logdrop-364 - [0:0] -:logdrop-365 - [0:0] -:logdrop-366 - [0:0] -:logdrop-367 - [0:0] -:logdrop-368 - [0:0] -:logdrop-369 - [0:0] -:logdrop-37 - [0:0] -:logdrop-370 - [0:0] -:logdrop-371 - [0:0] -:logdrop-372 - [0:0] -:logdrop-373 - [0:0] -:logdrop-374 - [0:0] -:logdrop-375 - [0:0] -:logdrop-376 - [0:0] -:logdrop-377 - [0:0] -:logdrop-378 - [0:0] -:logdrop-379 - [0:0] -:logdrop-38 - [0:0] -:logdrop-380 - [0:0] -:logdrop-381 - [0:0] -:logdrop-382 - [0:0] -:logdrop-383 - [0:0] -:logdrop-384 - [0:0] -:logdrop-385 - [0:0] -:logdrop-386 - [0:0] -:logdrop-387 - [0:0] -:logdrop-388 - [0:0] -:logdrop-389 - [0:0] -:logdrop-39 - [0:0] -:logdrop-390 - [0:0] -:logdrop-391 - [0:0] -:logdrop-392 - [0:0] -:logdrop-393 - [0:0] -:logdrop-394 - [0:0] -:logdrop-395 - [0:0] -:logdrop-396 - [0:0] -:logdrop-397 - [0:0] -:logdrop-398 - [0:0] -:logdrop-399 - [0:0] -:logdrop-4 - [0:0] -:logdrop-40 - [0:0] -:logdrop-400 - [0:0] -:logdrop-401 - [0:0] -:logdrop-402 - [0:0] -:logdrop-403 - [0:0] -:logdrop-404 - [0:0] -:logdrop-405 - [0:0] -:logdrop-406 - [0:0] -:logdrop-407 - [0:0] -:logdrop-408 - [0:0] -:logdrop-409 - [0:0] -:logdrop-41 - [0:0] -:logdrop-410 - [0:0] -:logdrop-411 - [0:0] -:logdrop-412 - [0:0] -:logdrop-413 - [0:0] -:logdrop-414 - [0:0] -:logdrop-415 - [0:0] -:logdrop-416 - [0:0] -:logdrop-417 - [0:0] -:logdrop-418 - [0:0] -:logdrop-419 - [0:0] -:logdrop-42 - [0:0] -:logdrop-420 - [0:0] -:logdrop-421 - [0:0] -:logdrop-422 - [0:0] -:logdrop-423 - [0:0] -:logdrop-424 - [0:0] -:logdrop-425 - [0:0] -:logdrop-426 - [0:0] -:logdrop-427 - [0:0] -:logdrop-428 - [0:0] -:logdrop-429 - [0:0] -:logdrop-43 - [0:0] -:logdrop-430 - [0:0] -:logdrop-431 - [0:0] -:logdrop-432 - [0:0] -:logdrop-433 - [0:0] -:logdrop-434 - [0:0] -:logdrop-435 - [0:0] -:logdrop-436 - [0:0] -:logdrop-437 - [0:0] -:logdrop-438 - [0:0] -:logdrop-439 - [0:0] -:logdrop-44 - [0:0] -:logdrop-440 - [0:0] -:logdrop-441 - [0:0] -:logdrop-442 - [0:0] -:logdrop-443 - [0:0] -:logdrop-444 - [0:0] -:logdrop-445 - [0:0] -:logdrop-446 - [0:0] -:logdrop-447 - [0:0] -:logdrop-448 - [0:0] -:logdrop-449 - [0:0] -:logdrop-45 - [0:0] -:logdrop-450 - [0:0] -:logdrop-451 - [0:0] -:logdrop-452 - [0:0] -:logdrop-453 - [0:0] -:logdrop-454 - [0:0] -:logdrop-455 - [0:0] -:logdrop-456 - [0:0] -:logdrop-457 - [0:0] -:logdrop-458 - [0:0] -:logdrop-46 - [0:0] -:logdrop-47 - [0:0] -:logdrop-48 - [0:0] -:logdrop-49 - [0:0] -:logdrop-5 - [0:0] -:logdrop-50 - [0:0] -:logdrop-51 - [0:0] -:logdrop-52 - [0:0] -:logdrop-53 - [0:0] -:logdrop-54 - [0:0] -:logdrop-55 - [0:0] -:logdrop-56 - [0:0] -:logdrop-57 - [0:0] -:logdrop-58 - [0:0] -:logdrop-59 - [0:0] -:logdrop-6 - [0:0] -:logdrop-60 - [0:0] -:logdrop-61 - [0:0] -:logdrop-62 - [0:0] -:logdrop-63 - [0:0] -:logdrop-64 - [0:0] -:logdrop-65 - [0:0] -:logdrop-66 - [0:0] -:logdrop-67 - [0:0] -:logdrop-68 - [0:0] -:logdrop-69 - [0:0] -:logdrop-7 - [0:0] -:logdrop-70 - [0:0] -:logdrop-71 - [0:0] -:logdrop-72 - [0:0] -:logdrop-73 - [0:0] -:logdrop-74 - [0:0] -:logdrop-75 - [0:0] -:logdrop-76 - [0:0] -:logdrop-77 - [0:0] -:logdrop-78 - [0:0] -:logdrop-79 - [0:0] -:logdrop-8 - [0:0] -:logdrop-80 - [0:0] -:logdrop-81 - [0:0] -:logdrop-82 - [0:0] -:logdrop-83 - [0:0] -:logdrop-84 - [0:0] -:logdrop-85 - [0:0] -:logdrop-86 - [0:0] -:logdrop-87 - [0:0] -:logdrop-88 - [0:0] -:logdrop-89 - [0:0] -:logdrop-9 - [0:0] -:logdrop-90 - [0:0] -:logdrop-91 - [0:0] -:logdrop-92 - [0:0] -:logdrop-93 - [0:0] -:logdrop-94 - [0:0] -:logdrop-95 - [0:0] -:logdrop-96 - [0:0] -:logdrop-97 - [0:0] -:logdrop-98 - [0:0] -:logdrop-99 - [0:0] -:logpass-0 - [0:0] -:logpass-16 - [0:0] -:logpass-30 - [0:0] -:logpass-37 - [0:0] -:logpass-50 - [0:0] -:logpass-9 - [0:0] -:logreject-0 - [0:0] -:logtarpit-0 - [0:0] -:tarpit - [0:0] --A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A FORWARD -j limit-1073 --A FORWARD -j limit-1072 --A FORWARD -j limit-1071 --A FORWARD -j limit-1070 --A FORWARD -j limit-1069 --A FORWARD -j limit-1068 --A FORWARD -j limit-1067 --A FORWARD -j limit-1066 --A FORWARD -j limit-1065 --A FORWARD -j limit-1064 --A FORWARD -j limit-1063 --A FORWARD -j limit-1062 --A FORWARD -j limit-1061 --A FORWARD -j limit-1060 --A FORWARD -j limit-1059 --A FORWARD -j limit-1058 --A FORWARD -j limit-1057 --A FORWARD -j limit-1056 --A FORWARD -j limit-1055 --A FORWARD -j limit-1054 --A FORWARD -j limit-1053 --A FORWARD -j limit-1052 --A FORWARD -j limit-1051 --A FORWARD -j limit-1050 --A FORWARD -j limit-1049 --A FORWARD -j limit-1048 --A FORWARD -j limit-1047 --A FORWARD -j limit-1046 --A FORWARD -j limit-1045 --A FORWARD -j limit-1044 --A FORWARD -j limit-1043 --A FORWARD -j limit-1042 --A FORWARD -j limit-1041 --A FORWARD -j limit-1040 --A FORWARD -j limit-1039 --A FORWARD -j limit-1038 --A FORWARD -j limit-1037 --A FORWARD -j limit-1036 --A FORWARD -j limit-1035 --A FORWARD -j limit-1034 --A FORWARD -j limit-1033 --A FORWARD -j limit-1032 --A FORWARD -j limit-1031 --A FORWARD -j limit-1030 --A FORWARD -j limit-1029 --A FORWARD -j limit-1028 --A FORWARD -j limit-1027 --A FORWARD -j limit-1026 --A FORWARD -j limit-1025 --A FORWARD -j limit-1024 --A FORWARD -j limit-1023 --A FORWARD -j limit-1022 --A FORWARD -j limit-1021 --A FORWARD -j limit-1020 --A FORWARD -j limit-1019 --A FORWARD -j limit-1018 --A FORWARD -j limit-1017 --A FORWARD -j limit-1016 --A FORWARD -j limit-1015 --A FORWARD -j limit-1014 --A FORWARD -j limit-1013 --A FORWARD -j limit-1012 --A FORWARD -j limit-1011 --A FORWARD -j limit-1010 --A FORWARD -j limit-1009 --A FORWARD -j limit-1008 --A FORWARD -j limit-1007 --A FORWARD -j limit-1006 --A FORWARD -j limit-1005 --A FORWARD -j limit-1004 --A FORWARD -j limit-1003 --A FORWARD -j limit-1002 --A FORWARD -j limit-1001 --A FORWARD -j limit-1000 --A FORWARD -j limit-999 --A FORWARD -j limit-998 --A FORWARD -j limit-997 --A FORWARD -j limit-996 --A FORWARD -j limit-995 --A FORWARD -j limit-994 --A FORWARD -j limit-993 --A FORWARD -j limit-992 --A FORWARD -j limit-991 --A FORWARD -j limit-990 --A FORWARD -j limit-989 --A FORWARD -j limit-988 --A FORWARD -j limit-987 --A FORWARD -j limit-986 --A FORWARD -j limit-985 --A FORWARD -j limit-984 --A FORWARD -j limit-983 --A FORWARD -j limit-982 --A FORWARD -j limit-981 --A FORWARD -j limit-980 --A FORWARD -j limit-979 --A FORWARD -j limit-978 --A FORWARD -j limit-977 --A FORWARD -j limit-976 --A FORWARD -j limit-975 --A FORWARD -j limit-974 --A FORWARD -j limit-973 --A FORWARD -j limit-972 --A FORWARD -j limit-971 --A FORWARD -j limit-970 --A FORWARD -j limit-969 --A FORWARD -j limit-968 --A FORWARD -j limit-967 --A FORWARD -j limit-966 --A FORWARD -j limit-965 --A FORWARD -j limit-964 --A FORWARD -j limit-963 --A FORWARD -j limit-962 --A FORWARD -j limit-961 --A FORWARD -j limit-960 --A FORWARD -j limit-959 --A FORWARD -j limit-958 --A FORWARD -j limit-957 --A FORWARD -j limit-956 --A FORWARD -j limit-955 --A FORWARD -j limit-954 --A FORWARD -j limit-953 --A FORWARD -j limit-952 --A FORWARD -j limit-951 --A FORWARD -j limit-950 --A FORWARD -j limit-949 --A FORWARD -j limit-948 --A FORWARD -j limit-947 --A FORWARD -j limit-946 --A FORWARD -j limit-945 --A FORWARD -j limit-944 --A FORWARD -j limit-943 --A FORWARD -j limit-942 --A FORWARD -j limit-941 --A FORWARD -j limit-940 --A FORWARD -j limit-939 --A FORWARD -j limit-938 --A FORWARD -j limit-937 --A FORWARD -j limit-936 --A FORWARD -j limit-935 --A FORWARD -j limit-934 --A FORWARD -j limit-933 --A FORWARD -j limit-932 --A FORWARD -j limit-931 --A FORWARD -j limit-930 --A FORWARD -j limit-929 --A FORWARD -j limit-928 --A FORWARD -j limit-927 --A FORWARD -j limit-926 --A FORWARD -j limit-925 --A FORWARD -j limit-924 --A FORWARD -j limit-923 --A FORWARD -j limit-922 --A FORWARD -j limit-921 --A FORWARD -j limit-920 --A FORWARD -j limit-919 --A FORWARD -j limit-918 --A FORWARD -j limit-917 --A FORWARD -j limit-916 --A FORWARD -j limit-915 --A FORWARD -j limit-914 --A FORWARD -j limit-913 --A FORWARD -j limit-912 --A FORWARD -j limit-911 --A FORWARD -j limit-910 --A FORWARD -j limit-909 --A FORWARD -j limit-908 --A FORWARD -j limit-907 --A FORWARD -j limit-906 --A FORWARD -j limit-905 --A FORWARD -j limit-904 --A FORWARD -j limit-903 --A FORWARD -j limit-902 --A FORWARD -j limit-901 --A FORWARD -j limit-900 --A FORWARD -j limit-899 --A FORWARD -j limit-898 --A FORWARD -j limit-897 --A FORWARD -j limit-896 --A FORWARD -j limit-895 --A FORWARD -j limit-894 --A FORWARD -j limit-893 --A FORWARD -j limit-892 --A FORWARD -j limit-891 --A FORWARD -j limit-890 --A FORWARD -j limit-889 --A FORWARD -j limit-888 --A FORWARD -j limit-887 --A FORWARD -j limit-886 --A FORWARD -j limit-885 --A FORWARD -j limit-884 --A FORWARD -j limit-883 --A FORWARD -j limit-882 --A FORWARD -j limit-881 --A FORWARD -j limit-880 --A FORWARD -j limit-879 --A FORWARD -j limit-878 --A FORWARD -j limit-877 --A FORWARD -j limit-876 --A FORWARD -j limit-875 --A FORWARD -j limit-874 --A FORWARD -j limit-873 --A FORWARD -j limit-872 --A FORWARD -j limit-871 --A FORWARD -j limit-870 --A FORWARD -j limit-869 --A FORWARD -j limit-868 --A FORWARD -j limit-867 --A FORWARD -j limit-866 --A FORWARD -j limit-865 --A FORWARD -j limit-864 --A FORWARD -j limit-863 --A FORWARD -j limit-862 --A FORWARD -j limit-861 --A FORWARD -j limit-860 --A FORWARD -j limit-859 --A FORWARD -j limit-858 --A FORWARD -j limit-857 --A FORWARD -j limit-856 --A FORWARD -j limit-855 --A FORWARD -j limit-854 --A FORWARD -j limit-853 --A FORWARD -j limit-852 --A FORWARD -j limit-851 --A FORWARD -j limit-850 --A FORWARD -j limit-849 --A FORWARD -j limit-848 --A FORWARD -j limit-847 --A FORWARD -j limit-846 --A FORWARD -j limit-845 --A FORWARD -j limit-844 --A FORWARD -j limit-843 --A FORWARD -j limit-842 --A FORWARD -j limit-841 --A FORWARD -j limit-840 --A FORWARD -j limit-839 --A FORWARD -j limit-838 --A FORWARD -j limit-837 --A FORWARD -j limit-836 --A FORWARD -j limit-835 --A FORWARD -j limit-834 --A FORWARD -j limit-833 --A FORWARD -j limit-832 --A FORWARD -j limit-831 --A FORWARD -j limit-830 --A FORWARD -j limit-829 --A FORWARD -j limit-828 --A FORWARD -j limit-827 --A FORWARD -j limit-826 --A FORWARD -j limit-825 --A FORWARD -j limit-824 --A FORWARD -j limit-823 --A FORWARD -j limit-822 --A FORWARD -j limit-821 --A FORWARD -j limit-820 --A FORWARD -j limit-819 --A FORWARD -j limit-818 --A FORWARD -j limit-817 --A FORWARD -j limit-816 --A FORWARD -j limit-815 --A FORWARD -j limit-814 --A FORWARD -j limit-813 --A FORWARD -j limit-812 --A FORWARD -j limit-811 --A FORWARD -j limit-810 --A FORWARD -j limit-809 --A FORWARD -j limit-808 --A FORWARD -j limit-807 --A FORWARD -j limit-806 --A FORWARD -j limit-805 --A FORWARD -j limit-804 --A FORWARD -j limit-803 --A FORWARD -j limit-802 --A FORWARD -j limit-801 --A FORWARD -j limit-800 --A FORWARD -j limit-799 --A FORWARD -j limit-798 --A FORWARD -j limit-797 --A FORWARD -j limit-796 --A FORWARD -j limit-795 --A FORWARD -j limit-794 --A FORWARD -j limit-793 --A FORWARD -j limit-792 --A FORWARD -j limit-791 --A FORWARD -j limit-790 --A FORWARD -j limit-789 --A FORWARD -j limit-788 --A FORWARD -j limit-787 --A FORWARD -j limit-786 --A FORWARD -j limit-785 --A FORWARD -j limit-784 --A FORWARD -j limit-783 --A FORWARD -j limit-782 --A FORWARD -j limit-781 --A FORWARD -j limit-780 --A FORWARD -j limit-779 --A FORWARD -j limit-778 --A FORWARD -j limit-777 --A FORWARD -j limit-776 --A FORWARD -j limit-775 --A FORWARD -j limit-774 --A FORWARD -j limit-773 --A FORWARD -j limit-772 --A FORWARD -j limit-771 --A FORWARD -j limit-770 --A FORWARD -j limit-769 --A FORWARD -j limit-768 --A FORWARD -j limit-767 --A FORWARD -j limit-766 --A FORWARD -j limit-765 --A FORWARD -j limit-764 --A FORWARD -j limit-763 --A FORWARD -j limit-762 --A FORWARD -j limit-761 --A FORWARD -j limit-760 --A FORWARD -j limit-759 --A FORWARD -j limit-758 --A FORWARD -j limit-757 --A FORWARD -j limit-756 --A FORWARD -j limit-755 --A FORWARD -j limit-754 --A FORWARD -j limit-753 --A FORWARD -j limit-752 --A FORWARD -j limit-751 --A FORWARD -j limit-750 --A FORWARD -j limit-749 --A FORWARD -j limit-748 --A FORWARD -j limit-747 --A FORWARD -j limit-746 --A FORWARD -j limit-745 --A FORWARD -j limit-744 --A FORWARD -j limit-743 --A FORWARD -j limit-742 --A FORWARD -j limit-741 --A FORWARD -j limit-740 --A FORWARD -j limit-739 --A FORWARD -j limit-738 --A FORWARD -j limit-737 --A FORWARD -j limit-736 --A FORWARD -j limit-735 --A FORWARD -j limit-734 --A FORWARD -j limit-733 --A FORWARD -j limit-732 --A FORWARD -j limit-731 --A FORWARD -j limit-730 --A FORWARD -j limit-729 --A FORWARD -j limit-728 --A FORWARD -j limit-727 --A FORWARD -j limit-726 --A FORWARD -j limit-725 --A FORWARD -j limit-724 --A FORWARD -j limit-723 --A FORWARD -j limit-722 --A FORWARD -j limit-721 --A FORWARD -j limit-720 --A FORWARD -j limit-719 --A FORWARD -j limit-718 --A FORWARD -j limit-717 --A FORWARD -j limit-716 --A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD --A FORWARD -j logaccept-0 --A FORWARD -j logpass-0 --A FORWARD -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -o eth1 -d fc00::/7 --A FORWARD -o eth1 -d fc00::/7 -j logaccept-9 --A FORWARD -o eth1 -d fc00::/7 -j logpass-9 --A FORWARD -i eth0 -j ACCEPT --A FORWARD -i eth0 --A FORWARD -i eth0 -j logaccept-18 --A FORWARD -i eth0 -j logpass-16 --A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d fc00::/7 --A FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 --A FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG --A FORWARD -i eth1 -s fc00::/7 -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 --A FORWARD -i eth1 -s fc00::/7 -j logaccept-36 --A FORWARD -i eth1 -s fc00::/7 -j logpass-30 --A FORWARD -i eth1 -s fc00::/7 -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 --A FORWARD -i eth1 -s fc00::/7 -j logaccept-45 --A FORWARD -i eth1 -s fc00::/7 -j logpass-37 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logdrop-0 --A FORWARD --A FORWARD -j logreject-0 --A FORWARD -j logtarpit-0 --A FORWARD -o eth1 -d fc00::/7 -j limit-0 --A FORWARD -o eth1 -d fc00::/7 -j limit-1 --A FORWARD -o eth1 -d fc00::/7 -j limit-2 --A FORWARD -o eth1 -d fc00::/7 -j limit-3 --A FORWARD -o eth1 -d fc00::/7 -j limit-4 --A FORWARD -o eth1 -d fc00::/7 -j limit-5 --A FORWARD -o eth1 -d fc00::/7 -j limit-6 --A FORWARD -o eth1 -d fc00::/7 -j limit-7 --A FORWARD -o eth1 -d fc00::/7 -j limit-8 --A FORWARD -o eth1 -d fc00::/7 -j limit-9 --A FORWARD -o eth1 -d fc00::/7 -j limit-10 --A FORWARD -o eth1 -d fc00::/7 -j limit-11 --A FORWARD -o eth1 -d fc00::/7 -j limit-12 --A FORWARD -o eth1 -d fc00::/7 -j limit-13 --A FORWARD -o eth1 -d fc00::/7 -j limit-14 --A FORWARD -o eth1 -d fc00::/7 -j limit-15 --A FORWARD -o eth1 -d fc00::/7 -j limit-16 --A FORWARD -o eth1 -d fc00::/7 -j limit-17 --A FORWARD -o eth1 -d fc00::/7 -j limit-18 --A FORWARD -o eth1 -d fc00::/7 -j limit-19 --A FORWARD -o eth1 -d fc00::/7 -j limit-20 --A FORWARD -o eth1 -d fc00::/7 -j limit-21 --A FORWARD -o eth1 -d fc00::/7 -j limit-22 --A FORWARD -o eth1 -d fc00::/7 -j limit-23 --A FORWARD -o eth1 -d fc00::/7 -j limit-24 --A FORWARD -o eth1 -d fc00::/7 -j limit-25 --A FORWARD -o eth1 -d fc00::/7 -j limit-26 --A FORWARD -o eth1 -d fc00::/7 -j limit-27 --A FORWARD -o eth1 -d fc00::/7 -j limit-28 --A FORWARD -o eth1 -d fc00::/7 -j limit-29 --A FORWARD -o eth1 -d fc00::/7 -j limit-30 --A FORWARD -o eth1 -d fc00::/7 -j limit-31 --A FORWARD -o eth1 -d fc00::/7 -j limit-32 --A FORWARD -o eth1 -d fc00::/7 -j limit-33 --A FORWARD -o eth1 -d fc00::/7 -j limit-34 --A FORWARD -o eth1 -d fc00::/7 -j limit-35 --A FORWARD -o eth1 -d fc00::/7 -j limit-36 --A FORWARD -o eth1 -d fc00::/7 -j limit-37 --A FORWARD -o eth1 -d fc00::/7 -j limit-38 --A FORWARD -o eth1 -d fc00::/7 -j limit-39 --A FORWARD -o eth1 -d fc00::/7 -j limit-40 --A FORWARD -o eth1 -d fc00::/7 -j limit-41 --A FORWARD -o eth1 -d fc00::/7 -j limit-42 --A FORWARD -o eth1 -d fc00::/7 -j limit-43 --A FORWARD -o eth1 -d fc00::/7 -j limit-44 --A FORWARD -o eth1 -d fc00::/7 -j limit-45 --A FORWARD -o eth1 -d fc00::/7 -j limit-46 --A FORWARD -o eth1 -d fc00::/7 -j limit-47 --A FORWARD -o eth1 -d fc00::/7 -j limit-48 --A FORWARD -o eth1 -d fc00::/7 -j limit-49 --A FORWARD -o eth1 -d fc00::/7 -j limit-50 --A FORWARD -o eth1 -d fc00::/7 -j limit-51 --A FORWARD -o eth1 -d fc00::/7 -j limit-52 --A FORWARD -o eth1 -d fc00::/7 -j limit-53 --A FORWARD -o eth1 -d fc00::/7 -j limit-54 --A FORWARD -o eth1 -d fc00::/7 -j limit-55 --A FORWARD -o eth1 -d fc00::/7 -j limit-56 --A FORWARD -o eth1 -d fc00::/7 -j limit-57 --A FORWARD -o eth1 -d fc00::/7 -j limit-58 --A FORWARD -o eth1 -d fc00::/7 -j limit-59 --A FORWARD -o eth1 -d fc00::/7 -j limit-60 --A FORWARD -o eth1 -d fc00::/7 -j limit-61 --A FORWARD -o eth1 -d fc00::/7 -j limit-62 --A FORWARD -o eth1 -d fc00::/7 -j limit-63 --A FORWARD -o eth1 -d fc00::/7 -j limit-64 --A FORWARD -o eth1 -d fc00::/7 -j limit-65 --A FORWARD -o eth1 -d fc00::/7 -j limit-66 --A FORWARD -o eth1 -d fc00::/7 -j limit-67 --A FORWARD -o eth1 -d fc00::/7 -j limit-68 --A FORWARD -o eth1 -d fc00::/7 -j limit-69 --A FORWARD -o eth1 -d fc00::/7 -j limit-70 --A FORWARD -o eth1 -d fc00::/7 -j limit-71 --A FORWARD -o eth1 -d fc00::/7 -j limit-72 --A FORWARD -o eth1 -d fc00::/7 -j limit-73 --A FORWARD -o eth1 -d fc00::/7 -j limit-74 --A FORWARD -o eth1 -d fc00::/7 -j limit-75 --A FORWARD -o eth1 -d fc00::/7 -j limit-76 --A FORWARD -o eth1 -d fc00::/7 -j limit-77 --A FORWARD -o eth1 -d fc00::/7 -j limit-78 --A FORWARD -o eth1 -d fc00::/7 -j limit-79 --A FORWARD -o eth1 -d fc00::/7 -j limit-80 --A FORWARD -o eth1 -d fc00::/7 -j limit-81 --A FORWARD -o eth1 -d fc00::/7 -j limit-82 --A FORWARD -o eth1 -d fc00::/7 -j limit-83 --A FORWARD -o eth1 -d fc00::/7 -j limit-84 --A FORWARD -o eth1 -d fc00::/7 -j limit-85 --A FORWARD -o eth1 -d fc00::/7 -j limit-86 --A FORWARD -o eth1 -d fc00::/7 -j limit-87 --A FORWARD -o eth1 -d fc00::/7 -j limit-88 --A FORWARD -o eth1 -d fc00::/7 -j limit-89 --A FORWARD -o eth1 -d fc00::/7 -j limit-90 --A FORWARD -o eth1 -d fc00::/7 -j limit-91 --A FORWARD -o eth1 -d fc00::/7 -j limit-92 --A FORWARD -o eth1 -d fc00::/7 -j limit-93 --A FORWARD -o eth1 -d fc00::/7 -j limit-94 --A FORWARD -o eth1 -d fc00::/7 -j limit-95 --A FORWARD -o eth1 -d fc00::/7 -j limit-96 --A FORWARD -o eth1 -d fc00::/7 -j limit-97 --A FORWARD -o eth1 -d fc00::/7 -j limit-98 --A FORWARD -o eth1 -d fc00::/7 -j limit-99 --A FORWARD -o eth1 -d fc00::/7 -j limit-100 --A FORWARD -o eth1 -d fc00::/7 -j limit-101 --A FORWARD -o eth1 -d fc00::/7 -j limit-102 --A FORWARD -o eth1 -d fc00::/7 -j limit-103 --A FORWARD -o eth1 -d fc00::/7 -j limit-104 --A FORWARD -o eth1 -d fc00::/7 -j limit-105 --A FORWARD -o eth1 -d fc00::/7 -j limit-106 --A FORWARD -o eth1 -d fc00::/7 -j limit-107 --A FORWARD -o eth1 -d fc00::/7 -j limit-108 --A FORWARD -o eth1 -d fc00::/7 -j limit-109 --A FORWARD -o eth1 -d fc00::/7 -j limit-110 --A FORWARD -o eth1 -d fc00::/7 -j limit-111 --A FORWARD -o eth1 -d fc00::/7 -j limit-112 --A FORWARD -o eth1 -d fc00::/7 -j limit-113 --A FORWARD -o eth1 -d fc00::/7 -j limit-114 --A FORWARD -o eth1 -d fc00::/7 -j limit-115 --A FORWARD -o eth1 -d fc00::/7 -j limit-116 --A FORWARD -o eth1 -d fc00::/7 -j limit-117 --A FORWARD -o eth1 -d fc00::/7 -j limit-118 --A FORWARD -o eth1 -d fc00::/7 -j limit-119 --A FORWARD -o eth1 -d fc00::/7 -j limit-120 --A FORWARD -o eth1 -d fc00::/7 -j limit-121 --A FORWARD -o eth1 -d fc00::/7 -j limit-122 --A FORWARD -o eth1 -d fc00::/7 -j limit-123 --A FORWARD -o eth1 -d fc00::/7 -j limit-124 --A FORWARD -o eth1 -d fc00::/7 -j limit-125 --A FORWARD -o eth1 -d fc00::/7 -j limit-126 --A FORWARD -o eth1 -d fc00::/7 -j limit-127 --A FORWARD -o eth1 -d fc00::/7 -j limit-128 --A FORWARD -o eth1 -d fc00::/7 -j limit-129 --A FORWARD -o eth1 -d fc00::/7 -j limit-130 --A FORWARD -o eth1 -d fc00::/7 -j limit-131 --A FORWARD -o eth1 -d fc00::/7 -j limit-132 --A FORWARD -o eth1 -d fc00::/7 -j limit-133 --A FORWARD -o eth1 -d fc00::/7 -j limit-134 --A FORWARD -o eth1 -d fc00::/7 -j limit-135 --A FORWARD -o eth1 -d fc00::/7 -j limit-136 --A FORWARD -o eth1 -d fc00::/7 -j limit-137 --A FORWARD -o eth1 -d fc00::/7 -j limit-138 --A FORWARD -o eth1 -d fc00::/7 -j limit-139 --A FORWARD -o eth1 -d fc00::/7 -j limit-140 --A FORWARD -o eth1 -d fc00::/7 -j limit-141 --A FORWARD -o eth1 -d fc00::/7 -j limit-142 --A FORWARD -o eth1 -d fc00::/7 -j limit-143 --A FORWARD -o eth1 -d fc00::/7 -j limit-144 --A FORWARD -o eth1 -d fc00::/7 -j limit-145 --A FORWARD -o eth1 -d fc00::/7 -j limit-146 --A FORWARD -o eth1 -d fc00::/7 -j limit-147 --A FORWARD -o eth1 -d fc00::/7 -j limit-148 --A FORWARD -o eth1 -d fc00::/7 -j limit-149 --A FORWARD -o eth1 -d fc00::/7 -j limit-150 --A FORWARD -o eth1 -d fc00::/7 -j limit-151 --A FORWARD -o eth1 -d fc00::/7 -j limit-152 --A FORWARD -o eth1 -d fc00::/7 -j limit-153 --A FORWARD -o eth1 -d fc00::/7 -j limit-154 --A FORWARD -o eth1 -d fc00::/7 -j limit-155 --A FORWARD -o eth1 -d fc00::/7 -j limit-156 --A FORWARD -o eth1 -d fc00::/7 -j limit-157 --A FORWARD -o eth1 -d fc00::/7 -j limit-158 --A FORWARD -o eth1 -d fc00::/7 -j limit-159 --A FORWARD -o eth1 -d fc00::/7 -j limit-160 --A FORWARD -o eth1 -d fc00::/7 -j limit-161 --A FORWARD -o eth1 -d fc00::/7 -j limit-162 --A FORWARD -o eth1 -d fc00::/7 -j limit-163 --A FORWARD -o eth1 -d fc00::/7 -j limit-164 --A FORWARD -o eth1 -d fc00::/7 -j limit-165 --A FORWARD -o eth1 -d fc00::/7 -j limit-166 --A FORWARD -o eth1 -d fc00::/7 -j limit-167 --A FORWARD -o eth1 -d fc00::/7 -j limit-168 --A FORWARD -o eth1 -d fc00::/7 -j limit-169 --A FORWARD -o eth1 -d fc00::/7 -j limit-170 --A FORWARD -o eth1 -d fc00::/7 -j limit-171 --A FORWARD -o eth1 -d fc00::/7 -j limit-172 --A FORWARD -o eth1 -d fc00::/7 -j limit-173 --A FORWARD -o eth1 -d fc00::/7 -j limit-174 --A FORWARD -o eth1 -d fc00::/7 -j limit-175 --A FORWARD -o eth1 -d fc00::/7 -j limit-176 --A FORWARD -o eth1 -d fc00::/7 -j limit-177 --A FORWARD -o eth1 -d fc00::/7 -j limit-178 --A FORWARD -o eth1 -d fc00::/7 -j limit-179 --A FORWARD -o eth1 -d fc00::/7 -j limit-180 --A FORWARD -o eth1 -d fc00::/7 -j limit-181 --A FORWARD -o eth1 -d fc00::/7 -j limit-182 --A FORWARD -o eth1 -d fc00::/7 -j limit-183 --A FORWARD -o eth1 -d fc00::/7 -j limit-184 --A FORWARD -o eth1 -d fc00::/7 -j limit-185 --A FORWARD -o eth1 -d fc00::/7 -j limit-186 --A FORWARD -o eth1 -d fc00::/7 -j limit-187 --A FORWARD -o eth1 -d fc00::/7 -j limit-188 --A FORWARD -o eth1 -d fc00::/7 -j limit-189 --A FORWARD -o eth1 -d fc00::/7 -j limit-190 --A FORWARD -o eth1 -d fc00::/7 -j limit-191 --A FORWARD -o eth1 -d fc00::/7 -j limit-192 --A FORWARD -o eth1 -d fc00::/7 -j limit-193 --A FORWARD -o eth1 -d fc00::/7 -j limit-194 --A FORWARD -o eth1 -d fc00::/7 -j limit-195 --A FORWARD -o eth1 -d fc00::/7 -j limit-196 --A FORWARD -o eth1 -d fc00::/7 -j limit-197 --A FORWARD -o eth1 -d fc00::/7 -j limit-198 --A FORWARD -o eth1 -d fc00::/7 -j limit-199 --A FORWARD -o eth1 -d fc00::/7 -j limit-200 --A FORWARD -o eth1 -d fc00::/7 -j limit-201 --A FORWARD -o eth1 -d fc00::/7 -j limit-202 --A FORWARD -o eth1 -d fc00::/7 -j limit-203 --A FORWARD -o eth1 -d fc00::/7 -j limit-204 --A FORWARD -o eth1 -d fc00::/7 -j limit-205 --A FORWARD -o eth1 -d fc00::/7 -j limit-206 --A FORWARD -o eth1 -d fc00::/7 -j limit-207 --A FORWARD -o eth1 -d fc00::/7 -j limit-208 --A FORWARD -o eth1 -d fc00::/7 -j limit-209 --A FORWARD -o eth1 -d fc00::/7 -j limit-210 --A FORWARD -o eth1 -d fc00::/7 -j limit-211 --A FORWARD -o eth1 -d fc00::/7 -j limit-212 --A FORWARD -o eth1 -d fc00::/7 -j limit-213 --A FORWARD -o eth1 -d fc00::/7 -j limit-214 --A FORWARD -o eth1 -d fc00::/7 -j limit-215 --A FORWARD -o eth1 -d fc00::/7 -j limit-216 --A FORWARD -o eth1 -d fc00::/7 -j limit-217 --A FORWARD -o eth1 -d fc00::/7 -j limit-218 --A FORWARD -o eth1 -d fc00::/7 -j limit-219 --A FORWARD -o eth1 -d fc00::/7 -j limit-220 --A FORWARD -o eth1 -d fc00::/7 -j limit-221 --A FORWARD -o eth1 -d fc00::/7 -j limit-222 --A FORWARD -o eth1 -d fc00::/7 -j limit-223 --A FORWARD -o eth1 -d fc00::/7 -j limit-224 --A FORWARD -o eth1 -d fc00::/7 -j limit-225 --A FORWARD -o eth1 -d fc00::/7 -j limit-226 --A FORWARD -o eth1 -d fc00::/7 -j limit-227 --A FORWARD -o eth1 -d fc00::/7 -j limit-228 --A FORWARD -o eth1 -d fc00::/7 -j limit-229 --A FORWARD -o eth1 -d fc00::/7 -j limit-230 --A FORWARD -o eth1 -d fc00::/7 -j limit-231 --A FORWARD -o eth1 -d fc00::/7 -j limit-232 --A FORWARD -o eth1 -d fc00::/7 -j limit-233 --A FORWARD -o eth1 -d fc00::/7 -j limit-234 --A FORWARD -o eth1 -d fc00::/7 -j limit-235 --A FORWARD -o eth1 -d fc00::/7 -j limit-236 --A FORWARD -o eth1 -d fc00::/7 -j limit-237 --A FORWARD -o eth1 -d fc00::/7 -j limit-238 --A FORWARD -o eth1 -d fc00::/7 -j limit-239 --A FORWARD -o eth1 -d fc00::/7 -j limit-240 --A FORWARD -o eth1 -d fc00::/7 -j limit-241 --A FORWARD -o eth1 -d fc00::/7 -j limit-242 --A FORWARD -o eth1 -d fc00::/7 -j limit-243 --A FORWARD -o eth1 -d fc00::/7 -j limit-244 --A FORWARD -o eth1 -d fc00::/7 -j limit-245 --A FORWARD -o eth1 -d fc00::/7 -j limit-246 --A FORWARD -o eth1 -d fc00::/7 -j limit-247 --A FORWARD -o eth1 -d fc00::/7 -j limit-248 --A FORWARD -o eth1 -d fc00::/7 -j limit-249 --A FORWARD -o eth1 -d fc00::/7 -j limit-250 --A FORWARD -o eth1 -d fc00::/7 -j limit-251 --A FORWARD -o eth1 -d fc00::/7 -j limit-252 --A FORWARD -o eth1 -d fc00::/7 -j limit-253 --A FORWARD -o eth1 -d fc00::/7 -j limit-254 --A FORWARD -o eth1 -d fc00::/7 -j limit-255 --A FORWARD -o eth1 -d fc00::/7 -j limit-256 --A FORWARD -o eth1 -d fc00::/7 -j limit-257 --A FORWARD -o eth1 -d fc00::/7 -j limit-258 --A FORWARD -o eth1 -d fc00::/7 -j limit-259 --A FORWARD -o eth1 -d fc00::/7 -j limit-260 --A FORWARD -o eth1 -d fc00::/7 -j limit-261 --A FORWARD -o eth1 -d fc00::/7 -j limit-262 --A FORWARD -o eth1 -d fc00::/7 -j limit-263 --A FORWARD -o eth1 -d fc00::/7 -j limit-264 --A FORWARD -o eth1 -d fc00::/7 -j limit-265 --A FORWARD -o eth1 -d fc00::/7 -j limit-266 --A FORWARD -o eth1 -d fc00::/7 -j limit-267 --A FORWARD -o eth1 -d fc00::/7 -j limit-268 --A FORWARD -o eth1 -d fc00::/7 -j limit-269 --A FORWARD -o eth1 -d fc00::/7 -j limit-270 --A FORWARD -o eth1 -d fc00::/7 -j limit-271 --A FORWARD -o eth1 -d fc00::/7 -j limit-272 --A FORWARD -o eth1 -d fc00::/7 -j limit-273 --A FORWARD -o eth1 -d fc00::/7 -j limit-274 --A FORWARD -o eth1 -d fc00::/7 -j limit-275 --A FORWARD -o eth1 -d fc00::/7 -j limit-276 --A FORWARD -o eth1 -d fc00::/7 -j limit-277 --A FORWARD -o eth1 -d fc00::/7 -j limit-278 --A FORWARD -o eth1 -d fc00::/7 -j limit-279 --A FORWARD -o eth1 -d fc00::/7 -j limit-280 --A FORWARD -o eth1 -d fc00::/7 -j limit-281 --A FORWARD -o eth1 -d fc00::/7 -j limit-282 --A FORWARD -o eth1 -d fc00::/7 -j limit-283 --A FORWARD -o eth1 -d fc00::/7 -j limit-284 --A FORWARD -o eth1 -d fc00::/7 -j limit-285 --A FORWARD -o eth1 -d fc00::/7 -j limit-286 --A FORWARD -o eth1 -d fc00::/7 -j limit-287 --A FORWARD -o eth1 -d fc00::/7 -j limit-288 --A FORWARD -o eth1 -d fc00::/7 -j limit-289 --A FORWARD -o eth1 -d fc00::/7 -j limit-290 --A FORWARD -o eth1 -d fc00::/7 -j limit-291 --A FORWARD -o eth1 -d fc00::/7 -j limit-292 --A FORWARD -o eth1 -d fc00::/7 -j limit-293 --A FORWARD -o eth1 -d fc00::/7 -j limit-294 --A FORWARD -o eth1 -d fc00::/7 -j limit-295 --A FORWARD -o eth1 -d fc00::/7 -j limit-296 --A FORWARD -o eth1 -d fc00::/7 -j limit-297 --A FORWARD -o eth1 -d fc00::/7 -j limit-298 --A FORWARD -o eth1 -d fc00::/7 -j limit-299 --A FORWARD -o eth1 -d fc00::/7 -j limit-300 --A FORWARD -o eth1 -d fc00::/7 -j limit-301 --A FORWARD -o eth1 -d fc00::/7 -j limit-302 --A FORWARD -o eth1 -d fc00::/7 -j limit-303 --A FORWARD -o eth1 -d fc00::/7 -j limit-304 --A FORWARD -o eth1 -d fc00::/7 -j limit-305 --A FORWARD -o eth1 -d fc00::/7 -j limit-306 --A FORWARD -o eth1 -d fc00::/7 -j limit-307 --A FORWARD -o eth1 -d fc00::/7 -j limit-308 --A FORWARD -o eth1 -d fc00::/7 -j limit-309 --A FORWARD -o eth1 -d fc00::/7 -j limit-310 --A FORWARD -o eth1 -d fc00::/7 -j limit-311 --A FORWARD -o eth1 -d fc00::/7 -j limit-312 --A FORWARD -o eth1 -d fc00::/7 -j limit-313 --A FORWARD -o eth1 -d fc00::/7 -j limit-314 --A FORWARD -o eth1 -d fc00::/7 -j limit-315 --A FORWARD -o eth1 -d fc00::/7 -j limit-316 --A FORWARD -o eth1 -d fc00::/7 -j limit-317 --A FORWARD -o eth1 -d fc00::/7 -j limit-318 --A FORWARD -o eth1 -d fc00::/7 -j limit-319 --A FORWARD -o eth1 -d fc00::/7 -j limit-320 --A FORWARD -o eth1 -d fc00::/7 -j limit-321 --A FORWARD -o eth1 -d fc00::/7 -j limit-322 --A FORWARD -o eth1 -d fc00::/7 -j limit-323 --A FORWARD -o eth1 -d fc00::/7 -j limit-324 --A FORWARD -o eth1 -d fc00::/7 -j limit-325 --A FORWARD -o eth1 -d fc00::/7 -j limit-326 --A FORWARD -o eth1 -d fc00::/7 -j limit-327 --A FORWARD -o eth1 -d fc00::/7 -j limit-328 --A FORWARD -o eth1 -d fc00::/7 -j limit-329 --A FORWARD -o eth1 -d fc00::/7 -j limit-330 --A FORWARD -o eth1 -d fc00::/7 -j limit-331 --A FORWARD -o eth1 -d fc00::/7 -j limit-332 --A FORWARD -o eth1 -d fc00::/7 -j limit-333 --A FORWARD -o eth1 -d fc00::/7 -j limit-334 --A FORWARD -o eth1 -d fc00::/7 -j limit-335 --A FORWARD -o eth1 -d fc00::/7 -j limit-336 --A FORWARD -o eth1 -d fc00::/7 -j limit-337 --A FORWARD -o eth1 -d fc00::/7 -j limit-338 --A FORWARD -o eth1 -d fc00::/7 -j limit-339 --A FORWARD -o eth1 -d fc00::/7 -j limit-340 --A FORWARD -o eth1 -d fc00::/7 -j limit-341 --A FORWARD -o eth1 -d fc00::/7 -j limit-342 --A FORWARD -o eth1 -d fc00::/7 -j limit-343 --A FORWARD -o eth1 -d fc00::/7 -j limit-344 --A FORWARD -o eth1 -d fc00::/7 -j limit-345 --A FORWARD -o eth1 -d fc00::/7 -j limit-346 --A FORWARD -o eth1 -d fc00::/7 -j limit-347 --A FORWARD -o eth1 -d fc00::/7 -j limit-348 --A FORWARD -o eth1 -d fc00::/7 -j limit-349 --A FORWARD -o eth1 -d fc00::/7 -j limit-350 --A FORWARD -o eth1 -d fc00::/7 -j limit-351 --A FORWARD -o eth1 -d fc00::/7 -j limit-352 --A FORWARD -o eth1 -d fc00::/7 -j limit-353 --A FORWARD -o eth1 -d fc00::/7 -j limit-354 --A FORWARD -o eth1 -d fc00::/7 -j limit-355 --A FORWARD -o eth1 -d fc00::/7 -j limit-356 --A FORWARD -o eth1 -d fc00::/7 -j limit-357 --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-0 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-1 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-2 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-3 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-4 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-5 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-6 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-7 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-8 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-9 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-10 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-11 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-12 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-13 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-14 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-15 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-16 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-17 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-18 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-19 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-20 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-21 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-22 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-23 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-24 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-25 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-26 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-27 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-28 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-29 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-30 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-31 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-32 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-33 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-34 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-35 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-36 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-37 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-38 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-39 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-40 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-41 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-42 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-43 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-44 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-45 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-46 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-47 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-48 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-49 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-50 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-51 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-52 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-53 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-54 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-55 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-56 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-57 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-58 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-59 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-60 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logaccept-final-61 --A FORWARD -j ACCEPT --A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A FORWARD -m recent --name user:C --rsource --mask fe00:: --set --A FORWARD -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set --A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A FORWARD -j ACCEPT --A FORWARD -j logdrop-457 --A FORWARD --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD --A FORWARD -j logaccept-84 --A FORWARD -j logdrop-458 --A FORWARD -j logpass-50 --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD --A FORWARD -i eth0 -j ACCEPT --A FORWARD -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -i eth0 -o eth4 -j ACCEPT --A FORWARD -i eth0 -o eth5 -j ACCEPT --A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth4 -o eth0 -j ACCEPT --A FORWARD -i eth5 -o eth0 -j ACCEPT --A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -i eth4 -o eth4 -j ACCEPT --A FORWARD -i eth4 -o eth5 -j ACCEPT --A FORWARD -i eth5 -o eth4 -j ACCEPT --A FORWARD -i eth5 -o eth5 -j ACCEPT --A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT --A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT --A FORWARD -p icmpv6 -j icmp-routing --A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -j limit-1073 --A INPUT -j limit-1072 --A INPUT -j limit-1071 --A INPUT -j limit-1070 --A INPUT -j limit-1069 --A INPUT -j limit-1068 --A INPUT -j limit-1067 --A INPUT -j limit-1066 --A INPUT -j limit-1065 --A INPUT -j limit-1064 --A INPUT -j limit-1063 --A INPUT -j limit-1062 --A INPUT -j limit-1061 --A INPUT -j limit-1060 --A INPUT -j limit-1059 --A INPUT -j limit-1058 --A INPUT -j limit-1057 --A INPUT -j limit-1056 --A INPUT -j limit-1055 --A INPUT -j limit-1054 --A INPUT -j limit-1053 --A INPUT -j limit-1052 --A INPUT -j limit-1051 --A INPUT -j limit-1050 --A INPUT -j limit-1049 --A INPUT -j limit-1048 --A INPUT -j limit-1047 --A INPUT -j limit-1046 --A INPUT -j limit-1045 --A INPUT -j limit-1044 --A INPUT -j limit-1043 --A INPUT -j limit-1042 --A INPUT -j limit-1041 --A INPUT -j limit-1040 --A INPUT -j limit-1039 --A INPUT -j limit-1038 --A INPUT -j limit-1037 --A INPUT -j limit-1036 --A INPUT -j limit-1035 --A INPUT -j limit-1034 --A INPUT -j limit-1033 --A INPUT -j limit-1032 --A INPUT -j limit-1031 --A INPUT -j limit-1030 --A INPUT -j limit-1029 --A INPUT -j limit-1028 --A INPUT -j limit-1027 --A INPUT -j limit-1026 --A INPUT -j limit-1025 --A INPUT -j limit-1024 --A INPUT -j limit-1023 --A INPUT -j limit-1022 --A INPUT -j limit-1021 --A INPUT -j limit-1020 --A INPUT -j limit-1019 --A INPUT -j limit-1018 --A INPUT -j limit-1017 --A INPUT -j limit-1016 --A INPUT -j limit-1015 --A INPUT -j limit-1014 --A INPUT -j limit-1013 --A INPUT -j limit-1012 --A INPUT -j limit-1011 --A INPUT -j limit-1010 --A INPUT -j limit-1009 --A INPUT -j limit-1008 --A INPUT -j limit-1007 --A INPUT -j limit-1006 --A INPUT -j limit-1005 --A INPUT -j limit-1004 --A INPUT -j limit-1003 --A INPUT -j limit-1002 --A INPUT -j limit-1001 --A INPUT -j limit-1000 --A INPUT -j limit-999 --A INPUT -j limit-998 --A INPUT -j limit-997 --A INPUT -j limit-996 --A INPUT -j limit-995 --A INPUT -j limit-994 --A INPUT -j limit-993 --A INPUT -j limit-992 --A INPUT -j limit-991 --A INPUT -j limit-990 --A INPUT -j limit-989 --A INPUT -j limit-988 --A INPUT -j limit-987 --A INPUT -j limit-986 --A INPUT -j limit-985 --A INPUT -j limit-984 --A INPUT -j limit-983 --A INPUT -j limit-982 --A INPUT -j limit-981 --A INPUT -j limit-980 --A INPUT -j limit-979 --A INPUT -j limit-978 --A INPUT -j limit-977 --A INPUT -j limit-976 --A INPUT -j limit-975 --A INPUT -j limit-974 --A INPUT -j limit-973 --A INPUT -j limit-972 --A INPUT -j limit-971 --A INPUT -j limit-970 --A INPUT -j limit-969 --A INPUT -j limit-968 --A INPUT -j limit-967 --A INPUT -j limit-966 --A INPUT -j limit-965 --A INPUT -j limit-964 --A INPUT -j limit-963 --A INPUT -j limit-962 --A INPUT -j limit-961 --A INPUT -j limit-960 --A INPUT -j limit-959 --A INPUT -j limit-958 --A INPUT -j limit-957 --A INPUT -j limit-956 --A INPUT -j limit-955 --A INPUT -j limit-954 --A INPUT -j limit-953 --A INPUT -j limit-952 --A INPUT -j limit-951 --A INPUT -j limit-950 --A INPUT -j limit-949 --A INPUT -j limit-948 --A INPUT -j limit-947 --A INPUT -j limit-946 --A INPUT -j limit-945 --A INPUT -j limit-944 --A INPUT -j limit-943 --A INPUT -j limit-942 --A INPUT -j limit-941 --A INPUT -j limit-940 --A INPUT -j limit-939 --A INPUT -j limit-938 --A INPUT -j limit-937 --A INPUT -j limit-936 --A INPUT -j limit-935 --A INPUT -j limit-934 --A INPUT -j limit-933 --A INPUT -j limit-932 --A INPUT -j limit-931 --A INPUT -j limit-930 --A INPUT -j limit-929 --A INPUT -j limit-928 --A INPUT -j limit-927 --A INPUT -j limit-926 --A INPUT -j limit-925 --A INPUT -j limit-924 --A INPUT -j limit-923 --A INPUT -j limit-922 --A INPUT -j limit-921 --A INPUT -j limit-920 --A INPUT -j limit-919 --A INPUT -j limit-918 --A INPUT -j limit-917 --A INPUT -j limit-916 --A INPUT -j limit-915 --A INPUT -j limit-914 --A INPUT -j limit-913 --A INPUT -j limit-912 --A INPUT -j limit-911 --A INPUT -j limit-910 --A INPUT -j limit-909 --A INPUT -j limit-908 --A INPUT -j limit-907 --A INPUT -j limit-906 --A INPUT -j limit-905 --A INPUT -j limit-904 --A INPUT -j limit-903 --A INPUT -j limit-902 --A INPUT -j limit-901 --A INPUT -j limit-900 --A INPUT -j limit-899 --A INPUT -j limit-898 --A INPUT -j limit-897 --A INPUT -j limit-896 --A INPUT -j limit-895 --A INPUT -j limit-894 --A INPUT -j limit-893 --A INPUT -j limit-892 --A INPUT -j limit-891 --A INPUT -j limit-890 --A INPUT -j limit-889 --A INPUT -j limit-888 --A INPUT -j limit-887 --A INPUT -j limit-886 --A INPUT -j limit-885 --A INPUT -j limit-884 --A INPUT -j limit-883 --A INPUT -j limit-882 --A INPUT -j limit-881 --A INPUT -j limit-880 --A INPUT -j limit-879 --A INPUT -j limit-878 --A INPUT -j limit-877 --A INPUT -j limit-876 --A INPUT -j limit-875 --A INPUT -j limit-874 --A INPUT -j limit-873 --A INPUT -j limit-872 --A INPUT -j limit-871 --A INPUT -j limit-870 --A INPUT -j limit-869 --A INPUT -j limit-868 --A INPUT -j limit-867 --A INPUT -j limit-866 --A INPUT -j limit-865 --A INPUT -j limit-864 --A INPUT -j limit-863 --A INPUT -j limit-862 --A INPUT -j limit-861 --A INPUT -j limit-860 --A INPUT -j limit-859 --A INPUT -j limit-858 --A INPUT -j limit-857 --A INPUT -j limit-856 --A INPUT -j limit-855 --A INPUT -j limit-854 --A INPUT -j limit-853 --A INPUT -j limit-852 --A INPUT -j limit-851 --A INPUT -j limit-850 --A INPUT -j limit-849 --A INPUT -j limit-848 --A INPUT -j limit-847 --A INPUT -j limit-846 --A INPUT -j limit-845 --A INPUT -j limit-844 --A INPUT -j limit-843 --A INPUT -j limit-842 --A INPUT -j limit-841 --A INPUT -j limit-840 --A INPUT -j limit-839 --A INPUT -j limit-838 --A INPUT -j limit-837 --A INPUT -j limit-836 --A INPUT -j limit-835 --A INPUT -j limit-834 --A INPUT -j limit-833 --A INPUT -j limit-832 --A INPUT -j limit-831 --A INPUT -j limit-830 --A INPUT -j limit-829 --A INPUT -j limit-828 --A INPUT -j limit-827 --A INPUT -j limit-826 --A INPUT -j limit-825 --A INPUT -j limit-824 --A INPUT -j limit-823 --A INPUT -j limit-822 --A INPUT -j limit-821 --A INPUT -j limit-820 --A INPUT -j limit-819 --A INPUT -j limit-818 --A INPUT -j limit-817 --A INPUT -j limit-816 --A INPUT -j limit-815 --A INPUT -j limit-814 --A INPUT -j limit-813 --A INPUT -j limit-812 --A INPUT -j limit-811 --A INPUT -j limit-810 --A INPUT -j limit-809 --A INPUT -j limit-808 --A INPUT -j limit-807 --A INPUT -j limit-806 --A INPUT -j limit-805 --A INPUT -j limit-804 --A INPUT -j limit-803 --A INPUT -j limit-802 --A INPUT -j limit-801 --A INPUT -j limit-800 --A INPUT -j limit-799 --A INPUT -j limit-798 --A INPUT -j limit-797 --A INPUT -j limit-796 --A INPUT -j limit-795 --A INPUT -j limit-794 --A INPUT -j limit-793 --A INPUT -j limit-792 --A INPUT -j limit-791 --A INPUT -j limit-790 --A INPUT -j limit-789 --A INPUT -j limit-788 --A INPUT -j limit-787 --A INPUT -j limit-786 --A INPUT -j limit-785 --A INPUT -j limit-784 --A INPUT -j limit-783 --A INPUT -j limit-782 --A INPUT -j limit-781 --A INPUT -j limit-780 --A INPUT -j limit-779 --A INPUT -j limit-778 --A INPUT -j limit-777 --A INPUT -j limit-776 --A INPUT -j limit-775 --A INPUT -j limit-774 --A INPUT -j limit-773 --A INPUT -j limit-772 --A INPUT -j limit-771 --A INPUT -j limit-770 --A INPUT -j limit-769 --A INPUT -j limit-768 --A INPUT -j limit-767 --A INPUT -j limit-766 --A INPUT -j limit-765 --A INPUT -j limit-764 --A INPUT -j limit-763 --A INPUT -j limit-762 --A INPUT -j limit-761 --A INPUT -j limit-760 --A INPUT -j limit-759 --A INPUT -j limit-758 --A INPUT -j limit-757 --A INPUT -j limit-756 --A INPUT -j limit-755 --A INPUT -j limit-754 --A INPUT -j limit-753 --A INPUT -j limit-752 --A INPUT -j limit-751 --A INPUT -j limit-750 --A INPUT -j limit-749 --A INPUT -j limit-748 --A INPUT -j limit-747 --A INPUT -j limit-746 --A INPUT -j limit-745 --A INPUT -j limit-744 --A INPUT -j limit-743 --A INPUT -j limit-742 --A INPUT -j limit-741 --A INPUT -j limit-740 --A INPUT -j limit-739 --A INPUT -j limit-738 --A INPUT -j limit-737 --A INPUT -j limit-736 --A INPUT -j limit-735 --A INPUT -j limit-734 --A INPUT -j limit-733 --A INPUT -j limit-732 --A INPUT -j limit-731 --A INPUT -j limit-730 --A INPUT -j limit-729 --A INPUT -j limit-728 --A INPUT -j limit-727 --A INPUT -j limit-726 --A INPUT -j limit-725 --A INPUT -j limit-724 --A INPUT -j limit-723 --A INPUT -j limit-722 --A INPUT -j limit-721 --A INPUT -j limit-720 --A INPUT -j limit-719 --A INPUT -j limit-718 --A INPUT -j limit-717 --A INPUT -j limit-716 --A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT --A INPUT -i lo -j ACCEPT --A INPUT -j ACCEPT --A INPUT --A INPUT -j logaccept-0 --A INPUT -j logpass-0 --A INPUT -i eth0 -j ACCEPT --A INPUT -i eth0 --A INPUT -i eth0 -j logaccept-18 --A INPUT -i eth0 -j logpass-16 --A INPUT -i eth1 -s fc00::/7 -j ACCEPT --A INPUT -i eth1 -s fc00::/7 --A INPUT -i eth1 -s fc00::/7 -j logaccept-36 --A INPUT -i eth1 -s fc00::/7 -j logpass-30 --A INPUT -i eth1 -s fc00::/7 -j ACCEPT --A INPUT -i eth1 -s fc00::/7 --A INPUT -i eth1 -s fc00::/7 -j logaccept-45 --A INPUT -i eth1 -s fc00::/7 -j logpass-37 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logdrop-0 --A INPUT --A INPUT -j logreject-0 --A INPUT -j logtarpit-0 --A INPUT -j ACCEPT --A INPUT -j logaccept-final-0 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-1 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-2 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-3 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-4 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-5 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-6 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-7 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-8 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-9 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-10 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-11 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-12 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-13 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-14 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-15 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-16 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-17 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-18 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-19 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-20 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-21 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-22 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-23 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-24 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-25 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-26 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-27 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-28 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-29 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-30 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-31 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-32 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-33 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-34 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-35 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-36 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-37 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-38 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-39 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-40 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-41 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-42 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-43 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-44 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-45 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-46 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-47 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-48 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-49 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-50 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-51 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-52 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-53 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-54 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-55 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-56 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-57 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-58 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-59 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-60 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logaccept-final-61 --A INPUT -j ACCEPT --A INPUT -i eth0 -j limit-1074 --A INPUT -i eth0 -j limit-1075 --A INPUT -i eth0 -j limit-1076 --A INPUT -i eth0 -j limit-1077 --A INPUT -i eth0 -j limit-1078 --A INPUT -i eth0 -j limit-1079 --A INPUT -i eth0 -j limit-1080 --A INPUT -i eth0 -j limit-1081 --A INPUT -i eth0 -j limit-1082 --A INPUT -i eth0 -j limit-1083 --A INPUT -i eth0 -j limit-1084 --A INPUT -i eth0 -j limit-1085 --A INPUT -i eth0 -j limit-1086 --A INPUT -i eth0 -j limit-1087 --A INPUT -i eth0 -j limit-1088 --A INPUT -i eth0 -j limit-1089 --A INPUT -i eth0 -j limit-1090 --A INPUT -i eth0 -j limit-1091 --A INPUT -i eth0 -j limit-1092 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-362 --A INPUT -i eth0 -j limit-1094 --A INPUT -i eth0 -j limit-1095 --A INPUT -i eth0 -j limit-1096 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-366 --A INPUT -i eth0 -j limit-1098 --A INPUT -i eth0 -j limit-1099 --A INPUT -i eth0 -j limit-1100 --A INPUT -i eth0 -j limit-1101 --A INPUT -i eth0 -j limit-1102 --A INPUT -i eth0 -j limit-1103 --A INPUT -i eth0 -j limit-1104 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-374 --A INPUT -i eth0 -j limit-1106 --A INPUT -i eth0 -j limit-1107 --A INPUT -i eth0 -j limit-1108 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-378 --A INPUT -i eth0 -j limit-1110 --A INPUT -i eth0 -j limit-1111 --A INPUT -i eth0 -j limit-1112 --A INPUT -i eth0 -j limit-1113 --A INPUT -i eth0 -j limit-1114 --A INPUT -i eth0 -j limit-1115 --A INPUT -i eth0 -j limit-1116 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-386 --A INPUT -i eth0 -j limit-1118 --A INPUT -i eth0 -j limit-1119 --A INPUT -i eth0 -j limit-1120 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-390 --A INPUT -i eth0 -j limit-1122 --A INPUT -i eth0 -j limit-1123 --A INPUT -i eth0 -j limit-1124 --A INPUT -i eth0 -j limit-1125 --A INPUT -i eth0 -j limit-1126 --A INPUT -i eth0 -j limit-1127 --A INPUT -i eth0 -j limit-1128 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-398 --A INPUT -i eth0 -j limit-1130 --A INPUT -i eth0 -j limit-1131 --A INPUT -i eth0 -j limit-1132 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-402 --A INPUT -i eth0 -j limit-1134 --A INPUT -i eth0 -j limit-1135 --A INPUT -i eth0 -j limit-1136 --A INPUT -i eth0 -j limit-1137 --A INPUT -i eth0 -j limit-1138 --A INPUT -i eth0 -j limit-1139 --A INPUT -i eth0 -j limit-1140 --A INPUT -i eth0 -j limit-1141 --A INPUT -i eth0 -j limit-1142 --A INPUT -i eth0 -j limit-1143 --A INPUT -i eth0 -j limit-1144 --A INPUT -i eth0 -j limit-1145 --A INPUT -i eth0 -j limit-1146 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1148 --A INPUT -i eth0 -j limit-1149 --A INPUT -i eth0 -j limit-1150 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1152 --A INPUT -i eth0 -j limit-1153 --A INPUT -i eth0 -j limit-1154 --A INPUT -i eth0 -j limit-1155 --A INPUT -i eth0 -j limit-1156 --A INPUT -i eth0 -j limit-1157 --A INPUT -i eth0 -j limit-1158 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1160 --A INPUT -i eth0 -j limit-1161 --A INPUT -i eth0 -j limit-1162 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1164 --A INPUT -i eth0 -j limit-1165 --A INPUT -i eth0 -j limit-1166 --A INPUT -i eth0 -j limit-1167 --A INPUT -i eth0 -j limit-1168 --A INPUT -i eth0 -j limit-1169 --A INPUT -i eth0 -j limit-1170 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1172 --A INPUT -i eth0 -j limit-1173 --A INPUT -i eth0 -j limit-1174 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1176 --A INPUT -i eth0 -j limit-1177 --A INPUT -i eth0 -j limit-1178 --A INPUT -i eth0 -j limit-1179 --A INPUT -i eth0 -j limit-1180 --A INPUT -i eth0 -j limit-1181 --A INPUT -i eth0 -j limit-1182 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1184 --A INPUT -i eth0 -j limit-1185 --A INPUT -i eth0 -j limit-1186 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1188 --A INPUT -i eth0 -j limit-1189 --A INPUT -i eth0 -j limit-1190 --A INPUT -i eth0 -j limit-1191 --A INPUT -i eth0 -j limit-1192 --A INPUT -i eth0 -j limit-1193 --A INPUT -i eth0 -j limit-1194 --A INPUT -i eth0 -j limit-1195 --A INPUT -i eth0 -j limit-1196 --A INPUT -i eth0 -j limit-1197 --A INPUT -i eth0 -j limit-1198 --A INPUT -i eth0 -j limit-1199 --A INPUT -i eth0 -j limit-1200 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1202 --A INPUT -i eth0 -j limit-1203 --A INPUT -i eth0 -j limit-1204 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1206 --A INPUT -i eth0 -j limit-1207 --A INPUT -i eth0 -j limit-1208 --A INPUT -i eth0 -j limit-1209 --A INPUT -i eth0 -j limit-1210 --A INPUT -i eth0 -j limit-1211 --A INPUT -i eth0 -j limit-1212 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1214 --A INPUT -i eth0 -j limit-1215 --A INPUT -i eth0 -j limit-1216 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1218 --A INPUT -i eth0 -j limit-1219 --A INPUT -i eth0 -j limit-1220 --A INPUT -i eth0 -j limit-1221 --A INPUT -i eth0 -j limit-1222 --A INPUT -i eth0 -j limit-1223 --A INPUT -i eth0 -j limit-1224 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1226 --A INPUT -i eth0 -j limit-1227 --A INPUT -i eth0 -j limit-1228 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1230 --A INPUT -i eth0 -j limit-1231 --A INPUT -i eth0 -j limit-1232 --A INPUT -i eth0 -j limit-1233 --A INPUT -i eth0 -j limit-1234 --A INPUT -i eth0 -j limit-1235 --A INPUT -i eth0 -j limit-1236 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1238 --A INPUT -i eth0 -j limit-1239 --A INPUT -i eth0 -j limit-1240 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1242 --A INPUT -i eth0 -j limit-1243 --A INPUT -i eth0 -j limit-1244 --A INPUT -i eth0 -j limit-1245 --A INPUT -i eth0 -j limit-1246 --A INPUT -i eth0 -j limit-1247 --A INPUT -i eth0 -j limit-1248 --A INPUT -i eth0 -j limit-1249 --A INPUT -i eth0 -j limit-1250 --A INPUT -i eth0 -j limit-1251 --A INPUT -i eth0 -j limit-1252 --A INPUT -i eth0 -j limit-1253 --A INPUT -i eth0 -j limit-1254 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 --A INPUT -i eth0 -j limit-1256 --A INPUT -i eth0 -j limit-1257 --A INPUT -i eth0 -j limit-1258 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-420 --A INPUT -i eth0 -j limit-1260 --A INPUT -i eth0 -j limit-1261 --A INPUT -i eth0 -j limit-1262 --A INPUT -i eth0 -j limit-1263 --A INPUT -i eth0 -j limit-1264 --A INPUT -i eth0 -j limit-1265 --A INPUT -i eth0 -j limit-1266 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-428 --A INPUT -i eth0 -j limit-1268 --A INPUT -i eth0 -j limit-1269 --A INPUT -i eth0 -j limit-1270 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-432 --A INPUT -i eth0 -j limit-1272 --A INPUT -i eth0 -j limit-1273 --A INPUT -i eth0 -j limit-1274 --A INPUT -i eth0 -j limit-1275 --A INPUT -i eth0 -j limit-1276 --A INPUT -i eth0 -j limit-1277 --A INPUT -i eth0 -j limit-1278 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-440 --A INPUT -i eth0 -j limit-1280 --A INPUT -i eth0 -j limit-1281 --A INPUT -i eth0 -j limit-1282 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-444 --A INPUT -i eth0 -j limit-1284 --A INPUT -i eth0 -j limit-1285 --A INPUT -i eth0 -j limit-1286 --A INPUT -i eth0 -j limit-1287 --A INPUT -i eth0 -j limit-1288 --A INPUT -i eth0 -j limit-1289 --A INPUT -i eth0 -j limit-1290 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 --A INPUT -i eth0 -j limit-1292 --A INPUT -i eth0 -j limit-1293 --A INPUT -i eth0 -j limit-1294 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-456 --A INPUT -i eth0 -j limit-1296 --A INPUT -i eth0 -j limit-1297 --A INPUT -i eth0 -j limit-1298 --A INPUT -i eth0 -j limit-1299 --A INPUT -i eth0 -j limit-1300 --A INPUT -i eth0 -j limit-1301 --A INPUT -i eth0 -j limit-1302 --A INPUT -i eth0 -j limit-1303 --A INPUT -i eth0 -j limit-1304 --A INPUT -i eth0 -j limit-1305 --A INPUT -i eth0 -j limit-1306 --A INPUT -i eth0 -j limit-1307 --A INPUT -i eth0 -j limit-1308 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1310 --A INPUT -i eth0 -j limit-1311 --A INPUT -i eth0 -j limit-1312 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1314 --A INPUT -i eth0 -j limit-1315 --A INPUT -i eth0 -j limit-1316 --A INPUT -i eth0 -j limit-1317 --A INPUT -i eth0 -j limit-1318 --A INPUT -i eth0 -j limit-1319 --A INPUT -i eth0 -j limit-1320 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1322 --A INPUT -i eth0 -j limit-1323 --A INPUT -i eth0 -j limit-1324 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1326 --A INPUT -i eth0 -j limit-1327 --A INPUT -i eth0 -j limit-1328 --A INPUT -i eth0 -j limit-1329 --A INPUT -i eth0 -j limit-1330 --A INPUT -i eth0 -j limit-1331 --A INPUT -i eth0 -j limit-1332 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1334 --A INPUT -i eth0 -j limit-1335 --A INPUT -i eth0 -j limit-1336 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1338 --A INPUT -i eth0 -j limit-1339 --A INPUT -i eth0 -j limit-1340 --A INPUT -i eth0 -j limit-1341 --A INPUT -i eth0 -j limit-1342 --A INPUT -i eth0 -j limit-1343 --A INPUT -i eth0 -j limit-1344 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1346 --A INPUT -i eth0 -j limit-1347 --A INPUT -i eth0 -j limit-1348 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1350 --A INPUT -i eth0 -j limit-1351 --A INPUT -i eth0 -j limit-1352 --A INPUT -i eth0 -j limit-1353 --A INPUT -i eth0 -j limit-1354 --A INPUT -i eth0 -j limit-1355 --A INPUT -i eth0 -j limit-1356 --A INPUT -i eth0 -j limit-1357 --A INPUT -i eth0 -j limit-1358 --A INPUT -i eth0 -j limit-1359 --A INPUT -i eth0 -j limit-1360 --A INPUT -i eth0 -j limit-1361 --A INPUT -i eth0 -j limit-1362 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1364 --A INPUT -i eth0 -j limit-1365 --A INPUT -i eth0 -j limit-1366 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1368 --A INPUT -i eth0 -j limit-1369 --A INPUT -i eth0 -j limit-1370 --A INPUT -i eth0 -j limit-1371 --A INPUT -i eth0 -j limit-1372 --A INPUT -i eth0 -j limit-1373 --A INPUT -i eth0 -j limit-1374 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1376 --A INPUT -i eth0 -j limit-1377 --A INPUT -i eth0 -j limit-1378 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1380 --A INPUT -i eth0 -j limit-1381 --A INPUT -i eth0 -j limit-1382 --A INPUT -i eth0 -j limit-1383 --A INPUT -i eth0 -j limit-1384 --A INPUT -i eth0 -j limit-1385 --A INPUT -i eth0 -j limit-1386 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1388 --A INPUT -i eth0 -j limit-1389 --A INPUT -i eth0 -j limit-1390 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1392 --A INPUT -i eth0 -j limit-1393 --A INPUT -i eth0 -j limit-1394 --A INPUT -i eth0 -j limit-1395 --A INPUT -i eth0 -j limit-1396 --A INPUT -i eth0 -j limit-1397 --A INPUT -i eth0 -j limit-1398 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1400 --A INPUT -i eth0 -j limit-1401 --A INPUT -i eth0 -j limit-1402 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-1404 --A INPUT -i eth0 -j limit-1405 --A INPUT -i eth0 -j limit-1406 --A INPUT -i eth0 -j limit-1407 --A INPUT -i eth0 -j limit-1408 --A INPUT -i eth0 -j limit-1409 --A INPUT -i eth0 -j limit-1410 --A INPUT -i eth0 -j limit-1411 --A INPUT -i eth0 -j limit-1412 --A INPUT -i eth0 -j limit-1413 --A INPUT -i eth0 -j limit-1414 --A INPUT -i eth0 -j limit-1415 --A INPUT -i eth0 -j limit-1416 --A INPUT -i eth0 -j limit-1417 --A INPUT -i eth0 -j limit-1418 --A INPUT -i eth0 -j limit-1419 --A INPUT -i eth0 -j limit-1420 --A INPUT -i eth0 -j limit-1421 --A INPUT -i eth0 -j limit-1422 --A INPUT -i eth0 -j limit-1423 --A INPUT -i eth0 -j limit-1424 --A INPUT -i eth0 -j limit-1425 --A INPUT -i eth0 -j limit-1426 --A INPUT -i eth0 -j limit-1427 --A INPUT -i eth0 -j limit-1428 --A INPUT -i eth0 -j limit-1429 --A INPUT -i eth0 -j limit-1430 --A INPUT -i eth0 -j limit-1431 --A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -m recent --name user:C --rsource --mask fe00:: --set --A INPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set --A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -j ACCEPT --A INPUT -j logdrop-457 --A INPUT --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT --A INPUT -j logaccept-84 --A INPUT -j logdrop-458 --A INPUT -j logpass-50 --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT --A INPUT -p tcp --sport 80 -j ACCEPT --A INPUT -p esp -j ACCEPT --A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT --A INPUT -i eth0 -j ACCEPT --A INPUT -j ACCEPT --A INPUT -p icmpv6 -j ACCEPT --A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -j limit-1073 --A OUTPUT -j limit-1072 --A OUTPUT -j limit-1071 --A OUTPUT -j limit-1070 --A OUTPUT -j limit-1069 --A OUTPUT -j limit-1068 --A OUTPUT -j limit-1067 --A OUTPUT -j limit-1066 --A OUTPUT -j limit-1065 --A OUTPUT -j limit-1064 --A OUTPUT -j limit-1063 --A OUTPUT -j limit-1062 --A OUTPUT -j limit-1061 --A OUTPUT -j limit-1060 --A OUTPUT -j limit-1059 --A OUTPUT -j limit-1058 --A OUTPUT -j limit-1057 --A OUTPUT -j limit-1056 --A OUTPUT -j limit-1055 --A OUTPUT -j limit-1054 --A OUTPUT -j limit-1053 --A OUTPUT -j limit-1052 --A OUTPUT -j limit-1051 --A OUTPUT -j limit-1050 --A OUTPUT -j limit-1049 --A OUTPUT -j limit-1048 --A OUTPUT -j limit-1047 --A OUTPUT -j limit-1046 --A OUTPUT -j limit-1045 --A OUTPUT -j limit-1044 --A OUTPUT -j limit-1043 --A OUTPUT -j limit-1042 --A OUTPUT -j limit-1041 --A OUTPUT -j limit-1040 --A OUTPUT -j limit-1039 --A OUTPUT -j limit-1038 --A OUTPUT -j limit-1037 --A OUTPUT -j limit-1036 --A OUTPUT -j limit-1035 --A OUTPUT -j limit-1034 --A OUTPUT -j limit-1033 --A OUTPUT -j limit-1032 --A OUTPUT -j limit-1031 --A OUTPUT -j limit-1030 --A OUTPUT -j limit-1029 --A OUTPUT -j limit-1028 --A OUTPUT -j limit-1027 --A OUTPUT -j limit-1026 --A OUTPUT -j limit-1025 --A OUTPUT -j limit-1024 --A OUTPUT -j limit-1023 --A OUTPUT -j limit-1022 --A OUTPUT -j limit-1021 --A OUTPUT -j limit-1020 --A OUTPUT -j limit-1019 --A OUTPUT -j limit-1018 --A OUTPUT -j limit-1017 --A OUTPUT -j limit-1016 --A OUTPUT -j limit-1015 --A OUTPUT -j limit-1014 --A OUTPUT -j limit-1013 --A OUTPUT -j limit-1012 --A OUTPUT -j limit-1011 --A OUTPUT -j limit-1010 --A OUTPUT -j limit-1009 --A OUTPUT -j limit-1008 --A OUTPUT -j limit-1007 --A OUTPUT -j limit-1006 --A OUTPUT -j limit-1005 --A OUTPUT -j limit-1004 --A OUTPUT -j limit-1003 --A OUTPUT -j limit-1002 --A OUTPUT -j limit-1001 --A OUTPUT -j limit-1000 --A OUTPUT -j limit-999 --A OUTPUT -j limit-998 --A OUTPUT -j limit-997 --A OUTPUT -j limit-996 --A OUTPUT -j limit-995 --A OUTPUT -j limit-994 --A OUTPUT -j limit-993 --A OUTPUT -j limit-992 --A OUTPUT -j limit-991 --A OUTPUT -j limit-990 --A OUTPUT -j limit-989 --A OUTPUT -j limit-988 --A OUTPUT -j limit-987 --A OUTPUT -j limit-986 --A OUTPUT -j limit-985 --A OUTPUT -j limit-984 --A OUTPUT -j limit-983 --A OUTPUT -j limit-982 --A OUTPUT -j limit-981 --A OUTPUT -j limit-980 --A OUTPUT -j limit-979 --A OUTPUT -j limit-978 --A OUTPUT -j limit-977 --A OUTPUT -j limit-976 --A OUTPUT -j limit-975 --A OUTPUT -j limit-974 --A OUTPUT -j limit-973 --A OUTPUT -j limit-972 --A OUTPUT -j limit-971 --A OUTPUT -j limit-970 --A OUTPUT -j limit-969 --A OUTPUT -j limit-968 --A OUTPUT -j limit-967 --A OUTPUT -j limit-966 --A OUTPUT -j limit-965 --A OUTPUT -j limit-964 --A OUTPUT -j limit-963 --A OUTPUT -j limit-962 --A OUTPUT -j limit-961 --A OUTPUT -j limit-960 --A OUTPUT -j limit-959 --A OUTPUT -j limit-958 --A OUTPUT -j limit-957 --A OUTPUT -j limit-956 --A OUTPUT -j limit-955 --A OUTPUT -j limit-954 --A OUTPUT -j limit-953 --A OUTPUT -j limit-952 --A OUTPUT -j limit-951 --A OUTPUT -j limit-950 --A OUTPUT -j limit-949 --A OUTPUT -j limit-948 --A OUTPUT -j limit-947 --A OUTPUT -j limit-946 --A OUTPUT -j limit-945 --A OUTPUT -j limit-944 --A OUTPUT -j limit-943 --A OUTPUT -j limit-942 --A OUTPUT -j limit-941 --A OUTPUT -j limit-940 --A OUTPUT -j limit-939 --A OUTPUT -j limit-938 --A OUTPUT -j limit-937 --A OUTPUT -j limit-936 --A OUTPUT -j limit-935 --A OUTPUT -j limit-934 --A OUTPUT -j limit-933 --A OUTPUT -j limit-932 --A OUTPUT -j limit-931 --A OUTPUT -j limit-930 --A OUTPUT -j limit-929 --A OUTPUT -j limit-928 --A OUTPUT -j limit-927 --A OUTPUT -j limit-926 --A OUTPUT -j limit-925 --A OUTPUT -j limit-924 --A OUTPUT -j limit-923 --A OUTPUT -j limit-922 --A OUTPUT -j limit-921 --A OUTPUT -j limit-920 --A OUTPUT -j limit-919 --A OUTPUT -j limit-918 --A OUTPUT -j limit-917 --A OUTPUT -j limit-916 --A OUTPUT -j limit-915 --A OUTPUT -j limit-914 --A OUTPUT -j limit-913 --A OUTPUT -j limit-912 --A OUTPUT -j limit-911 --A OUTPUT -j limit-910 --A OUTPUT -j limit-909 --A OUTPUT -j limit-908 --A OUTPUT -j limit-907 --A OUTPUT -j limit-906 --A OUTPUT -j limit-905 --A OUTPUT -j limit-904 --A OUTPUT -j limit-903 --A OUTPUT -j limit-902 --A OUTPUT -j limit-901 --A OUTPUT -j limit-900 --A OUTPUT -j limit-899 --A OUTPUT -j limit-898 --A OUTPUT -j limit-897 --A OUTPUT -j limit-896 --A OUTPUT -j limit-895 --A OUTPUT -j limit-894 --A OUTPUT -j limit-893 --A OUTPUT -j limit-892 --A OUTPUT -j limit-891 --A OUTPUT -j limit-890 --A OUTPUT -j limit-889 --A OUTPUT -j limit-888 --A OUTPUT -j limit-887 --A OUTPUT -j limit-886 --A OUTPUT -j limit-885 --A OUTPUT -j limit-884 --A OUTPUT -j limit-883 --A OUTPUT -j limit-882 --A OUTPUT -j limit-881 --A OUTPUT -j limit-880 --A OUTPUT -j limit-879 --A OUTPUT -j limit-878 --A OUTPUT -j limit-877 --A OUTPUT -j limit-876 --A OUTPUT -j limit-875 --A OUTPUT -j limit-874 --A OUTPUT -j limit-873 --A OUTPUT -j limit-872 --A OUTPUT -j limit-871 --A OUTPUT -j limit-870 --A OUTPUT -j limit-869 --A OUTPUT -j limit-868 --A OUTPUT -j limit-867 --A OUTPUT -j limit-866 --A OUTPUT -j limit-865 --A OUTPUT -j limit-864 --A OUTPUT -j limit-863 --A OUTPUT -j limit-862 --A OUTPUT -j limit-861 --A OUTPUT -j limit-860 --A OUTPUT -j limit-859 --A OUTPUT -j limit-858 --A OUTPUT -j limit-857 --A OUTPUT -j limit-856 --A OUTPUT -j limit-855 --A OUTPUT -j limit-854 --A OUTPUT -j limit-853 --A OUTPUT -j limit-852 --A OUTPUT -j limit-851 --A OUTPUT -j limit-850 --A OUTPUT -j limit-849 --A OUTPUT -j limit-848 --A OUTPUT -j limit-847 --A OUTPUT -j limit-846 --A OUTPUT -j limit-845 --A OUTPUT -j limit-844 --A OUTPUT -j limit-843 --A OUTPUT -j limit-842 --A OUTPUT -j limit-841 --A OUTPUT -j limit-840 --A OUTPUT -j limit-839 --A OUTPUT -j limit-838 --A OUTPUT -j limit-837 --A OUTPUT -j limit-836 --A OUTPUT -j limit-835 --A OUTPUT -j limit-834 --A OUTPUT -j limit-833 --A OUTPUT -j limit-832 --A OUTPUT -j limit-831 --A OUTPUT -j limit-830 --A OUTPUT -j limit-829 --A OUTPUT -j limit-828 --A OUTPUT -j limit-827 --A OUTPUT -j limit-826 --A OUTPUT -j limit-825 --A OUTPUT -j limit-824 --A OUTPUT -j limit-823 --A OUTPUT -j limit-822 --A OUTPUT -j limit-821 --A OUTPUT -j limit-820 --A OUTPUT -j limit-819 --A OUTPUT -j limit-818 --A OUTPUT -j limit-817 --A OUTPUT -j limit-816 --A OUTPUT -j limit-815 --A OUTPUT -j limit-814 --A OUTPUT -j limit-813 --A OUTPUT -j limit-812 --A OUTPUT -j limit-811 --A OUTPUT -j limit-810 --A OUTPUT -j limit-809 --A OUTPUT -j limit-808 --A OUTPUT -j limit-807 --A OUTPUT -j limit-806 --A OUTPUT -j limit-805 --A OUTPUT -j limit-804 --A OUTPUT -j limit-803 --A OUTPUT -j limit-802 --A OUTPUT -j limit-801 --A OUTPUT -j limit-800 --A OUTPUT -j limit-799 --A OUTPUT -j limit-798 --A OUTPUT -j limit-797 --A OUTPUT -j limit-796 --A OUTPUT -j limit-795 --A OUTPUT -j limit-794 --A OUTPUT -j limit-793 --A OUTPUT -j limit-792 --A OUTPUT -j limit-791 --A OUTPUT -j limit-790 --A OUTPUT -j limit-789 --A OUTPUT -j limit-788 --A OUTPUT -j limit-787 --A OUTPUT -j limit-786 --A OUTPUT -j limit-785 --A OUTPUT -j limit-784 --A OUTPUT -j limit-783 --A OUTPUT -j limit-782 --A OUTPUT -j limit-781 --A OUTPUT -j limit-780 --A OUTPUT -j limit-779 --A OUTPUT -j limit-778 --A OUTPUT -j limit-777 --A OUTPUT -j limit-776 --A OUTPUT -j limit-775 --A OUTPUT -j limit-774 --A OUTPUT -j limit-773 --A OUTPUT -j limit-772 --A OUTPUT -j limit-771 --A OUTPUT -j limit-770 --A OUTPUT -j limit-769 --A OUTPUT -j limit-768 --A OUTPUT -j limit-767 --A OUTPUT -j limit-766 --A OUTPUT -j limit-765 --A OUTPUT -j limit-764 --A OUTPUT -j limit-763 --A OUTPUT -j limit-762 --A OUTPUT -j limit-761 --A OUTPUT -j limit-760 --A OUTPUT -j limit-759 --A OUTPUT -j limit-758 --A OUTPUT -j limit-757 --A OUTPUT -j limit-756 --A OUTPUT -j limit-755 --A OUTPUT -j limit-754 --A OUTPUT -j limit-753 --A OUTPUT -j limit-752 --A OUTPUT -j limit-751 --A OUTPUT -j limit-750 --A OUTPUT -j limit-749 --A OUTPUT -j limit-748 --A OUTPUT -j limit-747 --A OUTPUT -j limit-746 --A OUTPUT -j limit-745 --A OUTPUT -j limit-744 --A OUTPUT -j limit-743 --A OUTPUT -j limit-742 --A OUTPUT -j limit-741 --A OUTPUT -j limit-740 --A OUTPUT -j limit-739 --A OUTPUT -j limit-738 --A OUTPUT -j limit-737 --A OUTPUT -j limit-736 --A OUTPUT -j limit-735 --A OUTPUT -j limit-734 --A OUTPUT -j limit-733 --A OUTPUT -j limit-732 --A OUTPUT -j limit-731 --A OUTPUT -j limit-730 --A OUTPUT -j limit-729 --A OUTPUT -j limit-728 --A OUTPUT -j limit-727 --A OUTPUT -j limit-726 --A OUTPUT -j limit-725 --A OUTPUT -j limit-724 --A OUTPUT -j limit-723 --A OUTPUT -j limit-722 --A OUTPUT -j limit-721 --A OUTPUT -j limit-720 --A OUTPUT -j limit-719 --A OUTPUT -j limit-718 --A OUTPUT -j limit-717 --A OUTPUT -j limit-716 --A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT --A OUTPUT -o lo -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT --A OUTPUT -j logaccept-0 --A OUTPUT -j logpass-0 --A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT --A OUTPUT -o eth1 -d fc00::/7 --A OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 --A OUTPUT -o eth1 -d fc00::/7 -j logpass-9 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-0 --A OUTPUT --A OUTPUT -j logreject-0 --A OUTPUT -j logtarpit-0 --A OUTPUT -o eth1 -d fc00::/7 -j limit-0 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1 --A OUTPUT -o eth1 -d fc00::/7 -j limit-2 --A OUTPUT -o eth1 -d fc00::/7 -j limit-3 --A OUTPUT -o eth1 -d fc00::/7 -j limit-4 --A OUTPUT -o eth1 -d fc00::/7 -j limit-5 --A OUTPUT -o eth1 -d fc00::/7 -j limit-6 --A OUTPUT -o eth1 -d fc00::/7 -j limit-7 --A OUTPUT -o eth1 -d fc00::/7 -j limit-8 --A OUTPUT -o eth1 -d fc00::/7 -j limit-9 --A OUTPUT -o eth1 -d fc00::/7 -j limit-10 --A OUTPUT -o eth1 -d fc00::/7 -j limit-11 --A OUTPUT -o eth1 -d fc00::/7 -j limit-12 --A OUTPUT -o eth1 -d fc00::/7 -j limit-13 --A OUTPUT -o eth1 -d fc00::/7 -j limit-14 --A OUTPUT -o eth1 -d fc00::/7 -j limit-15 --A OUTPUT -o eth1 -d fc00::/7 -j limit-16 --A OUTPUT -o eth1 -d fc00::/7 -j limit-17 --A OUTPUT -o eth1 -d fc00::/7 -j limit-18 --A OUTPUT -o eth1 -d fc00::/7 -j limit-19 --A OUTPUT -o eth1 -d fc00::/7 -j limit-20 --A OUTPUT -o eth1 -d fc00::/7 -j limit-21 --A OUTPUT -o eth1 -d fc00::/7 -j limit-22 --A OUTPUT -o eth1 -d fc00::/7 -j limit-23 --A OUTPUT -o eth1 -d fc00::/7 -j limit-24 --A OUTPUT -o eth1 -d fc00::/7 -j limit-25 --A OUTPUT -o eth1 -d fc00::/7 -j limit-26 --A OUTPUT -o eth1 -d fc00::/7 -j limit-27 --A OUTPUT -o eth1 -d fc00::/7 -j limit-28 --A OUTPUT -o eth1 -d fc00::/7 -j limit-29 --A OUTPUT -o eth1 -d fc00::/7 -j limit-30 --A OUTPUT -o eth1 -d fc00::/7 -j limit-31 --A OUTPUT -o eth1 -d fc00::/7 -j limit-32 --A OUTPUT -o eth1 -d fc00::/7 -j limit-33 --A OUTPUT -o eth1 -d fc00::/7 -j limit-34 --A OUTPUT -o eth1 -d fc00::/7 -j limit-35 --A OUTPUT -o eth1 -d fc00::/7 -j limit-36 --A OUTPUT -o eth1 -d fc00::/7 -j limit-37 --A OUTPUT -o eth1 -d fc00::/7 -j limit-38 --A OUTPUT -o eth1 -d fc00::/7 -j limit-39 --A OUTPUT -o eth1 -d fc00::/7 -j limit-40 --A OUTPUT -o eth1 -d fc00::/7 -j limit-41 --A OUTPUT -o eth1 -d fc00::/7 -j limit-42 --A OUTPUT -o eth1 -d fc00::/7 -j limit-43 --A OUTPUT -o eth1 -d fc00::/7 -j limit-44 --A OUTPUT -o eth1 -d fc00::/7 -j limit-45 --A OUTPUT -o eth1 -d fc00::/7 -j limit-46 --A OUTPUT -o eth1 -d fc00::/7 -j limit-47 --A OUTPUT -o eth1 -d fc00::/7 -j limit-48 --A OUTPUT -o eth1 -d fc00::/7 -j limit-49 --A OUTPUT -o eth1 -d fc00::/7 -j limit-50 --A OUTPUT -o eth1 -d fc00::/7 -j limit-51 --A OUTPUT -o eth1 -d fc00::/7 -j limit-52 --A OUTPUT -o eth1 -d fc00::/7 -j limit-53 --A OUTPUT -o eth1 -d fc00::/7 -j limit-54 --A OUTPUT -o eth1 -d fc00::/7 -j limit-55 --A OUTPUT -o eth1 -d fc00::/7 -j limit-56 --A OUTPUT -o eth1 -d fc00::/7 -j limit-57 --A OUTPUT -o eth1 -d fc00::/7 -j limit-58 --A OUTPUT -o eth1 -d fc00::/7 -j limit-59 --A OUTPUT -o eth1 -d fc00::/7 -j limit-60 --A OUTPUT -o eth1 -d fc00::/7 -j limit-61 --A OUTPUT -o eth1 -d fc00::/7 -j limit-62 --A OUTPUT -o eth1 -d fc00::/7 -j limit-63 --A OUTPUT -o eth1 -d fc00::/7 -j limit-64 --A OUTPUT -o eth1 -d fc00::/7 -j limit-65 --A OUTPUT -o eth1 -d fc00::/7 -j limit-66 --A OUTPUT -o eth1 -d fc00::/7 -j limit-67 --A OUTPUT -o eth1 -d fc00::/7 -j limit-68 --A OUTPUT -o eth1 -d fc00::/7 -j limit-69 --A OUTPUT -o eth1 -d fc00::/7 -j limit-70 --A OUTPUT -o eth1 -d fc00::/7 -j limit-71 --A OUTPUT -o eth1 -d fc00::/7 -j limit-72 --A OUTPUT -o eth1 -d fc00::/7 -j limit-73 --A OUTPUT -o eth1 -d fc00::/7 -j limit-74 --A OUTPUT -o eth1 -d fc00::/7 -j limit-75 --A OUTPUT -o eth1 -d fc00::/7 -j limit-76 --A OUTPUT -o eth1 -d fc00::/7 -j limit-77 --A OUTPUT -o eth1 -d fc00::/7 -j limit-78 --A OUTPUT -o eth1 -d fc00::/7 -j limit-79 --A OUTPUT -o eth1 -d fc00::/7 -j limit-80 --A OUTPUT -o eth1 -d fc00::/7 -j limit-81 --A OUTPUT -o eth1 -d fc00::/7 -j limit-82 --A OUTPUT -o eth1 -d fc00::/7 -j limit-83 --A OUTPUT -o eth1 -d fc00::/7 -j limit-84 --A OUTPUT -o eth1 -d fc00::/7 -j limit-85 --A OUTPUT -o eth1 -d fc00::/7 -j limit-86 --A OUTPUT -o eth1 -d fc00::/7 -j limit-87 --A OUTPUT -o eth1 -d fc00::/7 -j limit-88 --A OUTPUT -o eth1 -d fc00::/7 -j limit-89 --A OUTPUT -o eth1 -d fc00::/7 -j limit-90 --A OUTPUT -o eth1 -d fc00::/7 -j limit-91 --A OUTPUT -o eth1 -d fc00::/7 -j limit-92 --A OUTPUT -o eth1 -d fc00::/7 -j limit-93 --A OUTPUT -o eth1 -d fc00::/7 -j limit-94 --A OUTPUT -o eth1 -d fc00::/7 -j limit-95 --A OUTPUT -o eth1 -d fc00::/7 -j limit-96 --A OUTPUT -o eth1 -d fc00::/7 -j limit-97 --A OUTPUT -o eth1 -d fc00::/7 -j limit-98 --A OUTPUT -o eth1 -d fc00::/7 -j limit-99 --A OUTPUT -o eth1 -d fc00::/7 -j limit-100 --A OUTPUT -o eth1 -d fc00::/7 -j limit-101 --A OUTPUT -o eth1 -d fc00::/7 -j limit-102 --A OUTPUT -o eth1 -d fc00::/7 -j limit-103 --A OUTPUT -o eth1 -d fc00::/7 -j limit-104 --A OUTPUT -o eth1 -d fc00::/7 -j limit-105 --A OUTPUT -o eth1 -d fc00::/7 -j limit-106 --A OUTPUT -o eth1 -d fc00::/7 -j limit-107 --A OUTPUT -o eth1 -d fc00::/7 -j limit-108 --A OUTPUT -o eth1 -d fc00::/7 -j limit-109 --A OUTPUT -o eth1 -d fc00::/7 -j limit-110 --A OUTPUT -o eth1 -d fc00::/7 -j limit-111 --A OUTPUT -o eth1 -d fc00::/7 -j limit-112 --A OUTPUT -o eth1 -d fc00::/7 -j limit-113 --A OUTPUT -o eth1 -d fc00::/7 -j limit-114 --A OUTPUT -o eth1 -d fc00::/7 -j limit-115 --A OUTPUT -o eth1 -d fc00::/7 -j limit-116 --A OUTPUT -o eth1 -d fc00::/7 -j limit-117 --A OUTPUT -o eth1 -d fc00::/7 -j limit-118 --A OUTPUT -o eth1 -d fc00::/7 -j limit-119 --A OUTPUT -o eth1 -d fc00::/7 -j limit-120 --A OUTPUT -o eth1 -d fc00::/7 -j limit-121 --A OUTPUT -o eth1 -d fc00::/7 -j limit-122 --A OUTPUT -o eth1 -d fc00::/7 -j limit-123 --A OUTPUT -o eth1 -d fc00::/7 -j limit-124 --A OUTPUT -o eth1 -d fc00::/7 -j limit-125 --A OUTPUT -o eth1 -d fc00::/7 -j limit-126 --A OUTPUT -o eth1 -d fc00::/7 -j limit-127 --A OUTPUT -o eth1 -d fc00::/7 -j limit-128 --A OUTPUT -o eth1 -d fc00::/7 -j limit-129 --A OUTPUT -o eth1 -d fc00::/7 -j limit-130 --A OUTPUT -o eth1 -d fc00::/7 -j limit-131 --A OUTPUT -o eth1 -d fc00::/7 -j limit-132 --A OUTPUT -o eth1 -d fc00::/7 -j limit-133 --A OUTPUT -o eth1 -d fc00::/7 -j limit-134 --A OUTPUT -o eth1 -d fc00::/7 -j limit-135 --A OUTPUT -o eth1 -d fc00::/7 -j limit-136 --A OUTPUT -o eth1 -d fc00::/7 -j limit-137 --A OUTPUT -o eth1 -d fc00::/7 -j limit-138 --A OUTPUT -o eth1 -d fc00::/7 -j limit-139 --A OUTPUT -o eth1 -d fc00::/7 -j limit-140 --A OUTPUT -o eth1 -d fc00::/7 -j limit-141 --A OUTPUT -o eth1 -d fc00::/7 -j limit-142 --A OUTPUT -o eth1 -d fc00::/7 -j limit-143 --A OUTPUT -o eth1 -d fc00::/7 -j limit-144 --A OUTPUT -o eth1 -d fc00::/7 -j limit-145 --A OUTPUT -o eth1 -d fc00::/7 -j limit-146 --A OUTPUT -o eth1 -d fc00::/7 -j limit-147 --A OUTPUT -o eth1 -d fc00::/7 -j limit-148 --A OUTPUT -o eth1 -d fc00::/7 -j limit-149 --A OUTPUT -o eth1 -d fc00::/7 -j limit-150 --A OUTPUT -o eth1 -d fc00::/7 -j limit-151 --A OUTPUT -o eth1 -d fc00::/7 -j limit-152 --A OUTPUT -o eth1 -d fc00::/7 -j limit-153 --A OUTPUT -o eth1 -d fc00::/7 -j limit-154 --A OUTPUT -o eth1 -d fc00::/7 -j limit-155 --A OUTPUT -o eth1 -d fc00::/7 -j limit-156 --A OUTPUT -o eth1 -d fc00::/7 -j limit-157 --A OUTPUT -o eth1 -d fc00::/7 -j limit-158 --A OUTPUT -o eth1 -d fc00::/7 -j limit-159 --A OUTPUT -o eth1 -d fc00::/7 -j limit-160 --A OUTPUT -o eth1 -d fc00::/7 -j limit-161 --A OUTPUT -o eth1 -d fc00::/7 -j limit-162 --A OUTPUT -o eth1 -d fc00::/7 -j limit-163 --A OUTPUT -o eth1 -d fc00::/7 -j limit-164 --A OUTPUT -o eth1 -d fc00::/7 -j limit-165 --A OUTPUT -o eth1 -d fc00::/7 -j limit-166 --A OUTPUT -o eth1 -d fc00::/7 -j limit-167 --A OUTPUT -o eth1 -d fc00::/7 -j limit-168 --A OUTPUT -o eth1 -d fc00::/7 -j limit-169 --A OUTPUT -o eth1 -d fc00::/7 -j limit-170 --A OUTPUT -o eth1 -d fc00::/7 -j limit-171 --A OUTPUT -o eth1 -d fc00::/7 -j limit-172 --A OUTPUT -o eth1 -d fc00::/7 -j limit-173 --A OUTPUT -o eth1 -d fc00::/7 -j limit-174 --A OUTPUT -o eth1 -d fc00::/7 -j limit-175 --A OUTPUT -o eth1 -d fc00::/7 -j limit-176 --A OUTPUT -o eth1 -d fc00::/7 -j limit-177 --A OUTPUT -o eth1 -d fc00::/7 -j limit-178 --A OUTPUT -o eth1 -d fc00::/7 -j limit-179 --A OUTPUT -o eth1 -d fc00::/7 -j limit-180 --A OUTPUT -o eth1 -d fc00::/7 -j limit-181 --A OUTPUT -o eth1 -d fc00::/7 -j limit-182 --A OUTPUT -o eth1 -d fc00::/7 -j limit-183 --A OUTPUT -o eth1 -d fc00::/7 -j limit-184 --A OUTPUT -o eth1 -d fc00::/7 -j limit-185 --A OUTPUT -o eth1 -d fc00::/7 -j limit-186 --A OUTPUT -o eth1 -d fc00::/7 -j limit-187 --A OUTPUT -o eth1 -d fc00::/7 -j limit-188 --A OUTPUT -o eth1 -d fc00::/7 -j limit-189 --A OUTPUT -o eth1 -d fc00::/7 -j limit-190 --A OUTPUT -o eth1 -d fc00::/7 -j limit-191 --A OUTPUT -o eth1 -d fc00::/7 -j limit-192 --A OUTPUT -o eth1 -d fc00::/7 -j limit-193 --A OUTPUT -o eth1 -d fc00::/7 -j limit-194 --A OUTPUT -o eth1 -d fc00::/7 -j limit-195 --A OUTPUT -o eth1 -d fc00::/7 -j limit-196 --A OUTPUT -o eth1 -d fc00::/7 -j limit-197 --A OUTPUT -o eth1 -d fc00::/7 -j limit-198 --A OUTPUT -o eth1 -d fc00::/7 -j limit-199 --A OUTPUT -o eth1 -d fc00::/7 -j limit-200 --A OUTPUT -o eth1 -d fc00::/7 -j limit-201 --A OUTPUT -o eth1 -d fc00::/7 -j limit-202 --A OUTPUT -o eth1 -d fc00::/7 -j limit-203 --A OUTPUT -o eth1 -d fc00::/7 -j limit-204 --A OUTPUT -o eth1 -d fc00::/7 -j limit-205 --A OUTPUT -o eth1 -d fc00::/7 -j limit-206 --A OUTPUT -o eth1 -d fc00::/7 -j limit-207 --A OUTPUT -o eth1 -d fc00::/7 -j limit-208 --A OUTPUT -o eth1 -d fc00::/7 -j limit-209 --A OUTPUT -o eth1 -d fc00::/7 -j limit-210 --A OUTPUT -o eth1 -d fc00::/7 -j limit-211 --A OUTPUT -o eth1 -d fc00::/7 -j limit-212 --A OUTPUT -o eth1 -d fc00::/7 -j limit-213 --A OUTPUT -o eth1 -d fc00::/7 -j limit-214 --A OUTPUT -o eth1 -d fc00::/7 -j limit-215 --A OUTPUT -o eth1 -d fc00::/7 -j limit-216 --A OUTPUT -o eth1 -d fc00::/7 -j limit-217 --A OUTPUT -o eth1 -d fc00::/7 -j limit-218 --A OUTPUT -o eth1 -d fc00::/7 -j limit-219 --A OUTPUT -o eth1 -d fc00::/7 -j limit-220 --A OUTPUT -o eth1 -d fc00::/7 -j limit-221 --A OUTPUT -o eth1 -d fc00::/7 -j limit-222 --A OUTPUT -o eth1 -d fc00::/7 -j limit-223 --A OUTPUT -o eth1 -d fc00::/7 -j limit-224 --A OUTPUT -o eth1 -d fc00::/7 -j limit-225 --A OUTPUT -o eth1 -d fc00::/7 -j limit-226 --A OUTPUT -o eth1 -d fc00::/7 -j limit-227 --A OUTPUT -o eth1 -d fc00::/7 -j limit-228 --A OUTPUT -o eth1 -d fc00::/7 -j limit-229 --A OUTPUT -o eth1 -d fc00::/7 -j limit-230 --A OUTPUT -o eth1 -d fc00::/7 -j limit-231 --A OUTPUT -o eth1 -d fc00::/7 -j limit-232 --A OUTPUT -o eth1 -d fc00::/7 -j limit-233 --A OUTPUT -o eth1 -d fc00::/7 -j limit-234 --A OUTPUT -o eth1 -d fc00::/7 -j limit-235 --A OUTPUT -o eth1 -d fc00::/7 -j limit-236 --A OUTPUT -o eth1 -d fc00::/7 -j limit-237 --A OUTPUT -o eth1 -d fc00::/7 -j limit-238 --A OUTPUT -o eth1 -d fc00::/7 -j limit-239 --A OUTPUT -o eth1 -d fc00::/7 -j limit-240 --A OUTPUT -o eth1 -d fc00::/7 -j limit-241 --A OUTPUT -o eth1 -d fc00::/7 -j limit-242 --A OUTPUT -o eth1 -d fc00::/7 -j limit-243 --A OUTPUT -o eth1 -d fc00::/7 -j limit-244 --A OUTPUT -o eth1 -d fc00::/7 -j limit-245 --A OUTPUT -o eth1 -d fc00::/7 -j limit-246 --A OUTPUT -o eth1 -d fc00::/7 -j limit-247 --A OUTPUT -o eth1 -d fc00::/7 -j limit-248 --A OUTPUT -o eth1 -d fc00::/7 -j limit-249 --A OUTPUT -o eth1 -d fc00::/7 -j limit-250 --A OUTPUT -o eth1 -d fc00::/7 -j limit-251 --A OUTPUT -o eth1 -d fc00::/7 -j limit-252 --A OUTPUT -o eth1 -d fc00::/7 -j limit-253 --A OUTPUT -o eth1 -d fc00::/7 -j limit-254 --A OUTPUT -o eth1 -d fc00::/7 -j limit-255 --A OUTPUT -o eth1 -d fc00::/7 -j limit-256 --A OUTPUT -o eth1 -d fc00::/7 -j limit-257 --A OUTPUT -o eth1 -d fc00::/7 -j limit-258 --A OUTPUT -o eth1 -d fc00::/7 -j limit-259 --A OUTPUT -o eth1 -d fc00::/7 -j limit-260 --A OUTPUT -o eth1 -d fc00::/7 -j limit-261 --A OUTPUT -o eth1 -d fc00::/7 -j limit-262 --A OUTPUT -o eth1 -d fc00::/7 -j limit-263 --A OUTPUT -o eth1 -d fc00::/7 -j limit-264 --A OUTPUT -o eth1 -d fc00::/7 -j limit-265 --A OUTPUT -o eth1 -d fc00::/7 -j limit-266 --A OUTPUT -o eth1 -d fc00::/7 -j limit-267 --A OUTPUT -o eth1 -d fc00::/7 -j limit-268 --A OUTPUT -o eth1 -d fc00::/7 -j limit-269 --A OUTPUT -o eth1 -d fc00::/7 -j limit-270 --A OUTPUT -o eth1 -d fc00::/7 -j limit-271 --A OUTPUT -o eth1 -d fc00::/7 -j limit-272 --A OUTPUT -o eth1 -d fc00::/7 -j limit-273 --A OUTPUT -o eth1 -d fc00::/7 -j limit-274 --A OUTPUT -o eth1 -d fc00::/7 -j limit-275 --A OUTPUT -o eth1 -d fc00::/7 -j limit-276 --A OUTPUT -o eth1 -d fc00::/7 -j limit-277 --A OUTPUT -o eth1 -d fc00::/7 -j limit-278 --A OUTPUT -o eth1 -d fc00::/7 -j limit-279 --A OUTPUT -o eth1 -d fc00::/7 -j limit-280 --A OUTPUT -o eth1 -d fc00::/7 -j limit-281 --A OUTPUT -o eth1 -d fc00::/7 -j limit-282 --A OUTPUT -o eth1 -d fc00::/7 -j limit-283 --A OUTPUT -o eth1 -d fc00::/7 -j limit-284 --A OUTPUT -o eth1 -d fc00::/7 -j limit-285 --A OUTPUT -o eth1 -d fc00::/7 -j limit-286 --A OUTPUT -o eth1 -d fc00::/7 -j limit-287 --A OUTPUT -o eth1 -d fc00::/7 -j limit-288 --A OUTPUT -o eth1 -d fc00::/7 -j limit-289 --A OUTPUT -o eth1 -d fc00::/7 -j limit-290 --A OUTPUT -o eth1 -d fc00::/7 -j limit-291 --A OUTPUT -o eth1 -d fc00::/7 -j limit-292 --A OUTPUT -o eth1 -d fc00::/7 -j limit-293 --A OUTPUT -o eth1 -d fc00::/7 -j limit-294 --A OUTPUT -o eth1 -d fc00::/7 -j limit-295 --A OUTPUT -o eth1 -d fc00::/7 -j limit-296 --A OUTPUT -o eth1 -d fc00::/7 -j limit-297 --A OUTPUT -o eth1 -d fc00::/7 -j limit-298 --A OUTPUT -o eth1 -d fc00::/7 -j limit-299 --A OUTPUT -o eth1 -d fc00::/7 -j limit-300 --A OUTPUT -o eth1 -d fc00::/7 -j limit-301 --A OUTPUT -o eth1 -d fc00::/7 -j limit-302 --A OUTPUT -o eth1 -d fc00::/7 -j limit-303 --A OUTPUT -o eth1 -d fc00::/7 -j limit-304 --A OUTPUT -o eth1 -d fc00::/7 -j limit-305 --A OUTPUT -o eth1 -d fc00::/7 -j limit-306 --A OUTPUT -o eth1 -d fc00::/7 -j limit-307 --A OUTPUT -o eth1 -d fc00::/7 -j limit-308 --A OUTPUT -o eth1 -d fc00::/7 -j limit-309 --A OUTPUT -o eth1 -d fc00::/7 -j limit-310 --A OUTPUT -o eth1 -d fc00::/7 -j limit-311 --A OUTPUT -o eth1 -d fc00::/7 -j limit-312 --A OUTPUT -o eth1 -d fc00::/7 -j limit-313 --A OUTPUT -o eth1 -d fc00::/7 -j limit-314 --A OUTPUT -o eth1 -d fc00::/7 -j limit-315 --A OUTPUT -o eth1 -d fc00::/7 -j limit-316 --A OUTPUT -o eth1 -d fc00::/7 -j limit-317 --A OUTPUT -o eth1 -d fc00::/7 -j limit-318 --A OUTPUT -o eth1 -d fc00::/7 -j limit-319 --A OUTPUT -o eth1 -d fc00::/7 -j limit-320 --A OUTPUT -o eth1 -d fc00::/7 -j limit-321 --A OUTPUT -o eth1 -d fc00::/7 -j limit-322 --A OUTPUT -o eth1 -d fc00::/7 -j limit-323 --A OUTPUT -o eth1 -d fc00::/7 -j limit-324 --A OUTPUT -o eth1 -d fc00::/7 -j limit-325 --A OUTPUT -o eth1 -d fc00::/7 -j limit-326 --A OUTPUT -o eth1 -d fc00::/7 -j limit-327 --A OUTPUT -o eth1 -d fc00::/7 -j limit-328 --A OUTPUT -o eth1 -d fc00::/7 -j limit-329 --A OUTPUT -o eth1 -d fc00::/7 -j limit-330 --A OUTPUT -o eth1 -d fc00::/7 -j limit-331 --A OUTPUT -o eth1 -d fc00::/7 -j limit-332 --A OUTPUT -o eth1 -d fc00::/7 -j limit-333 --A OUTPUT -o eth1 -d fc00::/7 -j limit-334 --A OUTPUT -o eth1 -d fc00::/7 -j limit-335 --A OUTPUT -o eth1 -d fc00::/7 -j limit-336 --A OUTPUT -o eth1 -d fc00::/7 -j limit-337 --A OUTPUT -o eth1 -d fc00::/7 -j limit-338 --A OUTPUT -o eth1 -d fc00::/7 -j limit-339 --A OUTPUT -o eth1 -d fc00::/7 -j limit-340 --A OUTPUT -o eth1 -d fc00::/7 -j limit-341 --A OUTPUT -o eth1 -d fc00::/7 -j limit-342 --A OUTPUT -o eth1 -d fc00::/7 -j limit-343 --A OUTPUT -o eth1 -d fc00::/7 -j limit-344 --A OUTPUT -o eth1 -d fc00::/7 -j limit-345 --A OUTPUT -o eth1 -d fc00::/7 -j limit-346 --A OUTPUT -o eth1 -d fc00::/7 -j limit-347 --A OUTPUT -o eth1 -d fc00::/7 -j limit-348 --A OUTPUT -o eth1 -d fc00::/7 -j limit-349 --A OUTPUT -o eth1 -d fc00::/7 -j limit-350 --A OUTPUT -o eth1 -d fc00::/7 -j limit-351 --A OUTPUT -o eth1 -d fc00::/7 -j limit-352 --A OUTPUT -o eth1 -d fc00::/7 -j limit-353 --A OUTPUT -o eth1 -d fc00::/7 -j limit-354 --A OUTPUT -o eth1 -d fc00::/7 -j limit-355 --A OUTPUT -o eth1 -d fc00::/7 -j limit-356 --A OUTPUT -o eth1 -d fc00::/7 -j limit-357 --A OUTPUT -o eth1 -d fc00::/7 -j limit-358 --A OUTPUT -o eth1 -d fc00::/7 -j limit-359 --A OUTPUT -o eth1 -d fc00::/7 -j limit-360 --A OUTPUT -o eth1 -d fc00::/7 -j limit-361 --A OUTPUT -o eth1 -d fc00::/7 -j limit-362 --A OUTPUT -o eth1 -d fc00::/7 -j limit-363 --A OUTPUT -o eth1 -d fc00::/7 -j limit-364 --A OUTPUT -o eth1 -d fc00::/7 -j limit-365 --A OUTPUT -o eth1 -d fc00::/7 -j limit-366 --A OUTPUT -o eth1 -d fc00::/7 -j limit-367 --A OUTPUT -o eth1 -d fc00::/7 -j limit-368 --A OUTPUT -o eth1 -d fc00::/7 -j limit-369 --A OUTPUT -o eth1 -d fc00::/7 -j limit-370 --A OUTPUT -o eth1 -d fc00::/7 -j limit-371 --A OUTPUT -o eth1 -d fc00::/7 -j limit-372 --A OUTPUT -o eth1 -d fc00::/7 -j limit-373 --A OUTPUT -o eth1 -d fc00::/7 -j limit-374 --A OUTPUT -o eth1 -d fc00::/7 -j limit-375 --A OUTPUT -o eth1 -d fc00::/7 -j limit-376 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 --A OUTPUT -o eth1 -d fc00::/7 -j limit-378 --A OUTPUT -o eth1 -d fc00::/7 -j limit-379 --A OUTPUT -o eth1 -d fc00::/7 -j limit-380 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-138 --A OUTPUT -o eth1 -d fc00::/7 -j limit-382 --A OUTPUT -o eth1 -d fc00::/7 -j limit-383 --A OUTPUT -o eth1 -d fc00::/7 -j limit-384 --A OUTPUT -o eth1 -d fc00::/7 -j limit-385 --A OUTPUT -o eth1 -d fc00::/7 -j limit-386 --A OUTPUT -o eth1 -d fc00::/7 -j limit-387 --A OUTPUT -o eth1 -d fc00::/7 -j limit-388 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 --A OUTPUT -o eth1 -d fc00::/7 -j limit-390 --A OUTPUT -o eth1 -d fc00::/7 -j limit-391 --A OUTPUT -o eth1 -d fc00::/7 -j limit-392 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-150 --A OUTPUT -o eth1 -d fc00::/7 -j limit-394 --A OUTPUT -o eth1 -d fc00::/7 -j limit-395 --A OUTPUT -o eth1 -d fc00::/7 -j limit-396 --A OUTPUT -o eth1 -d fc00::/7 -j limit-397 --A OUTPUT -o eth1 -d fc00::/7 -j limit-398 --A OUTPUT -o eth1 -d fc00::/7 -j limit-399 --A OUTPUT -o eth1 -d fc00::/7 -j limit-400 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 --A OUTPUT -o eth1 -d fc00::/7 -j limit-402 --A OUTPUT -o eth1 -d fc00::/7 -j limit-403 --A OUTPUT -o eth1 -d fc00::/7 -j limit-404 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 --A OUTPUT -o eth1 -d fc00::/7 -j limit-406 --A OUTPUT -o eth1 -d fc00::/7 -j limit-407 --A OUTPUT -o eth1 -d fc00::/7 -j limit-408 --A OUTPUT -o eth1 -d fc00::/7 -j limit-409 --A OUTPUT -o eth1 -d fc00::/7 -j limit-410 --A OUTPUT -o eth1 -d fc00::/7 -j limit-411 --A OUTPUT -o eth1 -d fc00::/7 -j limit-412 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 --A OUTPUT -o eth1 -d fc00::/7 -j limit-414 --A OUTPUT -o eth1 -d fc00::/7 -j limit-415 --A OUTPUT -o eth1 -d fc00::/7 -j limit-416 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-174 --A OUTPUT -o eth1 -d fc00::/7 -j limit-418 --A OUTPUT -o eth1 -d fc00::/7 -j limit-419 --A OUTPUT -o eth1 -d fc00::/7 -j limit-420 --A OUTPUT -o eth1 -d fc00::/7 -j limit-421 --A OUTPUT -o eth1 -d fc00::/7 -j limit-422 --A OUTPUT -o eth1 -d fc00::/7 -j limit-423 --A OUTPUT -o eth1 -d fc00::/7 -j limit-424 --A OUTPUT -o eth1 -d fc00::/7 -j limit-425 --A OUTPUT -o eth1 -d fc00::/7 -j limit-426 --A OUTPUT -o eth1 -d fc00::/7 -j limit-427 --A OUTPUT -o eth1 -d fc00::/7 -j limit-428 --A OUTPUT -o eth1 -d fc00::/7 -j limit-429 --A OUTPUT -o eth1 -d fc00::/7 -j limit-430 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-432 --A OUTPUT -o eth1 -d fc00::/7 -j limit-433 --A OUTPUT -o eth1 -d fc00::/7 -j limit-434 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-436 --A OUTPUT -o eth1 -d fc00::/7 -j limit-437 --A OUTPUT -o eth1 -d fc00::/7 -j limit-438 --A OUTPUT -o eth1 -d fc00::/7 -j limit-439 --A OUTPUT -o eth1 -d fc00::/7 -j limit-440 --A OUTPUT -o eth1 -d fc00::/7 -j limit-441 --A OUTPUT -o eth1 -d fc00::/7 -j limit-442 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-444 --A OUTPUT -o eth1 -d fc00::/7 -j limit-445 --A OUTPUT -o eth1 -d fc00::/7 -j limit-446 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-448 --A OUTPUT -o eth1 -d fc00::/7 -j limit-449 --A OUTPUT -o eth1 -d fc00::/7 -j limit-450 --A OUTPUT -o eth1 -d fc00::/7 -j limit-451 --A OUTPUT -o eth1 -d fc00::/7 -j limit-452 --A OUTPUT -o eth1 -d fc00::/7 -j limit-453 --A OUTPUT -o eth1 -d fc00::/7 -j limit-454 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-456 --A OUTPUT -o eth1 -d fc00::/7 -j limit-457 --A OUTPUT -o eth1 -d fc00::/7 -j limit-458 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-460 --A OUTPUT -o eth1 -d fc00::/7 -j limit-461 --A OUTPUT -o eth1 -d fc00::/7 -j limit-462 --A OUTPUT -o eth1 -d fc00::/7 -j limit-463 --A OUTPUT -o eth1 -d fc00::/7 -j limit-464 --A OUTPUT -o eth1 -d fc00::/7 -j limit-465 --A OUTPUT -o eth1 -d fc00::/7 -j limit-466 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-468 --A OUTPUT -o eth1 -d fc00::/7 -j limit-469 --A OUTPUT -o eth1 -d fc00::/7 -j limit-470 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-472 --A OUTPUT -o eth1 -d fc00::/7 -j limit-473 --A OUTPUT -o eth1 -d fc00::/7 -j limit-474 --A OUTPUT -o eth1 -d fc00::/7 -j limit-475 --A OUTPUT -o eth1 -d fc00::/7 -j limit-476 --A OUTPUT -o eth1 -d fc00::/7 -j limit-477 --A OUTPUT -o eth1 -d fc00::/7 -j limit-478 --A OUTPUT -o eth1 -d fc00::/7 -j limit-479 --A OUTPUT -o eth1 -d fc00::/7 -j limit-480 --A OUTPUT -o eth1 -d fc00::/7 -j limit-481 --A OUTPUT -o eth1 -d fc00::/7 -j limit-482 --A OUTPUT -o eth1 -d fc00::/7 -j limit-483 --A OUTPUT -o eth1 -d fc00::/7 -j limit-484 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-486 --A OUTPUT -o eth1 -d fc00::/7 -j limit-487 --A OUTPUT -o eth1 -d fc00::/7 -j limit-488 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-490 --A OUTPUT -o eth1 -d fc00::/7 -j limit-491 --A OUTPUT -o eth1 -d fc00::/7 -j limit-492 --A OUTPUT -o eth1 -d fc00::/7 -j limit-493 --A OUTPUT -o eth1 -d fc00::/7 -j limit-494 --A OUTPUT -o eth1 -d fc00::/7 -j limit-495 --A OUTPUT -o eth1 -d fc00::/7 -j limit-496 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-498 --A OUTPUT -o eth1 -d fc00::/7 -j limit-499 --A OUTPUT -o eth1 -d fc00::/7 -j limit-500 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-502 --A OUTPUT -o eth1 -d fc00::/7 -j limit-503 --A OUTPUT -o eth1 -d fc00::/7 -j limit-504 --A OUTPUT -o eth1 -d fc00::/7 -j limit-505 --A OUTPUT -o eth1 -d fc00::/7 -j limit-506 --A OUTPUT -o eth1 -d fc00::/7 -j limit-507 --A OUTPUT -o eth1 -d fc00::/7 -j limit-508 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-510 --A OUTPUT -o eth1 -d fc00::/7 -j limit-511 --A OUTPUT -o eth1 -d fc00::/7 -j limit-512 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-514 --A OUTPUT -o eth1 -d fc00::/7 -j limit-515 --A OUTPUT -o eth1 -d fc00::/7 -j limit-516 --A OUTPUT -o eth1 -d fc00::/7 -j limit-517 --A OUTPUT -o eth1 -d fc00::/7 -j limit-518 --A OUTPUT -o eth1 -d fc00::/7 -j limit-519 --A OUTPUT -o eth1 -d fc00::/7 -j limit-520 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-522 --A OUTPUT -o eth1 -d fc00::/7 -j limit-523 --A OUTPUT -o eth1 -d fc00::/7 -j limit-524 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-526 --A OUTPUT -o eth1 -d fc00::/7 -j limit-527 --A OUTPUT -o eth1 -d fc00::/7 -j limit-528 --A OUTPUT -o eth1 -d fc00::/7 -j limit-529 --A OUTPUT -o eth1 -d fc00::/7 -j limit-530 --A OUTPUT -o eth1 -d fc00::/7 -j limit-531 --A OUTPUT -o eth1 -d fc00::/7 -j limit-532 --A OUTPUT -o eth1 -d fc00::/7 -j limit-533 --A OUTPUT -o eth1 -d fc00::/7 -j limit-534 --A OUTPUT -o eth1 -d fc00::/7 -j limit-535 --A OUTPUT -o eth1 -d fc00::/7 -j limit-536 --A OUTPUT -o eth1 -d fc00::/7 -j limit-537 --A OUTPUT -o eth1 -d fc00::/7 -j limit-538 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 --A OUTPUT -o eth1 -d fc00::/7 -j limit-540 --A OUTPUT -o eth1 -d fc00::/7 -j limit-541 --A OUTPUT -o eth1 -d fc00::/7 -j limit-542 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-192 --A OUTPUT -o eth1 -d fc00::/7 -j limit-544 --A OUTPUT -o eth1 -d fc00::/7 -j limit-545 --A OUTPUT -o eth1 -d fc00::/7 -j limit-546 --A OUTPUT -o eth1 -d fc00::/7 -j limit-547 --A OUTPUT -o eth1 -d fc00::/7 -j limit-548 --A OUTPUT -o eth1 -d fc00::/7 -j limit-549 --A OUTPUT -o eth1 -d fc00::/7 -j limit-550 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 --A OUTPUT -o eth1 -d fc00::/7 -j limit-552 --A OUTPUT -o eth1 -d fc00::/7 -j limit-553 --A OUTPUT -o eth1 -d fc00::/7 -j limit-554 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-204 --A OUTPUT -o eth1 -d fc00::/7 -j limit-556 --A OUTPUT -o eth1 -d fc00::/7 -j limit-557 --A OUTPUT -o eth1 -d fc00::/7 -j limit-558 --A OUTPUT -o eth1 -d fc00::/7 -j limit-559 --A OUTPUT -o eth1 -d fc00::/7 -j limit-560 --A OUTPUT -o eth1 -d fc00::/7 -j limit-561 --A OUTPUT -o eth1 -d fc00::/7 -j limit-562 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 --A OUTPUT -o eth1 -d fc00::/7 -j limit-564 --A OUTPUT -o eth1 -d fc00::/7 -j limit-565 --A OUTPUT -o eth1 -d fc00::/7 -j limit-566 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 --A OUTPUT -o eth1 -d fc00::/7 -j limit-568 --A OUTPUT -o eth1 -d fc00::/7 -j limit-569 --A OUTPUT -o eth1 -d fc00::/7 -j limit-570 --A OUTPUT -o eth1 -d fc00::/7 -j limit-571 --A OUTPUT -o eth1 -d fc00::/7 -j limit-572 --A OUTPUT -o eth1 -d fc00::/7 -j limit-573 --A OUTPUT -o eth1 -d fc00::/7 -j limit-574 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 --A OUTPUT -o eth1 -d fc00::/7 -j limit-576 --A OUTPUT -o eth1 -d fc00::/7 -j limit-577 --A OUTPUT -o eth1 -d fc00::/7 -j limit-578 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-228 --A OUTPUT -o eth1 -d fc00::/7 -j limit-580 --A OUTPUT -o eth1 -d fc00::/7 -j limit-581 --A OUTPUT -o eth1 -d fc00::/7 -j limit-582 --A OUTPUT -o eth1 -d fc00::/7 -j limit-583 --A OUTPUT -o eth1 -d fc00::/7 -j limit-584 --A OUTPUT -o eth1 -d fc00::/7 -j limit-585 --A OUTPUT -o eth1 -d fc00::/7 -j limit-586 --A OUTPUT -o eth1 -d fc00::/7 -j limit-587 --A OUTPUT -o eth1 -d fc00::/7 -j limit-588 --A OUTPUT -o eth1 -d fc00::/7 -j limit-589 --A OUTPUT -o eth1 -d fc00::/7 -j limit-590 --A OUTPUT -o eth1 -d fc00::/7 -j limit-591 --A OUTPUT -o eth1 -d fc00::/7 -j limit-592 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-594 --A OUTPUT -o eth1 -d fc00::/7 -j limit-595 --A OUTPUT -o eth1 -d fc00::/7 -j limit-596 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-598 --A OUTPUT -o eth1 -d fc00::/7 -j limit-599 --A OUTPUT -o eth1 -d fc00::/7 -j limit-600 --A OUTPUT -o eth1 -d fc00::/7 -j limit-601 --A OUTPUT -o eth1 -d fc00::/7 -j limit-602 --A OUTPUT -o eth1 -d fc00::/7 -j limit-603 --A OUTPUT -o eth1 -d fc00::/7 -j limit-604 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-606 --A OUTPUT -o eth1 -d fc00::/7 -j limit-607 --A OUTPUT -o eth1 -d fc00::/7 -j limit-608 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-610 --A OUTPUT -o eth1 -d fc00::/7 -j limit-611 --A OUTPUT -o eth1 -d fc00::/7 -j limit-612 --A OUTPUT -o eth1 -d fc00::/7 -j limit-613 --A OUTPUT -o eth1 -d fc00::/7 -j limit-614 --A OUTPUT -o eth1 -d fc00::/7 -j limit-615 --A OUTPUT -o eth1 -d fc00::/7 -j limit-616 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-618 --A OUTPUT -o eth1 -d fc00::/7 -j limit-619 --A OUTPUT -o eth1 -d fc00::/7 -j limit-620 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-622 --A OUTPUT -o eth1 -d fc00::/7 -j limit-623 --A OUTPUT -o eth1 -d fc00::/7 -j limit-624 --A OUTPUT -o eth1 -d fc00::/7 -j limit-625 --A OUTPUT -o eth1 -d fc00::/7 -j limit-626 --A OUTPUT -o eth1 -d fc00::/7 -j limit-627 --A OUTPUT -o eth1 -d fc00::/7 -j limit-628 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-630 --A OUTPUT -o eth1 -d fc00::/7 -j limit-631 --A OUTPUT -o eth1 -d fc00::/7 -j limit-632 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-634 --A OUTPUT -o eth1 -d fc00::/7 -j limit-635 --A OUTPUT -o eth1 -d fc00::/7 -j limit-636 --A OUTPUT -o eth1 -d fc00::/7 -j limit-637 --A OUTPUT -o eth1 -d fc00::/7 -j limit-638 --A OUTPUT -o eth1 -d fc00::/7 -j limit-639 --A OUTPUT -o eth1 -d fc00::/7 -j limit-640 --A OUTPUT -o eth1 -d fc00::/7 -j limit-641 --A OUTPUT -o eth1 -d fc00::/7 -j limit-642 --A OUTPUT -o eth1 -d fc00::/7 -j limit-643 --A OUTPUT -o eth1 -d fc00::/7 -j limit-644 --A OUTPUT -o eth1 -d fc00::/7 -j limit-645 --A OUTPUT -o eth1 -d fc00::/7 -j limit-646 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-648 --A OUTPUT -o eth1 -d fc00::/7 -j limit-649 --A OUTPUT -o eth1 -d fc00::/7 -j limit-650 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-652 --A OUTPUT -o eth1 -d fc00::/7 -j limit-653 --A OUTPUT -o eth1 -d fc00::/7 -j limit-654 --A OUTPUT -o eth1 -d fc00::/7 -j limit-655 --A OUTPUT -o eth1 -d fc00::/7 -j limit-656 --A OUTPUT -o eth1 -d fc00::/7 -j limit-657 --A OUTPUT -o eth1 -d fc00::/7 -j limit-658 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-660 --A OUTPUT -o eth1 -d fc00::/7 -j limit-661 --A OUTPUT -o eth1 -d fc00::/7 -j limit-662 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-664 --A OUTPUT -o eth1 -d fc00::/7 -j limit-665 --A OUTPUT -o eth1 -d fc00::/7 -j limit-666 --A OUTPUT -o eth1 -d fc00::/7 -j limit-667 --A OUTPUT -o eth1 -d fc00::/7 -j limit-668 --A OUTPUT -o eth1 -d fc00::/7 -j limit-669 --A OUTPUT -o eth1 -d fc00::/7 -j limit-670 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-672 --A OUTPUT -o eth1 -d fc00::/7 -j limit-673 --A OUTPUT -o eth1 -d fc00::/7 -j limit-674 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-676 --A OUTPUT -o eth1 -d fc00::/7 -j limit-677 --A OUTPUT -o eth1 -d fc00::/7 -j limit-678 --A OUTPUT -o eth1 -d fc00::/7 -j limit-679 --A OUTPUT -o eth1 -d fc00::/7 -j limit-680 --A OUTPUT -o eth1 -d fc00::/7 -j limit-681 --A OUTPUT -o eth1 -d fc00::/7 -j limit-682 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-684 --A OUTPUT -o eth1 -d fc00::/7 -j limit-685 --A OUTPUT -o eth1 -d fc00::/7 -j limit-686 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-688 --A OUTPUT -o eth1 -d fc00::/7 -j limit-689 --A OUTPUT -o eth1 -d fc00::/7 -j limit-690 --A OUTPUT -o eth1 -d fc00::/7 -j limit-691 --A OUTPUT -o eth1 -d fc00::/7 -j limit-692 --A OUTPUT -o eth1 -d fc00::/7 -j limit-693 --A OUTPUT -o eth1 -d fc00::/7 -j limit-694 --A OUTPUT -o eth1 -d fc00::/7 -j limit-695 --A OUTPUT -o eth1 -d fc00::/7 -j limit-696 --A OUTPUT -o eth1 -d fc00::/7 -j limit-697 --A OUTPUT -o eth1 -d fc00::/7 -j limit-698 --A OUTPUT -o eth1 -d fc00::/7 -j limit-699 --A OUTPUT -o eth1 -d fc00::/7 -j limit-700 --A OUTPUT -o eth1 -d fc00::/7 -j limit-701 --A OUTPUT -o eth1 -d fc00::/7 -j limit-702 --A OUTPUT -o eth1 -d fc00::/7 -j limit-703 --A OUTPUT -o eth1 -d fc00::/7 -j limit-704 --A OUTPUT -o eth1 -d fc00::/7 -j limit-705 --A OUTPUT -o eth1 -d fc00::/7 -j limit-706 --A OUTPUT -o eth1 -d fc00::/7 -j limit-707 --A OUTPUT -o eth1 -d fc00::/7 -j limit-708 --A OUTPUT -o eth1 -d fc00::/7 -j limit-709 --A OUTPUT -o eth1 -d fc00::/7 -j limit-710 --A OUTPUT -o eth1 -d fc00::/7 -j limit-711 --A OUTPUT -o eth1 -d fc00::/7 -j limit-712 --A OUTPUT -o eth1 -d fc00::/7 -j limit-713 --A OUTPUT -o eth1 -d fc00::/7 -j limit-714 --A OUTPUT -o eth1 -d fc00::/7 -j limit-715 --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-0 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-1 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-2 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-3 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-4 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-5 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-6 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-7 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-8 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-9 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-10 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-11 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-12 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-13 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-14 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-15 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-16 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-17 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-18 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-19 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-20 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-21 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-22 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-23 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-24 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-25 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-26 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-27 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-28 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-29 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-30 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-31 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-32 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-33 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-34 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-35 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-36 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-37 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-38 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-39 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-40 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-41 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-42 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-43 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-44 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-45 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-46 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-47 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-48 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-49 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-50 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-51 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-52 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-53 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-54 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-55 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-56 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-57 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-58 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-59 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-60 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logaccept-final-61 --A OUTPUT -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -m recent --name user:C --rsource --mask fe00:: --set --A OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set --A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-457 --A OUTPUT --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT --A OUTPUT -j logaccept-84 --A OUTPUT -j logdrop-458 --A OUTPUT -j logpass-50 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT --A OUTPUT -p tcp --dport 80 -j ACCEPT --A OUTPUT -p esp -j ACCEPT --A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT --A OUTPUT -p icmpv6 -j ACCEPT --A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT --A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT --A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT --A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT --A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 --A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 --A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 --A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-100 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-100 -j ACCEPT --A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1007 -m limit --limit 1/second -j LOG --A limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-101 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1019 -m limit --limit 1/second -j LOG --A limit-102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1022 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1022 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1023 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1023 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1024 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1024 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1025 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1025 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1026 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1026 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1027 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1027 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1029 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-103 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1031 -m limit --limit 1/second -j LOG --A limit-1032 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1033 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1034 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1035 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1036 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1037 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1038 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1039 -m recent --name user:C --rdest --mask fe00:: --set --A limit-104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-104 -m limit --limit 1/second -j LOG --A limit-104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1040 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1041 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1043 -m limit --limit 1/second -j LOG --A limit-1044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1045 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1046 -j RETURN --A limit-1046 -m limit --limit 1/second -j LOG --A limit-1046 -j DROP --A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1047 -j RETURN --A limit-1047 -m limit --limit 1/second -j LOG --A limit-1047 -j DROP --A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j RETURN --A limit-1048 -m limit --limit 1/second -j LOG --A limit-1048 -j DROP --A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1049 -j RETURN --A limit-1049 -m limit --limit 1/second -j LOG --A limit-1049 -j DROP --A limit-105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-105 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1050 -j RETURN --A limit-1050 -m limit --limit 1/second -j LOG --A limit-1050 -j DROP --A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1051 -j RETURN --A limit-1051 -m limit --limit 1/second -j LOG --A limit-1051 -j DROP --A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j RETURN --A limit-1052 -m limit --limit 1/second -j LOG --A limit-1052 -j DROP --A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1053 -j RETURN --A limit-1053 -m limit --limit 1/second -j LOG --A limit-1053 -j DROP --A limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1054 -j RETURN --A limit-1054 -j DROP --A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1055 -j RETURN --A limit-1055 -j DROP --A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j RETURN --A limit-1056 -j DROP --A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1057 -j RETURN --A limit-1057 -j DROP --A limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1058 -j RETURN --A limit-1058 -j DROP --A limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1059 -j RETURN --A limit-1059 -j DROP --A limit-106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j RETURN --A limit-1060 -j DROP --A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1061 -j RETURN --A limit-1061 -j DROP --A limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1062 -j RETURN --A limit-1062 -m limit --limit 1/second -j LOG --A limit-1062 -j DROP --A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1063 -j RETURN --A limit-1063 -m limit --limit 1/second -j LOG --A limit-1063 -j DROP --A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j RETURN --A limit-1064 -m limit --limit 1/second -j LOG --A limit-1064 -j DROP --A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1065 -j RETURN --A limit-1065 -m limit --limit 1/second -j LOG --A limit-1065 -j DROP --A limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1066 -j RETURN --A limit-1066 -j DROP --A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1067 -j RETURN --A limit-1067 -j DROP --A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j RETURN --A limit-1068 -j DROP --A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1069 -j RETURN --A limit-1069 -j DROP --A limit-107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-107 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1070 -j RETURN --A limit-1070 -j DROP --A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1071 -j RETURN --A limit-1071 -j DROP --A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j RETURN --A limit-1072 -j DROP --A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1073 -j RETURN --A limit-1073 -j DROP --A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-343 --A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-344 --A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-345 --A limit-1076 -m limit --limit 1/second -j LOG --A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-346 --A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-347 --A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-348 --A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-108 -j ACCEPT --A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-349 --A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-350 --A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-351 --A limit-1082 -m limit --limit 1/second -j LOG --A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-352 --A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-353 --A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-354 --A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-355 --A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-356 --A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-357 --A limit-1088 -m limit --limit 1/second -j LOG --A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-358 --A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-109 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-359 --A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-360 --A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-361 --A limit-1092 -j ACCEPT --A limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-363 --A limit-1094 -m limit --limit 1/second -j LOG --A limit-1094 -j ACCEPT --A limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-364 --A limit-1095 -m limit --limit 1/second -j LOG --A limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-365 --A limit-1096 -j ACCEPT --A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-367 --A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-368 --A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 --A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-110 -m limit --limit 1/second -j LOG --A limit-110 -j ACCEPT --A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-369 --A limit-1100 -m limit --limit 1/second -j LOG --A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-370 --A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-371 --A limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-372 --A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-373 --A limit-1104 -j ACCEPT --A limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-375 --A limit-1106 -m limit --limit 1/second -j LOG --A limit-1106 -j ACCEPT --A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-376 --A limit-1107 -m limit --limit 1/second -j LOG --A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-377 --A limit-1108 -j ACCEPT --A limit-111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-111 -m limit --limit 1/second -j LOG --A limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-379 --A limit-1110 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-380 --A limit-1111 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-381 --A limit-1112 -m limit --limit 1/second -j LOG --A limit-1112 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-382 --A limit-1113 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-383 --A limit-1114 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-384 --A limit-1115 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-385 --A limit-1116 -j ACCEPT --A limit-1118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-387 --A limit-1118 -m limit --limit 1/second -j LOG --A limit-1118 -j ACCEPT --A limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-388 --A limit-1119 -m limit --limit 1/second -j LOG --A limit-112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-112 -j ACCEPT --A limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-389 --A limit-1120 -j ACCEPT --A limit-1122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-391 --A limit-1122 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-392 --A limit-1123 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-393 --A limit-1124 -m limit --limit 1/second -j LOG --A limit-1124 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-394 --A limit-1125 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-395 --A limit-1126 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-396 --A limit-1127 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1128 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-397 --A limit-1128 -j ACCEPT --A limit-113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1130 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-399 --A limit-1130 -m limit --limit 1/second -j LOG --A limit-1130 -j ACCEPT --A limit-1131 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-400 --A limit-1131 -m limit --limit 1/second -j LOG --A limit-1132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-401 --A limit-1132 -j ACCEPT --A limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1135 -m recent --name limit-1135 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1135 -m recent --name limit-1135 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1136 -m recent --name limit-1136 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1136 -m limit --limit 1/second -j LOG --A limit-1136 -m recent --name limit-1136 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1137 -m recent --name limit-1137 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1137 -m recent --name limit-1137 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1138 -m recent --name limit-1138 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1138 -m recent --name limit-1138 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1139 -m recent --name limit-1139 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1139 -m recent --name limit-1139 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1142 -m limit --limit 1/second -j LOG --A limit-1142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1145 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1145 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1146 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1146 -j ACCEPT --A limit-1148 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1148 -m limit --limit 1/second -j LOG --A limit-1148 -j ACCEPT --A limit-1149 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1149 -m limit --limit 1/second -j LOG --A limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1150 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1150 -j ACCEPT --A limit-1152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1154 -m limit --limit 1/second -j LOG --A limit-1154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1158 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1158 -j ACCEPT --A limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-116 -m limit --limit 1/second -j LOG --A limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1160 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1160 -m limit --limit 1/second -j LOG --A limit-1160 -j ACCEPT --A limit-1161 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1161 -m limit --limit 1/second -j LOG --A limit-1162 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1162 -j ACCEPT --A limit-1164 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1164 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1165 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1165 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1166 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1166 -m limit --limit 1/second -j LOG --A limit-1166 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1167 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1167 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1168 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1168 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1169 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1169 -m recent --name user:C --rsource --mask fe00:: --set --A limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1170 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1170 -j ACCEPT --A limit-1172 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1172 -m limit --limit 1/second -j LOG --A limit-1172 -j ACCEPT --A limit-1173 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1173 -m limit --limit 1/second -j LOG --A limit-1174 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1174 -j ACCEPT --A limit-1176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1177 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1178 -m limit --limit 1/second -j LOG --A limit-1178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1179 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1180 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1180 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1181 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1181 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1182 -j ACCEPT --A limit-1184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1184 -m limit --limit 1/second -j LOG --A limit-1184 -j ACCEPT --A limit-1185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1185 -m limit --limit 1/second -j LOG --A limit-1186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1186 -j ACCEPT --A limit-1188 -m recent --name limit-1188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1188 -m recent --name limit-1188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1189 -m recent --name limit-1189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1189 -m recent --name limit-1189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1190 -m recent --name limit-1190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1190 -m limit --limit 1/second -j LOG --A limit-1190 -m recent --name limit-1190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1191 -m recent --name limit-1191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1191 -m recent --name limit-1191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1192 -m recent --name limit-1192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1192 -m recent --name limit-1192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1193 -m recent --name limit-1193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1193 -m recent --name limit-1193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1196 -m limit --limit 1/second -j LOG --A limit-1196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 --A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1200 -j ACCEPT --A limit-1202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1202 -m limit --limit 1/second -j LOG --A limit-1202 -j ACCEPT --A limit-1203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1203 -m limit --limit 1/second -j LOG --A limit-1204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1204 -j ACCEPT --A limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1208 -m limit --limit 1/second -j LOG --A limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1212 -j ACCEPT --A limit-1214 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1214 -m limit --limit 1/second -j LOG --A limit-1214 -j ACCEPT --A limit-1215 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1215 -m limit --limit 1/second -j LOG --A limit-1216 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1216 -j ACCEPT --A limit-1218 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1218 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1219 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1219 -m recent --name user:C --rsource --mask fe00:: --set --A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-122 -m limit --limit 1/second -j LOG --A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1220 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1220 -m limit --limit 1/second -j LOG --A limit-1220 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1221 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1221 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1222 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1222 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1223 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1223 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1224 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1224 -j ACCEPT --A limit-1226 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1226 -m limit --limit 1/second -j LOG --A limit-1226 -j ACCEPT --A limit-1227 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1227 -m limit --limit 1/second -j LOG --A limit-1228 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1228 -j ACCEPT --A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1230 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1230 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1231 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1231 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1232 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1232 -m limit --limit 1/second -j LOG --A limit-1232 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1233 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1233 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1234 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1234 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1235 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1235 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1236 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1236 -j ACCEPT --A limit-1238 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1238 -m limit --limit 1/second -j LOG --A limit-1238 -j ACCEPT --A limit-1239 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1239 -m limit --limit 1/second -j LOG --A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1240 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1240 -j ACCEPT --A limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 --A limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 --A limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 --A limit-1244 -m limit --limit 1/second -j LOG --A limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 --A limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 --A limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 --A limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 --A limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-410 --A limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-411 --A limit-1250 -m limit --limit 1/second -j LOG --A limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-412 --A limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-413 --A limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-414 --A limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 --A limit-1254 -j ACCEPT --A limit-1256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 --A limit-1256 -m limit --limit 1/second -j LOG --A limit-1256 -j ACCEPT --A limit-1257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 --A limit-1257 -m limit --limit 1/second -j LOG --A limit-1258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 --A limit-1258 -j ACCEPT --A limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-126 -j ACCEPT --A limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-421 --A limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-422 --A limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-423 --A limit-1262 -m limit --limit 1/second -j LOG --A limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-424 --A limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-425 --A limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-426 --A limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-427 --A limit-1266 -j ACCEPT --A limit-1268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-429 --A limit-1268 -m limit --limit 1/second -j LOG --A limit-1268 -j ACCEPT --A limit-1269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-430 --A limit-1269 -m limit --limit 1/second -j LOG --A limit-127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-431 --A limit-1270 -j ACCEPT --A limit-1272 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-433 --A limit-1272 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1273 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-434 --A limit-1273 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1274 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-435 --A limit-1274 -m limit --limit 1/second -j LOG --A limit-1274 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1275 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-436 --A limit-1275 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1276 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-437 --A limit-1276 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1277 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-438 --A limit-1277 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 --A limit-1278 -j ACCEPT --A limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-128 -m limit --limit 1/second -j LOG --A limit-128 -j ACCEPT --A limit-1280 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-441 --A limit-1280 -m limit --limit 1/second -j LOG --A limit-1280 -j ACCEPT --A limit-1281 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-442 --A limit-1281 -m limit --limit 1/second -j LOG --A limit-1282 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-443 --A limit-1282 -j ACCEPT --A limit-1284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 --A limit-1284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 --A limit-1285 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 --A limit-1286 -m limit --limit 1/second -j LOG --A limit-1286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 --A limit-1287 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1288 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 --A limit-1288 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1289 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-450 --A limit-1289 -m recent --name user:C --rdest --mask fe00:: --set --A limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-129 -m limit --limit 1/second -j LOG --A limit-1290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 --A limit-1290 -j ACCEPT --A limit-1292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 --A limit-1292 -m limit --limit 1/second -j LOG --A limit-1292 -j ACCEPT --A limit-1293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 --A limit-1293 -m limit --limit 1/second -j LOG --A limit-1294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 --A limit-1294 -j ACCEPT --A limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1297 -m recent --name limit-1297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1297 -m recent --name limit-1297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1298 -m recent --name limit-1298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1298 -m limit --limit 1/second -j LOG --A limit-1298 -m recent --name limit-1298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 --A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-130 -j ACCEPT --A limit-1300 -m recent --name limit-1300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1300 -m recent --name limit-1300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1301 -m recent --name limit-1301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1301 -m recent --name limit-1301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1304 -m limit --limit 1/second -j LOG --A limit-1304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1308 -j ACCEPT --A limit-131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1310 -m limit --limit 1/second -j LOG --A limit-1310 -j ACCEPT --A limit-1311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1311 -m limit --limit 1/second -j LOG --A limit-1312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1312 -j ACCEPT --A limit-1314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1316 -m limit --limit 1/second -j LOG --A limit-1316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1320 -j ACCEPT --A limit-1322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1322 -m limit --limit 1/second -j LOG --A limit-1322 -j ACCEPT --A limit-1323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1323 -m limit --limit 1/second -j LOG --A limit-1324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1324 -j ACCEPT --A limit-1326 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1326 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1327 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1327 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1328 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1328 -m limit --limit 1/second -j LOG --A limit-1328 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1329 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1329 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1331 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1332 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1332 -j ACCEPT --A limit-1334 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1334 -m limit --limit 1/second -j LOG --A limit-1334 -j ACCEPT --A limit-1335 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1335 -m limit --limit 1/second -j LOG --A limit-1336 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1336 -j ACCEPT --A limit-1338 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1338 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1339 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1339 -m recent --name user:C --rdest --mask fe00:: --set --A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-134 -m limit --limit 1/second -j LOG --A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1340 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1340 -m limit --limit 1/second -j LOG --A limit-1340 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1341 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1341 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1342 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1342 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1343 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1343 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1344 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1344 -j ACCEPT --A limit-1346 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1346 -m limit --limit 1/second -j LOG --A limit-1346 -j ACCEPT --A limit-1347 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1347 -m limit --limit 1/second -j LOG --A limit-1348 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1348 -j ACCEPT --A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1352 -m limit --limit 1/second -j LOG --A limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1358 -m limit --limit 1/second -j LOG --A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1362 -j ACCEPT --A limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1364 -m limit --limit 1/second -j LOG --A limit-1364 -j ACCEPT --A limit-1365 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1365 -m limit --limit 1/second -j LOG --A limit-1366 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1366 -j ACCEPT --A limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1370 -m limit --limit 1/second -j LOG --A limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1374 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1374 -j ACCEPT --A limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1376 -m limit --limit 1/second -j LOG --A limit-1376 -j ACCEPT --A limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1377 -m limit --limit 1/second -j LOG --A limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1378 -j ACCEPT --A limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-138 -j ACCEPT --A limit-1380 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1380 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1381 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1381 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1382 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1382 -m limit --limit 1/second -j LOG --A limit-1382 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1383 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1383 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1384 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1384 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1385 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1385 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1386 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1386 -j ACCEPT --A limit-1388 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1388 -m limit --limit 1/second -j LOG --A limit-1388 -j ACCEPT --A limit-1389 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1389 -m limit --limit 1/second -j LOG --A limit-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1390 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1390 -j ACCEPT --A limit-1392 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1392 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1393 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1393 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1394 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1394 -m limit --limit 1/second -j LOG --A limit-1394 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1395 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1395 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1396 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1396 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1397 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1397 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1398 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1398 -j ACCEPT --A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 --A limit-14 -m limit --limit 1/second -j LOG --A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-140 -m limit --limit 1/second -j LOG --A limit-140 -j ACCEPT --A limit-1400 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1400 -m limit --limit 1/second -j LOG --A limit-1400 -j ACCEPT --A limit-1401 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1401 -m limit --limit 1/second -j LOG --A limit-1402 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1402 -j ACCEPT --A limit-1404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1404 -j ACCEPT --A limit-1404 -m limit --limit 1/second -j LOG --A limit-1404 -j DROP --A limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1405 -j RETURN --A limit-1405 -m limit --limit 1/second -j LOG --A limit-1405 -j DROP --A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1406 -j logaccept-77 --A limit-1406 -m limit --limit 1/second -j LOG --A limit-1406 -j DROP --A limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1407 -j ACCEPT --A limit-1407 -m limit --limit 1/second -j LOG --A limit-1407 -j DROP --A limit-1408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1408 -j ACCEPT --A limit-1408 -m limit --limit 1/second -j LOG --A limit-1408 -j DROP --A limit-1409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1409 -j RETURN --A limit-1409 -m limit --limit 1/second -j LOG --A limit-1409 -j DROP --A limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-141 -m limit --limit 1/second -j LOG --A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1410 -j logaccept-78 --A limit-1410 -m limit --limit 1/second -j LOG --A limit-1410 -j DROP --A limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1411 -j ACCEPT --A limit-1411 -m limit --limit 1/second -j LOG --A limit-1411 -j DROP --A limit-1412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1412 -j ACCEPT --A limit-1412 -j DROP --A limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1413 -j RETURN --A limit-1413 -j DROP --A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1414 -j logaccept-79 --A limit-1414 -j DROP --A limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1415 -j ACCEPT --A limit-1415 -j DROP --A limit-1416 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1416 -j ACCEPT --A limit-1416 -j DROP --A limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1417 -j RETURN --A limit-1417 -j DROP --A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1418 -j logaccept-80 --A limit-1418 -j DROP --A limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1419 -j ACCEPT --A limit-1419 -j DROP --A limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-142 -j ACCEPT --A limit-1420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1420 -j ACCEPT --A limit-1420 -m limit --limit 1/second -j LOG --A limit-1420 -j DROP --A limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1421 -j RETURN --A limit-1421 -m limit --limit 1/second -j LOG --A limit-1421 -j DROP --A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1422 -j logaccept-81 --A limit-1422 -m limit --limit 1/second -j LOG --A limit-1422 -j DROP --A limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1423 -j ACCEPT --A limit-1423 -m limit --limit 1/second -j LOG --A limit-1423 -j DROP --A limit-1424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1424 -j ACCEPT --A limit-1424 -j DROP --A limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1425 -j RETURN --A limit-1425 -j DROP --A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1426 -j logaccept-82 --A limit-1426 -j DROP --A limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1427 -j ACCEPT --A limit-1427 -j DROP --A limit-1428 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1428 -j ACCEPT --A limit-1428 -j DROP --A limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1429 -j RETURN --A limit-1429 -j DROP --A limit-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1430 -j logaccept-83 --A limit-1430 -j DROP --A limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1431 -j ACCEPT --A limit-1431 -j DROP --A limit-144 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-144 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-145 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-145 -m recent --name user:C --rsource --mask fe00:: --set --A limit-146 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-146 -m limit --limit 1/second -j LOG --A limit-146 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-147 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-147 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-148 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-148 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-149 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-149 -m recent --name user:C --rsource --mask fe00:: --set --A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 --A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-150 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-150 -j ACCEPT --A limit-151 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-152 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-152 -m limit --limit 1/second -j LOG --A limit-152 -j ACCEPT --A limit-153 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-153 -m limit --limit 1/second -j LOG --A limit-154 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-154 -j ACCEPT --A limit-155 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-156 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-156 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-157 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-157 -m recent --name user:C --rdest --mask fe00:: --set --A limit-158 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-158 -m limit --limit 1/second -j LOG --A limit-158 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-159 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-159 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 --A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-160 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-160 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-161 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-161 -m recent --name user:C --rdest --mask fe00:: --set --A limit-162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-162 -j ACCEPT --A limit-163 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-164 -m limit --limit 1/second -j LOG --A limit-164 -j ACCEPT --A limit-165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-165 -m limit --limit 1/second -j LOG --A limit-166 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-166 -j ACCEPT --A limit-167 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 --A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 --A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 --A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 --A limit-170 -m limit --limit 1/second -j LOG --A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 --A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 --A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 --A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 --A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 --A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 --A limit-176 -m limit --limit 1/second -j LOG --A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 --A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 --A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-72 --A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 --A limit-18 -j ACCEPT --A limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 --A limit-180 -j ACCEPT --A limit-181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 --A limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 --A limit-182 -m limit --limit 1/second -j LOG --A limit-182 -j ACCEPT --A limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 --A limit-183 -m limit --limit 1/second -j LOG --A limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 --A limit-184 -j ACCEPT --A limit-185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78 --A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 --A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 --A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 --A limit-188 -m limit --limit 1/second -j LOG --A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 --A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-20 --A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 --A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-84 --A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 --A limit-192 -j ACCEPT --A limit-193 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 --A limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 --A limit-194 -m limit --limit 1/second -j LOG --A limit-194 -j ACCEPT --A limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 --A limit-195 -m limit --limit 1/second -j LOG --A limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 --A limit-196 -j ACCEPT --A limit-197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90 --A limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 --A limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 --A limit-199 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 --A limit-2 -m limit --limit 1/second -j LOG --A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 --A limit-20 -m limit --limit 1/second -j LOG --A limit-20 -j ACCEPT --A limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 --A limit-200 -m limit --limit 1/second -j LOG --A limit-200 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 --A limit-201 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 --A limit-202 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-96 --A limit-203 -m recent --name user:C --rsource --mask fe00:: --set --A limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 --A limit-204 -j ACCEPT --A limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 --A limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 --A limit-206 -m limit --limit 1/second -j LOG --A limit-206 -j ACCEPT --A limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 --A limit-207 -m limit --limit 1/second -j LOG --A limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 --A limit-208 -j ACCEPT --A limit-209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102 --A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 --A limit-21 -m limit --limit 1/second -j LOG --A limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 --A limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 --A limit-211 -m recent --name user:C --rdest --mask fe00:: --set --A limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 --A limit-212 -m limit --limit 1/second -j LOG --A limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 --A limit-213 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 --A limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-108 --A limit-215 -m recent --name user:C --rdest --mask fe00:: --set --A limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 --A limit-216 -j ACCEPT --A limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 --A limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 --A limit-218 -m limit --limit 1/second -j LOG --A limit-218 -j ACCEPT --A limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 --A limit-219 -m limit --limit 1/second -j LOG --A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 --A limit-22 -j ACCEPT --A limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 --A limit-220 -j ACCEPT --A limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114 --A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-224 -m limit --limit 1/second -j LOG --A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-24 --A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-230 -m limit --limit 1/second -j LOG --A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-234 -j ACCEPT --A limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-236 -m limit --limit 1/second -j LOG --A limit-236 -j ACCEPT --A limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-237 -m limit --limit 1/second -j LOG --A limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-238 -j ACCEPT --A limit-239 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 --A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-242 -m limit --limit 1/second -j LOG --A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-246 -j ACCEPT --A limit-247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-248 -m limit --limit 1/second -j LOG --A limit-248 -j ACCEPT --A limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-249 -m limit --limit 1/second -j LOG --A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 --A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-250 -j ACCEPT --A limit-251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-252 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-252 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-253 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-253 -m recent --name user:C --rsource --mask fe00:: --set --A limit-254 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-254 -m limit --limit 1/second -j LOG --A limit-254 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-255 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-255 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-256 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-256 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-257 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-257 -m recent --name user:C --rsource --mask fe00:: --set --A limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-258 -j ACCEPT --A limit-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 --A limit-26 -m limit --limit 1/second -j LOG --A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-260 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-260 -m limit --limit 1/second -j LOG --A limit-260 -j ACCEPT --A limit-261 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-261 -m limit --limit 1/second -j LOG --A limit-262 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-262 -j ACCEPT --A limit-263 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-265 -m recent --name user:C --rdest --mask fe00:: --set --A limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-266 -m limit --limit 1/second -j LOG --A limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-267 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-269 -m recent --name user:C --rdest --mask fe00:: --set --A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 --A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-270 -j ACCEPT --A limit-271 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-272 -m limit --limit 1/second -j LOG --A limit-272 -j ACCEPT --A limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-273 -m limit --limit 1/second -j LOG --A limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-274 -j ACCEPT --A limit-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-278 -m limit --limit 1/second -j LOG --A limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 --A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-284 -m limit --limit 1/second -j LOG --A limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-288 -j ACCEPT --A limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-30 --A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-290 -m limit --limit 1/second -j LOG --A limit-290 -j ACCEPT --A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-291 -m limit --limit 1/second -j LOG --A limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-292 -j ACCEPT --A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-296 -m limit --limit 1/second -j LOG --A limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 --A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-30 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 --A limit-30 -j ACCEPT --A limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-300 -j ACCEPT --A limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-302 -m limit --limit 1/second -j LOG --A limit-302 -j ACCEPT --A limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-303 -m limit --limit 1/second -j LOG --A limit-304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-304 -j ACCEPT --A limit-305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-307 -m recent --name user:C --rsource --mask fe00:: --set --A limit-308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-308 -m limit --limit 1/second -j LOG --A limit-308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-31 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 --A limit-310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-311 -m recent --name user:C --rsource --mask fe00:: --set --A limit-312 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-312 -j ACCEPT --A limit-313 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m limit --limit 1/second -j LOG --A limit-314 -j ACCEPT --A limit-315 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-315 -m limit --limit 1/second -j LOG --A limit-316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-316 -j ACCEPT --A limit-317 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-318 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-318 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-319 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-319 -m recent --name user:C --rdest --mask fe00:: --set --A limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 --A limit-32 -m limit --limit 1/second -j LOG --A limit-32 -j ACCEPT --A limit-320 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-320 -m limit --limit 1/second -j LOG --A limit-320 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-321 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-321 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-322 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-322 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-323 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-323 -m recent --name user:C --rdest --mask fe00:: --set --A limit-324 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-324 -j ACCEPT --A limit-325 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-326 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-326 -m limit --limit 1/second -j LOG --A limit-326 -j ACCEPT --A limit-327 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-327 -m limit --limit 1/second -j LOG --A limit-328 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-328 -j ACCEPT --A limit-329 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 --A limit-33 -m limit --limit 1/second -j LOG --A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-330 -j ACCEPT --A limit-330 -m limit --limit 1/second -j LOG --A limit-330 -j DROP --A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j RETURN --A limit-331 -m limit --limit 1/second -j LOG --A limit-331 -j DROP --A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-63 --A limit-332 -m limit --limit 1/second -j LOG --A limit-332 -j DROP --A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j ACCEPT --A limit-333 -m limit --limit 1/second -j LOG --A limit-333 -j DROP --A limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-334 -j ACCEPT --A limit-334 -m limit --limit 1/second -j LOG --A limit-334 -j DROP --A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j RETURN --A limit-335 -m limit --limit 1/second -j LOG --A limit-335 -j DROP --A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-64 --A limit-336 -m limit --limit 1/second -j LOG --A limit-336 -j DROP --A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-337 -j ACCEPT --A limit-337 -m limit --limit 1/second -j LOG --A limit-337 -j DROP --A limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-338 -j ACCEPT --A limit-338 -j DROP --A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-339 -j RETURN --A limit-339 -j DROP --A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 --A limit-34 -j ACCEPT --A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-65 --A limit-340 -j DROP --A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-341 -j ACCEPT --A limit-341 -j DROP --A limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-342 -j ACCEPT --A limit-342 -j DROP --A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-343 -j RETURN --A limit-343 -j DROP --A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-66 --A limit-344 -j DROP --A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-345 -j ACCEPT --A limit-345 -j DROP --A limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-346 -j ACCEPT --A limit-346 -m limit --limit 1/second -j LOG --A limit-346 -j DROP --A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-347 -j RETURN --A limit-347 -m limit --limit 1/second -j LOG --A limit-347 -j DROP --A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-67 --A limit-348 -m limit --limit 1/second -j LOG --A limit-348 -j DROP --A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-349 -j ACCEPT --A limit-349 -m limit --limit 1/second -j LOG --A limit-349 -j DROP --A limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 --A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-350 -j ACCEPT --A limit-350 -j DROP --A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-351 -j RETURN --A limit-351 -j DROP --A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-68 --A limit-352 -j DROP --A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-353 -j ACCEPT --A limit-353 -j DROP --A limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-354 -j ACCEPT --A limit-354 -j DROP --A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-355 -j RETURN --A limit-355 -j DROP --A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-69 --A limit-356 -j DROP --A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-357 -j ACCEPT --A limit-357 -j DROP --A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 --A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 --A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 --A limit-36 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 --A limit-360 -m limit --limit 1/second -j LOG --A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 --A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 --A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 --A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 --A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 --A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 --A limit-366 -m limit --limit 1/second -j LOG --A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 --A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 --A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 --A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 --A limit-37 -m recent --name user:C --rsource --mask fe00:: --set --A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 --A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 --A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 --A limit-372 -m limit --limit 1/second -j LOG --A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 --A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 --A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 --A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 --A limit-376 -j ACCEPT --A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 --A limit-378 -m limit --limit 1/second -j LOG --A limit-378 -j ACCEPT --A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 --A limit-379 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 --A limit-38 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 --A limit-380 -j ACCEPT --A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 --A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 --A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 --A limit-384 -m limit --limit 1/second -j LOG --A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 --A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 --A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-144 --A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 --A limit-388 -j ACCEPT --A limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 --A limit-39 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 --A limit-390 -m limit --limit 1/second -j LOG --A limit-390 -j ACCEPT --A limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 --A limit-391 -m limit --limit 1/second -j LOG --A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 --A limit-392 -j ACCEPT --A limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 --A limit-394 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 --A limit-395 -m recent --name user:C --rsource --mask fe00:: --set --A limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 --A limit-396 -m limit --limit 1/second -j LOG --A limit-396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 --A limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 --A limit-398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 --A limit-399 -m recent --name user:C --rsource --mask fe00:: --set --A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 --A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 --A limit-40 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 --A limit-400 -j ACCEPT --A limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 --A limit-402 -m limit --limit 1/second -j LOG --A limit-402 -j ACCEPT --A limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 --A limit-403 -m limit --limit 1/second -j LOG --A limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 --A limit-404 -j ACCEPT --A limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 --A limit-406 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 --A limit-407 -m recent --name user:C --rdest --mask fe00:: --set --A limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 --A limit-408 -m limit --limit 1/second -j LOG --A limit-408 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 --A limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-42 --A limit-41 -m recent --name user:C --rsource --mask fe00:: --set --A limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 --A limit-410 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-168 --A limit-411 -m recent --name user:C --rdest --mask fe00:: --set --A limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 --A limit-412 -j ACCEPT --A limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 --A limit-414 -m limit --limit 1/second -j LOG --A limit-414 -j ACCEPT --A limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 --A limit-415 -m limit --limit 1/second -j LOG --A limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 --A limit-416 -j ACCEPT --A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 --A limit-42 -j ACCEPT --A limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-420 -m limit --limit 1/second -j LOG --A limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-426 -m limit --limit 1/second -j LOG --A limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-43 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 --A limit-430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-430 -j ACCEPT --A limit-432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-432 -m limit --limit 1/second -j LOG --A limit-432 -j ACCEPT --A limit-433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-433 -m limit --limit 1/second -j LOG --A limit-434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-434 -j ACCEPT --A limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-438 -m limit --limit 1/second -j LOG --A limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 --A limit-44 -m limit --limit 1/second -j LOG --A limit-44 -j ACCEPT --A limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-442 -j ACCEPT --A limit-444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-444 -m limit --limit 1/second -j LOG --A limit-444 -j ACCEPT --A limit-445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-445 -m limit --limit 1/second -j LOG --A limit-446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-446 -j ACCEPT --A limit-448 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-448 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-449 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-449 -m recent --name user:C --rsource --mask fe00:: --set --A limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 --A limit-45 -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-450 -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-451 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-451 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-452 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-452 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-453 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-453 -m recent --name user:C --rsource --mask fe00:: --set --A limit-454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-454 -j ACCEPT --A limit-456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-456 -m limit --limit 1/second -j LOG --A limit-456 -j ACCEPT --A limit-457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-457 -m limit --limit 1/second -j LOG --A limit-458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-458 -j ACCEPT --A limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 --A limit-46 -j ACCEPT --A limit-460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-461 -m recent --name user:C --rdest --mask fe00:: --set --A limit-462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-462 -m limit --limit 1/second -j LOG --A limit-462 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-463 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-464 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-465 -m recent --name user:C --rdest --mask fe00:: --set --A limit-466 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-466 -j ACCEPT --A limit-468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-468 -m limit --limit 1/second -j LOG --A limit-468 -j ACCEPT --A limit-469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-469 -m limit --limit 1/second -j LOG --A limit-47 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48 --A limit-470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-470 -j ACCEPT --A limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-474 -m limit --limit 1/second -j LOG --A limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 --A limit-48 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-480 -m limit --limit 1/second -j LOG --A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-484 -j ACCEPT --A limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-486 -m limit --limit 1/second -j LOG --A limit-486 -j ACCEPT --A limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-487 -m limit --limit 1/second -j LOG --A limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-488 -j ACCEPT --A limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 --A limit-49 -m recent --name user:C --rdest --mask fe00:: --set --A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-492 -m limit --limit 1/second -j LOG --A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-496 -j ACCEPT --A limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-498 -m limit --limit 1/second -j LOG --A limit-498 -j ACCEPT --A limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-499 -m limit --limit 1/second -j LOG --A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 --A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 --A limit-50 -m limit --limit 1/second -j LOG --A limit-50 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-500 -j ACCEPT --A limit-502 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-502 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-503 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-503 -m recent --name user:C --rsource --mask fe00:: --set --A limit-504 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-504 -m limit --limit 1/second -j LOG --A limit-504 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-505 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-505 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-506 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-506 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-507 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-507 -m recent --name user:C --rsource --mask fe00:: --set --A limit-508 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-508 -j ACCEPT --A limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 --A limit-51 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-510 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-510 -m limit --limit 1/second -j LOG --A limit-510 -j ACCEPT --A limit-511 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-511 -m limit --limit 1/second -j LOG --A limit-512 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-512 -j ACCEPT --A limit-514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-514 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-515 -m recent --name user:C --rdest --mask fe00:: --set --A limit-516 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-516 -m limit --limit 1/second -j LOG --A limit-516 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-517 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-517 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-518 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-518 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-519 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-519 -m recent --name user:C --rdest --mask fe00:: --set --A limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 --A limit-52 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-520 -j ACCEPT --A limit-522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-522 -m limit --limit 1/second -j LOG --A limit-522 -j ACCEPT --A limit-523 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-523 -m limit --limit 1/second -j LOG --A limit-524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-524 -j ACCEPT --A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 --A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 --A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 --A limit-528 -m limit --limit 1/second -j LOG --A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 --A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-54 --A limit-53 -m recent --name user:C --rdest --mask fe00:: --set --A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 --A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 --A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 --A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 --A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 --A limit-534 -m limit --limit 1/second -j LOG --A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 --A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 --A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-186 --A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 --A limit-538 -j ACCEPT --A limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 --A limit-54 -j ACCEPT --A limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 --A limit-540 -m limit --limit 1/second -j LOG --A limit-540 -j ACCEPT --A limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 --A limit-541 -m limit --limit 1/second -j LOG --A limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 --A limit-542 -j ACCEPT --A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 --A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 --A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 --A limit-546 -m limit --limit 1/second -j LOG --A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 --A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 --A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-198 --A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-55 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 --A limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 --A limit-550 -j ACCEPT --A limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 --A limit-552 -m limit --limit 1/second -j LOG --A limit-552 -j ACCEPT --A limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 --A limit-553 -m limit --limit 1/second -j LOG --A limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 --A limit-554 -j ACCEPT --A limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 --A limit-556 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 --A limit-557 -m recent --name user:C --rsource --mask fe00:: --set --A limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 --A limit-558 -m limit --limit 1/second -j LOG --A limit-558 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 --A limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 --A limit-56 -m limit --limit 1/second -j LOG --A limit-56 -j ACCEPT --A limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 --A limit-560 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-210 --A limit-561 -m recent --name user:C --rsource --mask fe00:: --set --A limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 --A limit-562 -j ACCEPT --A limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 --A limit-564 -m limit --limit 1/second -j LOG --A limit-564 -j ACCEPT --A limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 --A limit-565 -m limit --limit 1/second -j LOG --A limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 --A limit-566 -j ACCEPT --A limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 --A limit-568 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 --A limit-569 -m recent --name user:C --rdest --mask fe00:: --set --A limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 --A limit-57 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 --A limit-570 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 --A limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 --A limit-572 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-222 --A limit-573 -m recent --name user:C --rdest --mask fe00:: --set --A limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 --A limit-574 -j ACCEPT --A limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 --A limit-576 -m limit --limit 1/second -j LOG --A limit-576 -j ACCEPT --A limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 --A limit-577 -m limit --limit 1/second -j LOG --A limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 --A limit-578 -j ACCEPT --A limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 --A limit-58 -j ACCEPT --A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-582 -m limit --limit 1/second -j LOG --A limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-588 -m limit --limit 1/second -j LOG --A limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-59 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 --A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-592 -j ACCEPT --A limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-594 -m limit --limit 1/second -j LOG --A limit-594 -j ACCEPT --A limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-595 -m limit --limit 1/second -j LOG --A limit-596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-596 -j ACCEPT --A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 --A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-600 -m limit --limit 1/second -j LOG --A limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-604 -j ACCEPT --A limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-606 -m limit --limit 1/second -j LOG --A limit-606 -j ACCEPT --A limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-607 -m limit --limit 1/second -j LOG --A limit-608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-608 -j ACCEPT --A limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-610 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-610 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-611 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-611 -m recent --name user:C --rsource --mask fe00:: --set --A limit-612 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-612 -m limit --limit 1/second -j LOG --A limit-612 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-613 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-613 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-614 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-614 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-615 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-615 -m recent --name user:C --rsource --mask fe00:: --set --A limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-616 -j ACCEPT --A limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-618 -m limit --limit 1/second -j LOG --A limit-618 -j ACCEPT --A limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-619 -m limit --limit 1/second -j LOG --A limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-62 -m limit --limit 1/second -j LOG --A limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-620 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-620 -j ACCEPT --A limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-623 -m recent --name user:C --rdest --mask fe00:: --set --A limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-624 -m limit --limit 1/second -j LOG --A limit-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-625 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-627 -m recent --name user:C --rdest --mask fe00:: --set --A limit-628 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-628 -j ACCEPT --A limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-630 -m limit --limit 1/second -j LOG --A limit-630 -j ACCEPT --A limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-631 -m limit --limit 1/second -j LOG --A limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-632 -j ACCEPT --A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-636 -m limit --limit 1/second -j LOG --A limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-642 -m limit --limit 1/second -j LOG --A limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-646 -j ACCEPT --A limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-648 -m limit --limit 1/second -j LOG --A limit-648 -j ACCEPT --A limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-649 -m limit --limit 1/second -j LOG --A limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-650 -j ACCEPT --A limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-654 -m limit --limit 1/second -j LOG --A limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-658 -j ACCEPT --A limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-660 -m limit --limit 1/second -j LOG --A limit-660 -j ACCEPT --A limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-661 -m limit --limit 1/second -j LOG --A limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-662 -j ACCEPT --A limit-664 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-664 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-665 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-665 -m recent --name user:C --rsource --mask fe00:: --set --A limit-666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-666 -m limit --limit 1/second -j LOG --A limit-666 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-667 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-668 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-669 -m recent --name user:C --rsource --mask fe00:: --set --A limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-670 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-670 -j ACCEPT --A limit-672 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-672 -m limit --limit 1/second -j LOG --A limit-672 -j ACCEPT --A limit-673 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-673 -m limit --limit 1/second -j LOG --A limit-674 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-674 -j ACCEPT --A limit-676 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-676 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-677 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-677 -m recent --name user:C --rdest --mask fe00:: --set --A limit-678 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-678 -m limit --limit 1/second -j LOG --A limit-678 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-679 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-679 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-68 -m limit --limit 1/second -j LOG --A limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-680 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-680 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-681 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-681 -m recent --name user:C --rdest --mask fe00:: --set --A limit-682 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-682 -j ACCEPT --A limit-684 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-684 -m limit --limit 1/second -j LOG --A limit-684 -j ACCEPT --A limit-685 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-685 -m limit --limit 1/second -j LOG --A limit-686 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-686 -j ACCEPT --A limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-688 -j ACCEPT --A limit-688 -m limit --limit 1/second -j LOG --A limit-688 -j DROP --A limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-689 -j RETURN --A limit-689 -m limit --limit 1/second -j LOG --A limit-689 -j DROP --A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j logaccept-70 --A limit-690 -m limit --limit 1/second -j LOG --A limit-690 -j DROP --A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-691 -j ACCEPT --A limit-691 -m limit --limit 1/second -j LOG --A limit-691 -j DROP --A limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-692 -j ACCEPT --A limit-692 -m limit --limit 1/second -j LOG --A limit-692 -j DROP --A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-693 -j RETURN --A limit-693 -m limit --limit 1/second -j LOG --A limit-693 -j DROP --A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j logaccept-71 --A limit-694 -m limit --limit 1/second -j LOG --A limit-694 -j DROP --A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-695 -j ACCEPT --A limit-695 -m limit --limit 1/second -j LOG --A limit-695 -j DROP --A limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-696 -j ACCEPT --A limit-696 -j DROP --A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-697 -j RETURN --A limit-697 -j DROP --A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j logaccept-72 --A limit-698 -j DROP --A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-699 -j ACCEPT --A limit-699 -j DROP --A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 --A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-700 -j ACCEPT --A limit-700 -j DROP --A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-701 -j RETURN --A limit-701 -j DROP --A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j logaccept-73 --A limit-702 -j DROP --A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-703 -j ACCEPT --A limit-703 -j DROP --A limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-704 -j ACCEPT --A limit-704 -m limit --limit 1/second -j LOG --A limit-704 -j DROP --A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-705 -j RETURN --A limit-705 -m limit --limit 1/second -j LOG --A limit-705 -j DROP --A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j logaccept-74 --A limit-706 -m limit --limit 1/second -j LOG --A limit-706 -j DROP --A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-707 -j ACCEPT --A limit-707 -m limit --limit 1/second -j LOG --A limit-707 -j DROP --A limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-708 -j ACCEPT --A limit-708 -j DROP --A limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-709 -j RETURN --A limit-709 -j DROP --A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j logaccept-75 --A limit-710 -j DROP --A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-711 -j ACCEPT --A limit-711 -j DROP --A limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-712 -j ACCEPT --A limit-712 -j DROP --A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-713 -j RETURN --A limit-713 -j DROP --A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j logaccept-76 --A limit-714 -j DROP --A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-715 -j ACCEPT --A limit-715 -j DROP --A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 --A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 --A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 --A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 --A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-72 -j ACCEPT --A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 --A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 --A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 --A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 --A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 --A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 --A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 --A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 --A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 --A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 --A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 --A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 --A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 --A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-246 --A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 --A limit-735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 --A limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 --A limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 --A limit-737 -m limit --limit 1/second -j LOG --A limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 --A limit-739 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-252 --A limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-74 -m limit --limit 1/second -j LOG --A limit-74 -j ACCEPT --A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 --A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 --A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 --A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 --A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 --A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-258 --A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 --A limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 --A limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 --A limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 --A limit-749 -m limit --limit 1/second -j LOG --A limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-75 -m limit --limit 1/second -j LOG --A limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 --A limit-751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-264 --A limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 --A limit-752 -m recent --name user:C --rsource --mask fe00:: --set --A limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 --A limit-753 -m recent --name user:C --rsource --mask fe00:: --set --A limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 --A limit-754 -m recent --name user:C --rsource --mask fe00:: --set --A limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 --A limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 --A limit-756 -m recent --name user:C --rsource --mask fe00:: --set --A limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-270 --A limit-757 -m recent --name user:C --rsource --mask fe00:: --set --A limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 --A limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 --A limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-76 -j ACCEPT --A limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 --A limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 --A limit-761 -m limit --limit 1/second -j LOG --A limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 --A limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 --A limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 --A limit-764 -m recent --name user:C --rdest --mask fe00:: --set --A limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 --A limit-765 -m recent --name user:C --rdest --mask fe00:: --set --A limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 --A limit-766 -m recent --name user:C --rdest --mask fe00:: --set --A limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 --A limit-767 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 --A limit-768 -m recent --name user:C --rdest --mask fe00:: --set --A limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-282 --A limit-769 -m recent --name user:C --rdest --mask fe00:: --set --A limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 --A limit-771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 --A limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 --A limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 --A limit-773 -m limit --limit 1/second -j LOG --A limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 --A limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-288 --A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-791 -m limit --limit 1/second -j LOG --A limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 --A limit-8 -m limit --limit 1/second -j LOG --A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-80 -m limit --limit 1/second -j LOG --A limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-801 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-803 -m limit --limit 1/second -j LOG --A limit-804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-806 -m recent --name user:C --rsource --mask fe00:: --set --A limit-807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-807 -m recent --name user:C --rsource --mask fe00:: --set --A limit-808 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-808 -m recent --name user:C --rsource --mask fe00:: --set --A limit-809 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-809 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-810 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-810 -m recent --name user:C --rsource --mask fe00:: --set --A limit-811 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-811 -m recent --name user:C --rsource --mask fe00:: --set --A limit-812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-813 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-815 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-815 -m limit --limit 1/second -j LOG --A limit-816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-817 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-818 -m recent --name user:C --rdest --mask fe00:: --set --A limit-819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-819 -m recent --name user:C --rdest --mask fe00:: --set --A limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-820 -m recent --name user:C --rdest --mask fe00:: --set --A limit-821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-822 -m recent --name user:C --rdest --mask fe00:: --set --A limit-823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-823 -m recent --name user:C --rdest --mask fe00:: --set --A limit-824 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-825 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-826 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-827 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-827 -m limit --limit 1/second -j LOG --A limit-828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-829 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-84 -j ACCEPT --A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-845 -m limit --limit 1/second -j LOG --A limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-847 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-857 -m limit --limit 1/second -j LOG --A limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-86 -m limit --limit 1/second -j LOG --A limit-86 -j ACCEPT --A limit-860 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-860 -m recent --name user:C --rsource --mask fe00:: --set --A limit-861 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-861 -m recent --name user:C --rsource --mask fe00:: --set --A limit-862 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-862 -m recent --name user:C --rsource --mask fe00:: --set --A limit-863 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-863 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-864 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-864 -m recent --name user:C --rsource --mask fe00:: --set --A limit-865 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-865 -m recent --name user:C --rsource --mask fe00:: --set --A limit-866 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-867 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-868 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-869 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-869 -m limit --limit 1/second -j LOG --A limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-87 -m limit --limit 1/second -j LOG --A limit-870 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-871 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-872 -m recent --name user:C --rdest --mask fe00:: --set --A limit-873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-873 -m recent --name user:C --rdest --mask fe00:: --set --A limit-874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-874 -m recent --name user:C --rdest --mask fe00:: --set --A limit-875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-875 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-876 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-876 -m recent --name user:C --rdest --mask fe00:: --set --A limit-877 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-877 -m recent --name user:C --rdest --mask fe00:: --set --A limit-878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-879 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-88 -j ACCEPT --A limit-880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-881 -m limit --limit 1/second -j LOG --A limit-882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-883 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 --A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 --A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 --A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 --A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 --A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 --A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 --A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 --A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 --A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 --A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 --A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-300 --A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 --A limit-897 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 --A limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 --A limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 --A limit-899 -m limit --limit 1/second -j LOG --A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 --A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-90 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-90 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 --A limit-901 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 --A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 --A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 --A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 --A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 --A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 --A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 --A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 --A limit-909 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 --A limit-91 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-91 -m recent --name user:C --rsource --mask fe00:: --set --A limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 --A limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 --A limit-911 -m limit --limit 1/second -j LOG --A limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 --A limit-913 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-318 --A limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 --A limit-914 -m recent --name user:C --rsource --mask fe00:: --set --A limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 --A limit-915 -m recent --name user:C --rsource --mask fe00:: --set --A limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 --A limit-916 -m recent --name user:C --rsource --mask fe00:: --set --A limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 --A limit-917 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 --A limit-918 -m recent --name user:C --rsource --mask fe00:: --set --A limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-324 --A limit-919 -m recent --name user:C --rsource --mask fe00:: --set --A limit-92 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-92 -m limit --limit 1/second -j LOG --A limit-92 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 --A limit-921 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 --A limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 --A limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 --A limit-923 -m limit --limit 1/second -j LOG --A limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 --A limit-925 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-330 --A limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 --A limit-926 -m recent --name user:C --rdest --mask fe00:: --set --A limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 --A limit-927 -m recent --name user:C --rdest --mask fe00:: --set --A limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 --A limit-928 -m recent --name user:C --rdest --mask fe00:: --set --A limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 --A limit-929 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-93 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-93 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 --A limit-930 -m recent --name user:C --rdest --mask fe00:: --set --A limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 --A limit-931 -m recent --name user:C --rdest --mask fe00:: --set --A limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 --A limit-933 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 --A limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 --A limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 --A limit-935 -m limit --limit 1/second -j LOG --A limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 --A limit-937 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 --A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-94 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-94 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-95 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-95 -m recent --name user:C --rsource --mask fe00:: --set --A limit-950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-953 -m limit --limit 1/second -j LOG --A limit-954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-96 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-96 -j ACCEPT --A limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-962 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-963 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-964 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-965 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-965 -m limit --limit 1/second -j LOG --A limit-966 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-967 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-968 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-968 -m recent --name user:C --rsource --mask fe00:: --set --A limit-969 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-969 -m recent --name user:C --rsource --mask fe00:: --set --A limit-97 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-970 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-970 -m recent --name user:C --rsource --mask fe00:: --set --A limit-971 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-971 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-972 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-972 -m recent --name user:C --rsource --mask fe00:: --set --A limit-973 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-973 -m recent --name user:C --rsource --mask fe00:: --set --A limit-974 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-975 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-976 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-977 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-977 -m limit --limit 1/second -j LOG --A limit-978 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-979 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-98 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-98 -m limit --limit 1/second -j LOG --A limit-98 -j ACCEPT --A limit-980 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-980 -m recent --name user:C --rdest --mask fe00:: --set --A limit-981 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-981 -m recent --name user:C --rdest --mask fe00:: --set --A limit-982 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-982 -m recent --name user:C --rdest --mask fe00:: --set --A limit-983 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-983 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-984 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-984 -m recent --name user:C --rdest --mask fe00:: --set --A limit-985 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-985 -m recent --name user:C --rdest --mask fe00:: --set --A limit-986 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-987 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-988 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-989 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-989 -m limit --limit 1/second -j LOG --A limit-99 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-99 -m limit --limit 1/second -j LOG --A limit-990 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-991 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A logaccept-0 -m limit --limit 1/second -j LOG --A logaccept-0 -j ACCEPT --A logaccept-18 -m limit --limit 1/second -j LOG --A logaccept-18 -j ACCEPT --A logaccept-27 -m limit --limit 1/second -j LOG --A logaccept-27 -j ACCEPT --A logaccept-36 -m limit --limit 1/second -j LOG --A logaccept-36 -j ACCEPT --A logaccept-45 -m limit --limit 1/second -j LOG --A logaccept-45 -j ACCEPT --A logaccept-63 -m limit --limit 1/second -j LOG --A logaccept-63 -j ACCEPT --A logaccept-64 -m limit --limit 1/second -j LOG --A logaccept-64 -j ACCEPT --A logaccept-65 -m limit --limit 1/second -j LOG --A logaccept-65 -j ACCEPT --A logaccept-66 -m limit --limit 1/second -j LOG --A logaccept-66 -j ACCEPT --A logaccept-67 -m limit --limit 1/second -j LOG --A logaccept-67 -j ACCEPT --A logaccept-68 -m limit --limit 1/second -j LOG --A logaccept-68 -j ACCEPT --A logaccept-69 -m limit --limit 1/second -j LOG --A logaccept-69 -j ACCEPT --A logaccept-70 -m limit --limit 1/second -j LOG --A logaccept-70 -j ACCEPT --A logaccept-71 -m limit --limit 1/second -j LOG --A logaccept-71 -j ACCEPT --A logaccept-72 -m limit --limit 1/second -j LOG --A logaccept-72 -j ACCEPT --A logaccept-73 -m limit --limit 1/second -j LOG --A logaccept-73 -j ACCEPT --A logaccept-74 -m limit --limit 1/second -j LOG --A logaccept-74 -j ACCEPT --A logaccept-75 -m limit --limit 1/second -j LOG --A logaccept-75 -j ACCEPT --A logaccept-76 -m limit --limit 1/second -j LOG --A logaccept-76 -j ACCEPT --A logaccept-77 -m limit --limit 1/second -j LOG --A logaccept-77 -j ACCEPT --A logaccept-78 -m limit --limit 1/second -j LOG --A logaccept-78 -j ACCEPT --A logaccept-79 -m limit --limit 1/second -j LOG --A logaccept-79 -j ACCEPT --A logaccept-80 -m limit --limit 1/second -j LOG --A logaccept-80 -j ACCEPT --A logaccept-81 -m limit --limit 1/second -j LOG --A logaccept-81 -j ACCEPT --A logaccept-82 -m limit --limit 1/second -j LOG --A logaccept-82 -j ACCEPT --A logaccept-83 -m limit --limit 1/second -j LOG --A logaccept-83 -j ACCEPT --A logaccept-84 -m limit --limit 1/second -j LOG --A logaccept-84 -j ACCEPT --A logaccept-9 -m limit --limit 1/second -j LOG --A logaccept-9 -j ACCEPT --A logaccept-final-0 -m limit --limit 1/second -j LOG --A logaccept-final-0 -j ACCEPT --A logaccept-final-1 -m limit --limit 1/second -j LOG --A logaccept-final-1 -j ACCEPT --A logaccept-final-10 -m limit --limit 1/second -j LOG --A logaccept-final-10 -j ACCEPT --A logaccept-final-11 -m limit --limit 1/second -j LOG --A logaccept-final-11 -j ACCEPT --A logaccept-final-12 -m limit --limit 1/second -j LOG --A logaccept-final-12 -j ACCEPT --A logaccept-final-13 -m limit --limit 1/second -j LOG --A logaccept-final-13 -j ACCEPT --A logaccept-final-14 -m limit --limit 1/second -j LOG --A logaccept-final-14 -j ACCEPT --A logaccept-final-15 -m limit --limit 1/second -j LOG --A logaccept-final-15 -j ACCEPT --A logaccept-final-16 -m limit --limit 1/second -j LOG --A logaccept-final-16 -j ACCEPT --A logaccept-final-17 -m limit --limit 1/second -j LOG --A logaccept-final-17 -j ACCEPT --A logaccept-final-18 -m limit --limit 1/second -j LOG --A logaccept-final-18 -j ACCEPT --A logaccept-final-19 -m limit --limit 1/second -j LOG --A logaccept-final-19 -j ACCEPT --A logaccept-final-2 -m limit --limit 1/second -j LOG --A logaccept-final-2 -j ACCEPT --A logaccept-final-20 -m limit --limit 1/second -j LOG --A logaccept-final-20 -j ACCEPT --A logaccept-final-21 -m limit --limit 1/second -j LOG --A logaccept-final-21 -j ACCEPT --A logaccept-final-22 -m limit --limit 1/second -j LOG --A logaccept-final-22 -j ACCEPT --A logaccept-final-23 -m limit --limit 1/second -j LOG --A logaccept-final-23 -j ACCEPT --A logaccept-final-24 -m limit --limit 1/second -j LOG --A logaccept-final-24 -j ACCEPT --A logaccept-final-25 -m limit --limit 1/second -j LOG --A logaccept-final-25 -j ACCEPT --A logaccept-final-26 -m limit --limit 1/second -j LOG --A logaccept-final-26 -j ACCEPT --A logaccept-final-27 -m limit --limit 1/second -j LOG --A logaccept-final-27 -j ACCEPT --A logaccept-final-28 -m limit --limit 1/second -j LOG --A logaccept-final-28 -j ACCEPT --A logaccept-final-29 -m limit --limit 1/second -j LOG --A logaccept-final-29 -j ACCEPT --A logaccept-final-3 -m limit --limit 1/second -j LOG --A logaccept-final-3 -j ACCEPT --A logaccept-final-30 -m limit --limit 1/second -j LOG --A logaccept-final-30 -j ACCEPT --A logaccept-final-31 -m limit --limit 1/second -j LOG --A logaccept-final-31 -j ACCEPT --A logaccept-final-32 -m limit --limit 1/second -j LOG --A logaccept-final-32 -j ACCEPT --A logaccept-final-33 -m limit --limit 1/second -j LOG --A logaccept-final-33 -j ACCEPT --A logaccept-final-34 -m limit --limit 1/second -j LOG --A logaccept-final-34 -j ACCEPT --A logaccept-final-35 -m limit --limit 1/second -j LOG --A logaccept-final-35 -j ACCEPT --A logaccept-final-36 -m limit --limit 1/second -j LOG --A logaccept-final-36 -j ACCEPT --A logaccept-final-37 -m limit --limit 1/second -j LOG --A logaccept-final-37 -j ACCEPT --A logaccept-final-38 -m limit --limit 1/second -j LOG --A logaccept-final-38 -j ACCEPT --A logaccept-final-39 -m limit --limit 1/second -j LOG --A logaccept-final-39 -j ACCEPT --A logaccept-final-4 -m limit --limit 1/second -j LOG --A logaccept-final-4 -j ACCEPT --A logaccept-final-40 -m limit --limit 1/second -j LOG --A logaccept-final-40 -j ACCEPT --A logaccept-final-41 -m limit --limit 1/second -j LOG --A logaccept-final-41 -j ACCEPT --A logaccept-final-42 -m limit --limit 1/second -j LOG --A logaccept-final-42 -j ACCEPT --A logaccept-final-43 -m limit --limit 1/second -j LOG --A logaccept-final-43 -j ACCEPT --A logaccept-final-44 -m limit --limit 1/second -j LOG --A logaccept-final-44 -j ACCEPT --A logaccept-final-45 -m limit --limit 1/second -j LOG --A logaccept-final-45 -j ACCEPT --A logaccept-final-46 -m limit --limit 1/second -j LOG --A logaccept-final-46 -j ACCEPT --A logaccept-final-47 -m limit --limit 1/second -j LOG --A logaccept-final-47 -j ACCEPT --A logaccept-final-48 -m limit --limit 1/second -j LOG --A logaccept-final-48 -j ACCEPT --A logaccept-final-49 -m limit --limit 1/second -j LOG --A logaccept-final-49 -j ACCEPT --A logaccept-final-5 -m limit --limit 1/second -j LOG --A logaccept-final-5 -j ACCEPT --A logaccept-final-50 -m limit --limit 1/second -j LOG --A logaccept-final-50 -j ACCEPT --A logaccept-final-51 -m limit --limit 1/second -j LOG --A logaccept-final-51 -j ACCEPT --A logaccept-final-52 -m limit --limit 1/second -j LOG --A logaccept-final-52 -j ACCEPT --A logaccept-final-53 -m limit --limit 1/second -j LOG --A logaccept-final-53 -j ACCEPT --A logaccept-final-54 -m limit --limit 1/second -j LOG --A logaccept-final-54 -j ACCEPT --A logaccept-final-55 -m limit --limit 1/second -j LOG --A logaccept-final-55 -j ACCEPT --A logaccept-final-56 -m limit --limit 1/second -j LOG --A logaccept-final-56 -j ACCEPT --A logaccept-final-57 -m limit --limit 1/second -j LOG --A logaccept-final-57 -j ACCEPT --A logaccept-final-58 -m limit --limit 1/second -j LOG --A logaccept-final-58 -j ACCEPT --A logaccept-final-59 -m limit --limit 1/second -j LOG --A logaccept-final-59 -j ACCEPT --A logaccept-final-6 -m limit --limit 1/second -j LOG --A logaccept-final-6 -j ACCEPT --A logaccept-final-60 -m limit --limit 1/second -j LOG --A logaccept-final-60 -j ACCEPT --A logaccept-final-61 -m limit --limit 1/second -j LOG --A logaccept-final-61 -j ACCEPT --A logaccept-final-7 -m limit --limit 1/second -j LOG --A logaccept-final-7 -j ACCEPT --A logaccept-final-8 -m limit --limit 1/second -j LOG --A logaccept-final-8 -j ACCEPT --A logaccept-final-9 -m limit --limit 1/second -j LOG --A logaccept-final-9 -j ACCEPT --A logdrop-0 -m limit --limit 1/second -j LOG --A logdrop-0 -j DROP --A logdrop-1 -m limit --limit 1/second -j LOG --A logdrop-1 -j DROP --A logdrop-10 -m limit --limit 1/second -j LOG --A logdrop-10 -j DROP --A logdrop-100 -m limit --limit 1/second -j LOG --A logdrop-100 -j DROP --A logdrop-101 -m limit --limit 1/second -j LOG --A logdrop-101 -j DROP --A logdrop-102 -m limit --limit 1/second -j LOG --A logdrop-102 -j DROP --A logdrop-103 -m limit --limit 1/second -j LOG --A logdrop-103 -j DROP --A logdrop-104 -m limit --limit 1/second -j LOG --A logdrop-104 -j DROP --A logdrop-105 -m limit --limit 1/second -j LOG --A logdrop-105 -j DROP --A logdrop-106 -m limit --limit 1/second -j LOG --A logdrop-106 -j DROP --A logdrop-107 -m limit --limit 1/second -j LOG --A logdrop-107 -j DROP --A logdrop-108 -m limit --limit 1/second -j LOG --A logdrop-108 -j DROP --A logdrop-109 -m limit --limit 1/second -j LOG --A logdrop-109 -j DROP --A logdrop-11 -m limit --limit 1/second -j LOG --A logdrop-11 -j DROP --A logdrop-110 -m limit --limit 1/second -j LOG --A logdrop-110 -j DROP --A logdrop-111 -m limit --limit 1/second -j LOG --A logdrop-111 -j DROP --A logdrop-112 -m limit --limit 1/second -j LOG --A logdrop-112 -j DROP --A logdrop-113 -m limit --limit 1/second -j LOG --A logdrop-113 -j DROP --A logdrop-114 -m limit --limit 1/second -j LOG --A logdrop-114 -j DROP --A logdrop-115 -m limit --limit 1/second -j LOG --A logdrop-115 -j DROP --A logdrop-116 -m limit --limit 1/second -j LOG --A logdrop-116 -j DROP --A logdrop-117 -m limit --limit 1/second -j LOG --A logdrop-117 -j DROP --A logdrop-118 -m limit --limit 1/second -j LOG --A logdrop-118 -j DROP --A logdrop-119 -m limit --limit 1/second -j LOG --A logdrop-119 -j DROP --A logdrop-12 -m limit --limit 1/second -j LOG --A logdrop-12 -j DROP --A logdrop-120 -m limit --limit 1/second -j LOG --A logdrop-120 -j DROP --A logdrop-121 -m limit --limit 1/second -j LOG --A logdrop-121 -j DROP --A logdrop-122 -m limit --limit 1/second -j LOG --A logdrop-122 -j DROP --A logdrop-123 -m limit --limit 1/second -j LOG --A logdrop-123 -j DROP --A logdrop-124 -m limit --limit 1/second -j LOG --A logdrop-124 -j DROP --A logdrop-125 -m limit --limit 1/second -j LOG --A logdrop-125 -j DROP --A logdrop-126 -m limit --limit 1/second -j LOG --A logdrop-126 -j DROP --A logdrop-127 -m limit --limit 1/second -j LOG --A logdrop-127 -j DROP --A logdrop-128 -m limit --limit 1/second -j LOG --A logdrop-128 -j DROP --A logdrop-129 -m limit --limit 1/second -j LOG --A logdrop-129 -j DROP --A logdrop-13 -m limit --limit 1/second -j LOG --A logdrop-13 -j DROP --A logdrop-130 -m limit --limit 1/second -j LOG --A logdrop-130 -j DROP --A logdrop-131 -m limit --limit 1/second -j LOG --A logdrop-131 -j DROP --A logdrop-132 -m limit --limit 1/second -j LOG --A logdrop-132 -j DROP --A logdrop-133 -m limit --limit 1/second -j LOG --A logdrop-133 -j DROP --A logdrop-134 -m limit --limit 1/second -j LOG --A logdrop-134 -j DROP --A logdrop-135 -m limit --limit 1/second -j LOG --A logdrop-135 -j DROP --A logdrop-136 -m limit --limit 1/second -j LOG --A logdrop-136 -j DROP --A logdrop-137 -m limit --limit 1/second -j LOG --A logdrop-137 -j DROP --A logdrop-138 -m limit --limit 1/second -j LOG --A logdrop-138 -j DROP --A logdrop-139 -m limit --limit 1/second -j LOG --A logdrop-139 -j DROP --A logdrop-14 -m limit --limit 1/second -j LOG --A logdrop-14 -j DROP --A logdrop-140 -m limit --limit 1/second -j LOG --A logdrop-140 -j DROP --A logdrop-141 -m limit --limit 1/second -j LOG --A logdrop-141 -j DROP --A logdrop-142 -m limit --limit 1/second -j LOG --A logdrop-142 -j DROP --A logdrop-143 -m limit --limit 1/second -j LOG --A logdrop-143 -j DROP --A logdrop-144 -m limit --limit 1/second -j LOG --A logdrop-144 -j DROP --A logdrop-145 -m limit --limit 1/second -j LOG --A logdrop-145 -j DROP --A logdrop-146 -m limit --limit 1/second -j LOG --A logdrop-146 -j DROP --A logdrop-147 -m limit --limit 1/second -j LOG --A logdrop-147 -j DROP --A logdrop-148 -m limit --limit 1/second -j LOG --A logdrop-148 -j DROP --A logdrop-149 -m limit --limit 1/second -j LOG --A logdrop-149 -j DROP --A logdrop-15 -m limit --limit 1/second -j LOG --A logdrop-15 -j DROP --A logdrop-150 -m limit --limit 1/second -j LOG --A logdrop-150 -j DROP --A logdrop-151 -m limit --limit 1/second -j LOG --A logdrop-151 -j DROP --A logdrop-152 -m limit --limit 1/second -j LOG --A logdrop-152 -j DROP --A logdrop-153 -m limit --limit 1/second -j LOG --A logdrop-153 -j DROP --A logdrop-154 -m limit --limit 1/second -j LOG --A logdrop-154 -j DROP --A logdrop-155 -m limit --limit 1/second -j LOG --A logdrop-155 -j DROP --A logdrop-156 -m limit --limit 1/second -j LOG --A logdrop-156 -j DROP --A logdrop-157 -m limit --limit 1/second -j LOG --A logdrop-157 -j DROP --A logdrop-158 -m limit --limit 1/second -j LOG --A logdrop-158 -j DROP --A logdrop-159 -m limit --limit 1/second -j LOG --A logdrop-159 -j DROP --A logdrop-16 -m limit --limit 1/second -j LOG --A logdrop-16 -j DROP --A logdrop-160 -m limit --limit 1/second -j LOG --A logdrop-160 -j DROP --A logdrop-161 -m limit --limit 1/second -j LOG --A logdrop-161 -j DROP --A logdrop-162 -m limit --limit 1/second -j LOG --A logdrop-162 -j DROP --A logdrop-163 -m limit --limit 1/second -j LOG --A logdrop-163 -j DROP --A logdrop-164 -m limit --limit 1/second -j LOG --A logdrop-164 -j DROP --A logdrop-165 -m limit --limit 1/second -j LOG --A logdrop-165 -j DROP --A logdrop-166 -m limit --limit 1/second -j LOG --A logdrop-166 -j DROP --A logdrop-167 -m limit --limit 1/second -j LOG --A logdrop-167 -j DROP --A logdrop-168 -m limit --limit 1/second -j LOG --A logdrop-168 -j DROP --A logdrop-169 -m limit --limit 1/second -j LOG --A logdrop-169 -j DROP --A logdrop-17 -m limit --limit 1/second -j LOG --A logdrop-17 -j DROP --A logdrop-170 -m limit --limit 1/second -j LOG --A logdrop-170 -j DROP --A logdrop-171 -m limit --limit 1/second -j LOG --A logdrop-171 -j DROP --A logdrop-172 -m limit --limit 1/second -j LOG --A logdrop-172 -j DROP --A logdrop-173 -m limit --limit 1/second -j LOG --A logdrop-173 -j DROP --A logdrop-174 -m limit --limit 1/second -j LOG --A logdrop-174 -j DROP --A logdrop-175 -m limit --limit 1/second -j LOG --A logdrop-175 -j DROP --A logdrop-176 -m limit --limit 1/second -j LOG --A logdrop-176 -j DROP --A logdrop-177 -m limit --limit 1/second -j LOG --A logdrop-177 -j DROP --A logdrop-178 -m limit --limit 1/second -j LOG --A logdrop-178 -j DROP --A logdrop-179 -m limit --limit 1/second -j LOG --A logdrop-179 -j DROP --A logdrop-18 -m limit --limit 1/second -j LOG --A logdrop-18 -j DROP --A logdrop-180 -m limit --limit 1/second -j LOG --A logdrop-180 -j DROP --A logdrop-181 -m limit --limit 1/second -j LOG --A logdrop-181 -j DROP --A logdrop-182 -m limit --limit 1/second -j LOG --A logdrop-182 -j DROP --A logdrop-183 -m limit --limit 1/second -j LOG --A logdrop-183 -j DROP --A logdrop-184 -m limit --limit 1/second -j LOG --A logdrop-184 -j DROP --A logdrop-185 -m limit --limit 1/second -j LOG --A logdrop-185 -j DROP --A logdrop-186 -m limit --limit 1/second -j LOG --A logdrop-186 -j DROP --A logdrop-187 -m limit --limit 1/second -j LOG --A logdrop-187 -j DROP --A logdrop-188 -m limit --limit 1/second -j LOG --A logdrop-188 -j DROP --A logdrop-189 -m limit --limit 1/second -j LOG --A logdrop-189 -j DROP --A logdrop-19 -m limit --limit 1/second -j LOG --A logdrop-19 -j DROP --A logdrop-190 -m limit --limit 1/second -j LOG --A logdrop-190 -j DROP --A logdrop-191 -m limit --limit 1/second -j LOG --A logdrop-191 -j DROP --A logdrop-192 -m limit --limit 1/second -j LOG --A logdrop-192 -j DROP --A logdrop-193 -m limit --limit 1/second -j LOG --A logdrop-193 -j DROP --A logdrop-194 -m limit --limit 1/second -j LOG --A logdrop-194 -j DROP --A logdrop-195 -m limit --limit 1/second -j LOG --A logdrop-195 -j DROP --A logdrop-196 -m limit --limit 1/second -j LOG --A logdrop-196 -j DROP --A logdrop-197 -m limit --limit 1/second -j LOG --A logdrop-197 -j DROP --A logdrop-198 -m limit --limit 1/second -j LOG --A logdrop-198 -j DROP --A logdrop-199 -m limit --limit 1/second -j LOG --A logdrop-199 -j DROP --A logdrop-2 -m limit --limit 1/second -j LOG --A logdrop-2 -j DROP --A logdrop-20 -m limit --limit 1/second -j LOG --A logdrop-20 -j DROP --A logdrop-200 -m limit --limit 1/second -j LOG --A logdrop-200 -j DROP --A logdrop-201 -m limit --limit 1/second -j LOG --A logdrop-201 -j DROP --A logdrop-202 -m limit --limit 1/second -j LOG --A logdrop-202 -j DROP --A logdrop-203 -m limit --limit 1/second -j LOG --A logdrop-203 -j DROP --A logdrop-204 -m limit --limit 1/second -j LOG --A logdrop-204 -j DROP --A logdrop-205 -m limit --limit 1/second -j LOG --A logdrop-205 -j DROP --A logdrop-206 -m limit --limit 1/second -j LOG --A logdrop-206 -j DROP --A logdrop-207 -m limit --limit 1/second -j LOG --A logdrop-207 -j DROP --A logdrop-208 -m limit --limit 1/second -j LOG --A logdrop-208 -j DROP --A logdrop-209 -m limit --limit 1/second -j LOG --A logdrop-209 -j DROP --A logdrop-21 -m limit --limit 1/second -j LOG --A logdrop-21 -j DROP --A logdrop-210 -m limit --limit 1/second -j LOG --A logdrop-210 -j DROP --A logdrop-211 -m limit --limit 1/second -j LOG --A logdrop-211 -j DROP --A logdrop-212 -m limit --limit 1/second -j LOG --A logdrop-212 -j DROP --A logdrop-213 -m limit --limit 1/second -j LOG --A logdrop-213 -j DROP --A logdrop-214 -m limit --limit 1/second -j LOG --A logdrop-214 -j DROP --A logdrop-215 -m limit --limit 1/second -j LOG --A logdrop-215 -j DROP --A logdrop-216 -m limit --limit 1/second -j LOG --A logdrop-216 -j DROP --A logdrop-217 -m limit --limit 1/second -j LOG --A logdrop-217 -j DROP --A logdrop-218 -m limit --limit 1/second -j LOG --A logdrop-218 -j DROP --A logdrop-219 -m limit --limit 1/second -j LOG --A logdrop-219 -j DROP --A logdrop-22 -m limit --limit 1/second -j LOG --A logdrop-22 -j DROP --A logdrop-220 -m limit --limit 1/second -j LOG --A logdrop-220 -j DROP --A logdrop-221 -m limit --limit 1/second -j LOG --A logdrop-221 -j DROP --A logdrop-222 -m limit --limit 1/second -j LOG --A logdrop-222 -j DROP --A logdrop-223 -m limit --limit 1/second -j LOG --A logdrop-223 -j DROP --A logdrop-224 -m limit --limit 1/second -j LOG --A logdrop-224 -j DROP --A logdrop-225 -m limit --limit 1/second -j LOG --A logdrop-225 -j DROP --A logdrop-226 -m limit --limit 1/second -j LOG --A logdrop-226 -j DROP --A logdrop-227 -m limit --limit 1/second -j LOG --A logdrop-227 -j DROP --A logdrop-228 -m limit --limit 1/second -j LOG --A logdrop-228 -j DROP --A logdrop-229 -m limit --limit 1/second -j LOG --A logdrop-229 -j DROP --A logdrop-23 -m limit --limit 1/second -j LOG --A logdrop-23 -j DROP --A logdrop-230 -m limit --limit 1/second -j LOG --A logdrop-230 -j DROP --A logdrop-231 -m limit --limit 1/second -j LOG --A logdrop-231 -j DROP --A logdrop-232 -m limit --limit 1/second -j LOG --A logdrop-232 -j DROP --A logdrop-233 -m limit --limit 1/second -j LOG --A logdrop-233 -j DROP --A logdrop-234 -m limit --limit 1/second -j LOG --A logdrop-234 -j DROP --A logdrop-235 -m limit --limit 1/second -j LOG --A logdrop-235 -j DROP --A logdrop-236 -m limit --limit 1/second -j LOG --A logdrop-236 -j DROP --A logdrop-237 -m limit --limit 1/second -j LOG --A logdrop-237 -j DROP --A logdrop-238 -m limit --limit 1/second -j LOG --A logdrop-238 -j DROP --A logdrop-239 -m limit --limit 1/second -j LOG --A logdrop-239 -j DROP --A logdrop-24 -m limit --limit 1/second -j LOG --A logdrop-24 -j DROP --A logdrop-240 -m limit --limit 1/second -j LOG --A logdrop-240 -j DROP --A logdrop-241 -m limit --limit 1/second -j LOG --A logdrop-241 -j DROP --A logdrop-242 -m limit --limit 1/second -j LOG --A logdrop-242 -j DROP --A logdrop-243 -m limit --limit 1/second -j LOG --A logdrop-243 -j DROP --A logdrop-244 -m limit --limit 1/second -j LOG --A logdrop-244 -j DROP --A logdrop-245 -m limit --limit 1/second -j LOG --A logdrop-245 -j DROP --A logdrop-246 -m limit --limit 1/second -j LOG --A logdrop-246 -j DROP --A logdrop-247 -m limit --limit 1/second -j LOG --A logdrop-247 -j DROP --A logdrop-248 -m limit --limit 1/second -j LOG --A logdrop-248 -j DROP --A logdrop-249 -m limit --limit 1/second -j LOG --A logdrop-249 -j DROP --A logdrop-25 -m limit --limit 1/second -j LOG --A logdrop-25 -j DROP --A logdrop-250 -m limit --limit 1/second -j LOG --A logdrop-250 -j DROP --A logdrop-251 -m limit --limit 1/second -j LOG --A logdrop-251 -j DROP --A logdrop-252 -m limit --limit 1/second -j LOG --A logdrop-252 -j DROP --A logdrop-253 -m limit --limit 1/second -j LOG --A logdrop-253 -j DROP --A logdrop-254 -m limit --limit 1/second -j LOG --A logdrop-254 -j DROP --A logdrop-255 -m limit --limit 1/second -j LOG --A logdrop-255 -j DROP --A logdrop-256 -m limit --limit 1/second -j LOG --A logdrop-256 -j DROP --A logdrop-257 -m limit --limit 1/second -j LOG --A logdrop-257 -j DROP --A logdrop-258 -m limit --limit 1/second -j LOG --A logdrop-258 -j DROP --A logdrop-259 -m limit --limit 1/second -j LOG --A logdrop-259 -j DROP --A logdrop-26 -m limit --limit 1/second -j LOG --A logdrop-26 -j DROP --A logdrop-260 -m limit --limit 1/second -j LOG --A logdrop-260 -j DROP --A logdrop-261 -m limit --limit 1/second -j LOG --A logdrop-261 -j DROP --A logdrop-262 -m limit --limit 1/second -j LOG --A logdrop-262 -j DROP --A logdrop-263 -m limit --limit 1/second -j LOG --A logdrop-263 -j DROP --A logdrop-264 -m limit --limit 1/second -j LOG --A logdrop-264 -j DROP --A logdrop-265 -m limit --limit 1/second -j LOG --A logdrop-265 -j DROP --A logdrop-266 -m limit --limit 1/second -j LOG --A logdrop-266 -j DROP --A logdrop-267 -m limit --limit 1/second -j LOG --A logdrop-267 -j DROP --A logdrop-268 -m limit --limit 1/second -j LOG --A logdrop-268 -j DROP --A logdrop-269 -m limit --limit 1/second -j LOG --A logdrop-269 -j DROP --A logdrop-27 -m limit --limit 1/second -j LOG --A logdrop-27 -j DROP --A logdrop-270 -m limit --limit 1/second -j LOG --A logdrop-270 -j DROP --A logdrop-271 -m limit --limit 1/second -j LOG --A logdrop-271 -j DROP --A logdrop-272 -m limit --limit 1/second -j LOG --A logdrop-272 -j DROP --A logdrop-273 -m limit --limit 1/second -j LOG --A logdrop-273 -j DROP --A logdrop-274 -m limit --limit 1/second -j LOG --A logdrop-274 -j DROP --A logdrop-275 -m limit --limit 1/second -j LOG --A logdrop-275 -j DROP --A logdrop-276 -m limit --limit 1/second -j LOG --A logdrop-276 -j DROP --A logdrop-277 -m limit --limit 1/second -j LOG --A logdrop-277 -j DROP --A logdrop-278 -m limit --limit 1/second -j LOG --A logdrop-278 -j DROP --A logdrop-279 -m limit --limit 1/second -j LOG --A logdrop-279 -j DROP --A logdrop-28 -m limit --limit 1/second -j LOG --A logdrop-28 -j DROP --A logdrop-280 -m limit --limit 1/second -j LOG --A logdrop-280 -j DROP --A logdrop-281 -m limit --limit 1/second -j LOG --A logdrop-281 -j DROP --A logdrop-282 -m limit --limit 1/second -j LOG --A logdrop-282 -j DROP --A logdrop-283 -m limit --limit 1/second -j LOG --A logdrop-283 -j DROP --A logdrop-284 -m limit --limit 1/second -j LOG --A logdrop-284 -j DROP --A logdrop-285 -m limit --limit 1/second -j LOG --A logdrop-285 -j DROP --A logdrop-286 -m limit --limit 1/second -j LOG --A logdrop-286 -j DROP --A logdrop-287 -m limit --limit 1/second -j LOG --A logdrop-287 -j DROP --A logdrop-288 -m limit --limit 1/second -j LOG --A logdrop-288 -j DROP --A logdrop-289 -m limit --limit 1/second -j LOG --A logdrop-289 -j DROP --A logdrop-29 -m limit --limit 1/second -j LOG --A logdrop-29 -j DROP --A logdrop-290 -m limit --limit 1/second -j LOG --A logdrop-290 -j DROP --A logdrop-291 -m limit --limit 1/second -j LOG --A logdrop-291 -j DROP --A logdrop-292 -m limit --limit 1/second -j LOG --A logdrop-292 -j DROP --A logdrop-293 -m limit --limit 1/second -j LOG --A logdrop-293 -j DROP --A logdrop-294 -m limit --limit 1/second -j LOG --A logdrop-294 -j DROP --A logdrop-295 -m limit --limit 1/second -j LOG --A logdrop-295 -j DROP --A logdrop-296 -m limit --limit 1/second -j LOG --A logdrop-296 -j DROP --A logdrop-297 -m limit --limit 1/second -j LOG --A logdrop-297 -j DROP --A logdrop-298 -m limit --limit 1/second -j LOG --A logdrop-298 -j DROP --A logdrop-299 -m limit --limit 1/second -j LOG --A logdrop-299 -j DROP --A logdrop-3 -m limit --limit 1/second -j LOG --A logdrop-3 -j DROP --A logdrop-30 -m limit --limit 1/second -j LOG --A logdrop-30 -j DROP --A logdrop-300 -m limit --limit 1/second -j LOG --A logdrop-300 -j DROP --A logdrop-301 -m limit --limit 1/second -j LOG --A logdrop-301 -j DROP --A logdrop-302 -m limit --limit 1/second -j LOG --A logdrop-302 -j DROP --A logdrop-303 -m limit --limit 1/second -j LOG --A logdrop-303 -j DROP --A logdrop-304 -m limit --limit 1/second -j LOG --A logdrop-304 -j DROP --A logdrop-305 -m limit --limit 1/second -j LOG --A logdrop-305 -j DROP --A logdrop-306 -m limit --limit 1/second -j LOG --A logdrop-306 -j DROP --A logdrop-307 -m limit --limit 1/second -j LOG --A logdrop-307 -j DROP --A logdrop-308 -m limit --limit 1/second -j LOG --A logdrop-308 -j DROP --A logdrop-309 -m limit --limit 1/second -j LOG --A logdrop-309 -j DROP --A logdrop-31 -m limit --limit 1/second -j LOG --A logdrop-31 -j DROP --A logdrop-310 -m limit --limit 1/second -j LOG --A logdrop-310 -j DROP --A logdrop-311 -m limit --limit 1/second -j LOG --A logdrop-311 -j DROP --A logdrop-312 -m limit --limit 1/second -j LOG --A logdrop-312 -j DROP --A logdrop-313 -m limit --limit 1/second -j LOG --A logdrop-313 -j DROP --A logdrop-314 -m limit --limit 1/second -j LOG --A logdrop-314 -j DROP --A logdrop-315 -m limit --limit 1/second -j LOG --A logdrop-315 -j DROP --A logdrop-316 -m limit --limit 1/second -j LOG --A logdrop-316 -j DROP --A logdrop-317 -m limit --limit 1/second -j LOG --A logdrop-317 -j DROP --A logdrop-318 -m limit --limit 1/second -j LOG --A logdrop-318 -j DROP --A logdrop-319 -m limit --limit 1/second -j LOG --A logdrop-319 -j DROP --A logdrop-32 -m limit --limit 1/second -j LOG --A logdrop-32 -j DROP --A logdrop-320 -m limit --limit 1/second -j LOG --A logdrop-320 -j DROP --A logdrop-321 -m limit --limit 1/second -j LOG --A logdrop-321 -j DROP --A logdrop-322 -m limit --limit 1/second -j LOG --A logdrop-322 -j DROP --A logdrop-323 -m limit --limit 1/second -j LOG --A logdrop-323 -j DROP --A logdrop-324 -m limit --limit 1/second -j LOG --A logdrop-324 -j DROP --A logdrop-325 -m limit --limit 1/second -j LOG --A logdrop-325 -j DROP --A logdrop-326 -m limit --limit 1/second -j LOG --A logdrop-326 -j DROP --A logdrop-327 -m limit --limit 1/second -j LOG --A logdrop-327 -j DROP --A logdrop-328 -m limit --limit 1/second -j LOG --A logdrop-328 -j DROP --A logdrop-329 -m limit --limit 1/second -j LOG --A logdrop-329 -j DROP --A logdrop-33 -m limit --limit 1/second -j LOG --A logdrop-33 -j DROP --A logdrop-330 -m limit --limit 1/second -j LOG --A logdrop-330 -j DROP --A logdrop-331 -m limit --limit 1/second -j LOG --A logdrop-331 -j DROP --A logdrop-332 -m limit --limit 1/second -j LOG --A logdrop-332 -j DROP --A logdrop-333 -m limit --limit 1/second -j LOG --A logdrop-333 -j DROP --A logdrop-334 -m limit --limit 1/second -j LOG --A logdrop-334 -j DROP --A logdrop-335 -m limit --limit 1/second -j LOG --A logdrop-335 -j DROP --A logdrop-336 -m limit --limit 1/second -j LOG --A logdrop-336 -j DROP --A logdrop-337 -m limit --limit 1/second -j LOG --A logdrop-337 -j DROP --A logdrop-338 -m limit --limit 1/second -j LOG --A logdrop-338 -j DROP --A logdrop-339 -m limit --limit 1/second -j LOG --A logdrop-339 -j DROP --A logdrop-34 -m limit --limit 1/second -j LOG --A logdrop-34 -j DROP --A logdrop-340 -m limit --limit 1/second -j LOG --A logdrop-340 -j DROP --A logdrop-341 -m limit --limit 1/second -j LOG --A logdrop-341 -j DROP --A logdrop-342 -m limit --limit 1/second -j LOG --A logdrop-342 -j DROP --A logdrop-343 -m limit --limit 1/second -j LOG --A logdrop-343 -j DROP --A logdrop-344 -m limit --limit 1/second -j LOG --A logdrop-344 -j DROP --A logdrop-345 -m limit --limit 1/second -j LOG --A logdrop-345 -j DROP --A logdrop-346 -m limit --limit 1/second -j LOG --A logdrop-346 -j DROP --A logdrop-347 -m limit --limit 1/second -j LOG --A logdrop-347 -j DROP --A logdrop-348 -m limit --limit 1/second -j LOG --A logdrop-348 -j DROP --A logdrop-349 -m limit --limit 1/second -j LOG --A logdrop-349 -j DROP --A logdrop-35 -m limit --limit 1/second -j LOG --A logdrop-35 -j DROP --A logdrop-350 -m limit --limit 1/second -j LOG --A logdrop-350 -j DROP --A logdrop-351 -m limit --limit 1/second -j LOG --A logdrop-351 -j DROP --A logdrop-352 -m limit --limit 1/second -j LOG --A logdrop-352 -j DROP --A logdrop-353 -m limit --limit 1/second -j LOG --A logdrop-353 -j DROP --A logdrop-354 -m limit --limit 1/second -j LOG --A logdrop-354 -j DROP --A logdrop-355 -m limit --limit 1/second -j LOG --A logdrop-355 -j DROP --A logdrop-356 -m limit --limit 1/second -j LOG --A logdrop-356 -j DROP --A logdrop-357 -m limit --limit 1/second -j LOG --A logdrop-357 -j DROP --A logdrop-358 -m limit --limit 1/second -j LOG --A logdrop-358 -j DROP --A logdrop-359 -m limit --limit 1/second -j LOG --A logdrop-359 -j DROP --A logdrop-36 -m limit --limit 1/second -j LOG --A logdrop-36 -j DROP --A logdrop-360 -m limit --limit 1/second -j LOG --A logdrop-360 -j DROP --A logdrop-361 -m limit --limit 1/second -j LOG --A logdrop-361 -j DROP --A logdrop-362 -m limit --limit 1/second -j LOG --A logdrop-362 -j DROP --A logdrop-363 -m limit --limit 1/second -j LOG --A logdrop-363 -j DROP --A logdrop-364 -m limit --limit 1/second -j LOG --A logdrop-364 -j DROP --A logdrop-365 -m limit --limit 1/second -j LOG --A logdrop-365 -j DROP --A logdrop-366 -m limit --limit 1/second -j LOG --A logdrop-366 -j DROP --A logdrop-367 -m limit --limit 1/second -j LOG --A logdrop-367 -j DROP --A logdrop-368 -m limit --limit 1/second -j LOG --A logdrop-368 -j DROP --A logdrop-369 -m limit --limit 1/second -j LOG --A logdrop-369 -j DROP --A logdrop-37 -m limit --limit 1/second -j LOG --A logdrop-37 -j DROP --A logdrop-370 -m limit --limit 1/second -j LOG --A logdrop-370 -j DROP --A logdrop-371 -m limit --limit 1/second -j LOG --A logdrop-371 -j DROP --A logdrop-372 -m limit --limit 1/second -j LOG --A logdrop-372 -j DROP --A logdrop-373 -m limit --limit 1/second -j LOG --A logdrop-373 -j DROP --A logdrop-374 -m limit --limit 1/second -j LOG --A logdrop-374 -j DROP --A logdrop-375 -m limit --limit 1/second -j LOG --A logdrop-375 -j DROP --A logdrop-376 -m limit --limit 1/second -j LOG --A logdrop-376 -j DROP --A logdrop-377 -m limit --limit 1/second -j LOG --A logdrop-377 -j DROP --A logdrop-378 -m limit --limit 1/second -j LOG --A logdrop-378 -j DROP --A logdrop-379 -m limit --limit 1/second -j LOG --A logdrop-379 -j DROP --A logdrop-38 -m limit --limit 1/second -j LOG --A logdrop-38 -j DROP --A logdrop-380 -m limit --limit 1/second -j LOG --A logdrop-380 -j DROP --A logdrop-381 -m limit --limit 1/second -j LOG --A logdrop-381 -j DROP --A logdrop-382 -m limit --limit 1/second -j LOG --A logdrop-382 -j DROP --A logdrop-383 -m limit --limit 1/second -j LOG --A logdrop-383 -j DROP --A logdrop-384 -m limit --limit 1/second -j LOG --A logdrop-384 -j DROP --A logdrop-385 -m limit --limit 1/second -j LOG --A logdrop-385 -j DROP --A logdrop-386 -m limit --limit 1/second -j LOG --A logdrop-386 -j DROP --A logdrop-387 -m limit --limit 1/second -j LOG --A logdrop-387 -j DROP --A logdrop-388 -m limit --limit 1/second -j LOG --A logdrop-388 -j DROP --A logdrop-389 -m limit --limit 1/second -j LOG --A logdrop-389 -j DROP --A logdrop-39 -m limit --limit 1/second -j LOG --A logdrop-39 -j DROP --A logdrop-390 -m limit --limit 1/second -j LOG --A logdrop-390 -j DROP --A logdrop-391 -m limit --limit 1/second -j LOG --A logdrop-391 -j DROP --A logdrop-392 -m limit --limit 1/second -j LOG --A logdrop-392 -j DROP --A logdrop-393 -m limit --limit 1/second -j LOG --A logdrop-393 -j DROP --A logdrop-394 -m limit --limit 1/second -j LOG --A logdrop-394 -j DROP --A logdrop-395 -m limit --limit 1/second -j LOG --A logdrop-395 -j DROP --A logdrop-396 -m limit --limit 1/second -j LOG --A logdrop-396 -j DROP --A logdrop-397 -m limit --limit 1/second -j LOG --A logdrop-397 -j DROP --A logdrop-398 -m limit --limit 1/second -j LOG --A logdrop-398 -j DROP --A logdrop-399 -m limit --limit 1/second -j LOG --A logdrop-399 -j DROP --A logdrop-4 -m limit --limit 1/second -j LOG --A logdrop-4 -j DROP --A logdrop-40 -m limit --limit 1/second -j LOG --A logdrop-40 -j DROP --A logdrop-400 -m limit --limit 1/second -j LOG --A logdrop-400 -j DROP --A logdrop-401 -m limit --limit 1/second -j LOG --A logdrop-401 -j DROP --A logdrop-402 -m limit --limit 1/second -j LOG --A logdrop-402 -j DROP --A logdrop-403 -m limit --limit 1/second -j LOG --A logdrop-403 -j DROP --A logdrop-404 -m limit --limit 1/second -j LOG --A logdrop-404 -j DROP --A logdrop-405 -m limit --limit 1/second -j LOG --A logdrop-405 -j DROP --A logdrop-406 -m limit --limit 1/second -j LOG --A logdrop-406 -j DROP --A logdrop-407 -m limit --limit 1/second -j LOG --A logdrop-407 -j DROP --A logdrop-408 -m limit --limit 1/second -j LOG --A logdrop-408 -j DROP --A logdrop-409 -m limit --limit 1/second -j LOG --A logdrop-409 -j DROP --A logdrop-41 -m limit --limit 1/second -j LOG --A logdrop-41 -j DROP --A logdrop-410 -m limit --limit 1/second -j LOG --A logdrop-410 -j DROP --A logdrop-411 -m limit --limit 1/second -j LOG --A logdrop-411 -j DROP --A logdrop-412 -m limit --limit 1/second -j LOG --A logdrop-412 -j DROP --A logdrop-413 -m limit --limit 1/second -j LOG --A logdrop-413 -j DROP --A logdrop-414 -m limit --limit 1/second -j LOG --A logdrop-414 -j DROP --A logdrop-415 -m limit --limit 1/second -j LOG --A logdrop-415 -j DROP --A logdrop-416 -m limit --limit 1/second -j LOG --A logdrop-416 -j DROP --A logdrop-417 -m limit --limit 1/second -j LOG --A logdrop-417 -j DROP --A logdrop-418 -m limit --limit 1/second -j LOG --A logdrop-418 -j DROP --A logdrop-419 -m limit --limit 1/second -j LOG --A logdrop-419 -j DROP --A logdrop-42 -m limit --limit 1/second -j LOG --A logdrop-42 -j DROP --A logdrop-420 -m limit --limit 1/second -j LOG --A logdrop-420 -j DROP --A logdrop-421 -m limit --limit 1/second -j LOG --A logdrop-421 -j DROP --A logdrop-422 -m limit --limit 1/second -j LOG --A logdrop-422 -j DROP --A logdrop-423 -m limit --limit 1/second -j LOG --A logdrop-423 -j DROP --A logdrop-424 -m limit --limit 1/second -j LOG --A logdrop-424 -j DROP --A logdrop-425 -m limit --limit 1/second -j LOG --A logdrop-425 -j DROP --A logdrop-426 -m limit --limit 1/second -j LOG --A logdrop-426 -j DROP --A logdrop-427 -m limit --limit 1/second -j LOG --A logdrop-427 -j DROP --A logdrop-428 -m limit --limit 1/second -j LOG --A logdrop-428 -j DROP --A logdrop-429 -m limit --limit 1/second -j LOG --A logdrop-429 -j DROP --A logdrop-43 -m limit --limit 1/second -j LOG --A logdrop-43 -j DROP --A logdrop-430 -m limit --limit 1/second -j LOG --A logdrop-430 -j DROP --A logdrop-431 -m limit --limit 1/second -j LOG --A logdrop-431 -j DROP --A logdrop-432 -m limit --limit 1/second -j LOG --A logdrop-432 -j DROP --A logdrop-433 -m limit --limit 1/second -j LOG --A logdrop-433 -j DROP --A logdrop-434 -m limit --limit 1/second -j LOG --A logdrop-434 -j DROP --A logdrop-435 -m limit --limit 1/second -j LOG --A logdrop-435 -j DROP --A logdrop-436 -m limit --limit 1/second -j LOG --A logdrop-436 -j DROP --A logdrop-437 -m limit --limit 1/second -j LOG --A logdrop-437 -j DROP --A logdrop-438 -m limit --limit 1/second -j LOG --A logdrop-438 -j DROP --A logdrop-439 -m limit --limit 1/second -j LOG --A logdrop-439 -j DROP --A logdrop-44 -m limit --limit 1/second -j LOG --A logdrop-44 -j DROP --A logdrop-440 -m limit --limit 1/second -j LOG --A logdrop-440 -j DROP --A logdrop-441 -m limit --limit 1/second -j LOG --A logdrop-441 -j DROP --A logdrop-442 -m limit --limit 1/second -j LOG --A logdrop-442 -j DROP --A logdrop-443 -m limit --limit 1/second -j LOG --A logdrop-443 -j DROP --A logdrop-444 -m limit --limit 1/second -j LOG --A logdrop-444 -j DROP --A logdrop-445 -m limit --limit 1/second -j LOG --A logdrop-445 -j DROP --A logdrop-446 -m limit --limit 1/second -j LOG --A logdrop-446 -j DROP --A logdrop-447 -m limit --limit 1/second -j LOG --A logdrop-447 -j DROP --A logdrop-448 -m limit --limit 1/second -j LOG --A logdrop-448 -j DROP --A logdrop-449 -m limit --limit 1/second -j LOG --A logdrop-449 -j DROP --A logdrop-45 -m limit --limit 1/second -j LOG --A logdrop-45 -j DROP --A logdrop-450 -m limit --limit 1/second -j LOG --A logdrop-450 -j DROP --A logdrop-451 -m limit --limit 1/second -j LOG --A logdrop-451 -j DROP --A logdrop-452 -m limit --limit 1/second -j LOG --A logdrop-452 -j DROP --A logdrop-453 -m limit --limit 1/second -j LOG --A logdrop-453 -j DROP --A logdrop-454 -m limit --limit 1/second -j LOG --A logdrop-454 -j DROP --A logdrop-455 -m limit --limit 1/second -j LOG --A logdrop-455 -j DROP --A logdrop-456 -m limit --limit 1/second -j LOG --A logdrop-456 -j DROP --A logdrop-457 -m limit --limit 1/second -j LOG --A logdrop-457 -j DROP --A logdrop-458 -m limit --limit 1/second -j LOG --A logdrop-458 -j DROP --A logdrop-46 -m limit --limit 1/second -j LOG --A logdrop-46 -j DROP --A logdrop-47 -m limit --limit 1/second -j LOG --A logdrop-47 -j DROP --A logdrop-48 -m limit --limit 1/second -j LOG --A logdrop-48 -j DROP --A logdrop-49 -m limit --limit 1/second -j LOG --A logdrop-49 -j DROP --A logdrop-5 -m limit --limit 1/second -j LOG --A logdrop-5 -j DROP --A logdrop-50 -m limit --limit 1/second -j LOG --A logdrop-50 -j DROP --A logdrop-51 -m limit --limit 1/second -j LOG --A logdrop-51 -j DROP --A logdrop-52 -m limit --limit 1/second -j LOG --A logdrop-52 -j DROP --A logdrop-53 -m limit --limit 1/second -j LOG --A logdrop-53 -j DROP --A logdrop-54 -m limit --limit 1/second -j LOG --A logdrop-54 -j DROP --A logdrop-55 -m limit --limit 1/second -j LOG --A logdrop-55 -j DROP --A logdrop-56 -m limit --limit 1/second -j LOG --A logdrop-56 -j DROP --A logdrop-57 -m limit --limit 1/second -j LOG --A logdrop-57 -j DROP --A logdrop-58 -m limit --limit 1/second -j LOG --A logdrop-58 -j DROP --A logdrop-59 -m limit --limit 1/second -j LOG --A logdrop-59 -j DROP --A logdrop-6 -m limit --limit 1/second -j LOG --A logdrop-6 -j DROP --A logdrop-60 -m limit --limit 1/second -j LOG --A logdrop-60 -j DROP --A logdrop-61 -m limit --limit 1/second -j LOG --A logdrop-61 -j DROP --A logdrop-62 -m limit --limit 1/second -j LOG --A logdrop-62 -j DROP --A logdrop-63 -m limit --limit 1/second -j LOG --A logdrop-63 -j DROP --A logdrop-64 -m limit --limit 1/second -j LOG --A logdrop-64 -j DROP --A logdrop-65 -m limit --limit 1/second -j LOG --A logdrop-65 -j DROP --A logdrop-66 -m limit --limit 1/second -j LOG --A logdrop-66 -j DROP --A logdrop-67 -m limit --limit 1/second -j LOG --A logdrop-67 -j DROP --A logdrop-68 -m limit --limit 1/second -j LOG --A logdrop-68 -j DROP --A logdrop-69 -m limit --limit 1/second -j LOG --A logdrop-69 -j DROP --A logdrop-7 -m limit --limit 1/second -j LOG --A logdrop-7 -j DROP --A logdrop-70 -m limit --limit 1/second -j LOG --A logdrop-70 -j DROP --A logdrop-71 -m limit --limit 1/second -j LOG --A logdrop-71 -j DROP --A logdrop-72 -m limit --limit 1/second -j LOG --A logdrop-72 -j DROP --A logdrop-73 -m limit --limit 1/second -j LOG --A logdrop-73 -j DROP --A logdrop-74 -m limit --limit 1/second -j LOG --A logdrop-74 -j DROP --A logdrop-75 -m limit --limit 1/second -j LOG --A logdrop-75 -j DROP --A logdrop-76 -m limit --limit 1/second -j LOG --A logdrop-76 -j DROP --A logdrop-77 -m limit --limit 1/second -j LOG --A logdrop-77 -j DROP --A logdrop-78 -m limit --limit 1/second -j LOG --A logdrop-78 -j DROP --A logdrop-79 -m limit --limit 1/second -j LOG --A logdrop-79 -j DROP --A logdrop-8 -m limit --limit 1/second -j LOG --A logdrop-8 -j DROP --A logdrop-80 -m limit --limit 1/second -j LOG --A logdrop-80 -j DROP --A logdrop-81 -m limit --limit 1/second -j LOG --A logdrop-81 -j DROP --A logdrop-82 -m limit --limit 1/second -j LOG --A logdrop-82 -j DROP --A logdrop-83 -m limit --limit 1/second -j LOG --A logdrop-83 -j DROP --A logdrop-84 -m limit --limit 1/second -j LOG --A logdrop-84 -j DROP --A logdrop-85 -m limit --limit 1/second -j LOG --A logdrop-85 -j DROP --A logdrop-86 -m limit --limit 1/second -j LOG --A logdrop-86 -j DROP --A logdrop-87 -m limit --limit 1/second -j LOG --A logdrop-87 -j DROP --A logdrop-88 -m limit --limit 1/second -j LOG --A logdrop-88 -j DROP --A logdrop-89 -m limit --limit 1/second -j LOG --A logdrop-89 -j DROP --A logdrop-9 -m limit --limit 1/second -j LOG --A logdrop-9 -j DROP --A logdrop-90 -m limit --limit 1/second -j LOG --A logdrop-90 -j DROP --A logdrop-91 -m limit --limit 1/second -j LOG --A logdrop-91 -j DROP --A logdrop-92 -m limit --limit 1/second -j LOG --A logdrop-92 -j DROP --A logdrop-93 -m limit --limit 1/second -j LOG --A logdrop-93 -j DROP --A logdrop-94 -m limit --limit 1/second -j LOG --A logdrop-94 -j DROP --A logdrop-95 -m limit --limit 1/second -j LOG --A logdrop-95 -j DROP --A logdrop-96 -m limit --limit 1/second -j LOG --A logdrop-96 -j DROP --A logdrop-97 -m limit --limit 1/second -j LOG --A logdrop-97 -j DROP --A logdrop-98 -m limit --limit 1/second -j LOG --A logdrop-98 -j DROP --A logdrop-99 -m limit --limit 1/second -j LOG --A logdrop-99 -j DROP --A logpass-0 -m limit --limit 1/second -j LOG --A logpass-16 -m limit --limit 1/second -j LOG --A logpass-30 -m limit --limit 1/second -j LOG --A logpass-37 -m limit --limit 1/second -j LOG --A logpass-50 -m limit --limit 1/second -j LOG --A logpass-9 -m limit --limit 1/second -j LOG --A logreject-0 -m limit --limit 1/second -j LOG --A logreject-0 -j REJECT --A logtarpit-0 -m limit --limit 1/second -j LOG --A logtarpit-0 -j tarpit --A tarpit -p tcp -j TARPIT --A tarpit -j DROP -COMMIT -*mangle -:INPUT ACCEPT [0:0] -:OUTPUT ACCEPT [0:0] -:POSTROUTING ACCEPT [0:0] -:PREROUTING ACCEPT [0:0] --A INPUT -j MARK --set-mark 2 --A OUTPUT -j MARK --set-mark 0 --A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 --A PREROUTING -i eth0 -j MARK --set-mark 0 -COMMIT -*raw -:OUTPUT ACCEPT [0:0] -:PREROUTING ACCEPT [0:0] --A OUTPUT -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -p tcp --dport 80 -j CT --notrack --A OUTPUT -p esp -j CT --notrack --A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack --A OUTPUT -j CT --notrack --A PREROUTING -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack --A PREROUTING -i eth0 -j CT --notrack --A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack -COMMIT -- cgit v1.2.3